IT Systems Engineer

You own the identity, collaboration, and endpoint platforms every employee depends on: Active Directory and Entra ID, Microsoft 365 and Google Workspace, SSO for our SaaS stack, and device management across Windows and macOS. You script the repetitive work and document what you build.Responsibilities:Administer Active Directory and Entra ID: user lifecycle, groups, GPO, DNS, Entra Connect and hybrid sync health, Conditional Access, privileged-role and stale-account hygieneAdminister Microsoft 365 (Exchange, Teams, licensing) and Google Workspace (org units, groups, Drive governance, Entra-federated auth, multi-domain coexistence)Own SSO onboarding and maintenance for SaaS applications in Entra (SAML/OIDC, SCIM where supported)Endpoint management: Intune for Windows and Jamf for macOS, covering enrollment, compliance policy, patching, app deployment, and configuration baselines, in partnership with the desktop support teamAdminister Mimecast and Webex Control HubUse scripting to make IT operations faster and more consistent: PowerShell and Graph for bulk user and license changes, group cleanup, reporting on stale accounts and device compliance, and Intune/Jamf deployment scripts. Look for the repetitive manual task and script it awayOwn certificate renewals, service accounts, and backup verification for identity and SaaS dataHands-on presence for the KC HQ: server room and network closet work, hardware receiving and staging, and onsite backup for AV and conference systems when the desktop team needs itMaintain runbooks in the IT Confluence spaceTier 2 escalation for identity, licensing, collaboration, and endpoint ticketsQualities:4+ years in a Windows/Entra environment of 500+ users: AD (GPO, DNS, replication troubleshooting), Entra Connect, Conditional AccessHands-on Intune and Jamf administration2+ years administering Google Workspace, ideally alongside M365Comfortable in PowerShell: you write your own scripts for day-to-day admin work (bulk changes, reporting, Intune remediations) and can read and adapt Graph API callsSSO configuration and troubleshooting (Entra enterprise apps)Networking literacy (DNS, DHCP, VLANs, VPN)Documents without being askedPlus: Jira/Confluence administration, Mimecast, agency or professional-services backgroundBarkleyOKRP’s Commitment to Diversity, Equity, Inclusion + BelongingAt BarkleyOKRP, DEI+B drives work that matters. We believe people and creativity are made of the same substance, and when every perspective is valued, the impact is stronger. We build belonging as a business strategy, power inclusive creativity that delivers measurable results, and hold ourselves accountable as a B Corp committed to progress over performative intent. When people are valued, the work carries greater impact.