IT MANAGER/SENIOR SYSTEMS ADMINISTRATOR

Role: IT MANAGER/SENIOR SYSTEMS ADMINISTRATOR

Location: New York City, NY or Old Greenwich, CT (5Days a Week Onsite)

Coreresponsibilities

• Identity and accessgovernance: Lead the administration of ActiveDirectory architecture, group design, and the service-account estate: serviceprincipal names, Entra ID application registrations, Graph API access, andcredential rotation through our password vault. Maintain existing access standards,run periodic access and service-account reviews, and evaluate and processaccess exceptions in accordance with established approval procedures.
• File and storageservices: administer the Windows and Sambafile-server estate across headquarters, the offsite datacenter, and remoteoffices; manage capacity, quotas, and monitoring; plan and execute server andshare migrations; oversee archiving, backup, and data-governance tooling.
• Email andcollaboration platforms: administer Microsoft 365 andExchange Online, including mail routing, mail security and filtering, DLP,retention and journaling, and the Teams, SharePoint, and OneDrive estate.
• Server andvirtualization infrastructure: build,patch, and maintain the Windows Server estate on VMware vSphere; hands-on workwith physical server hardware including racking, cabling, diagnostics, andcomponent replacement.
• Network andperimeter: Administer and troubleshoot TCP/IP, DNS,DHCP, VLANs, wireless networks, certificates, and infrastructure-monitoringplatforms. Configure, monitor, and manage firewalls to enforce access controlsand protect the corporate network against unauthorized access and cyberthreats. Manage telecom and ISP vendor relationships.
• Security operations: administer endpoint protection,data-governance, and email-security platforms; manage multi-factorauthentication, conditional access, and geographic access restrictions; run thesecurity-awareness and phishing-simulation program; respond to alerts and vulnerabilities.
• eDiscovery andlegal hold: perform mailbox and file searches insupport of subpoenas, regulatory requests, and litigation; preserve, collect,and produce data under the direction of counsel and Compliance, handling all ofit with strict confidentiality.
• Telephony and voiceservices: support the current Avaya PBX, associatedanalog lines, and voice-service vendors; troubleshoot and coordinate resolutionof telephony incidents, provisioning, and office moves. Assist with the plannedtransition of PBX operations to an outsourced provider and oversee the vendorrelationship thereafter.
• Automation: use PowerShell and Python to automate provisioning, reporting, andtask scheduling, and maintain our enterprise job scheduling platform.
• License, subscription,and vendor governance: Oversee softwareand cloud-service entitlements, licensing, renewals, procurement, and vendorrelationships. Review user licensing and assignments across platforms such asAdobe, Box, Microsoft 365/Intune, Visual Studio, Verizon, Bloomberg, andsimilar services. Recommend and implement subscription changes thatappropriately align user access, device-management, security, operationalneeds, and vendor-licensing requirements.
• Project and vendorcoordination: Own the technical delivery of internaland vendor-led infrastructure and security projects from requirementsgathering, scoping, resource planning, testing, and implementation throughacceptance and documentation. Define and maintain project plans, timelines,dependencies, risks, action items, and internal and vendor resource needs;track progress, elevate issues, and coordinate stakeholders throughcompletion.
• Change managementand IT control reviews: Maintain accuraterecords of material infrastructure, configuration, and access changes acrosson-premises systems, AWS, and managed-service-provider environments. Performmonthly reviews of Active Directory group membership, workstationconfiguration, local administrator access, server assignments, and system usageand monitoring; investigate and remediate discrepancies; and document findings,approvals, exceptions, and follow-up actions.
• IT securityoversight and policy compliance: Maintainoperational controls that support IT policies, client and regulatorydue-diligence questionnaires (DDQs), and external security representations.Ensure documented policies, DDQ responses, and day-to-day practices remainaligned. Monitor and validate controls for password and credential rotation,service accounts, least-privilege access, patching and reboot compliance, andthe documentation, approval, and periodic review of exceptions.
• Technicalleadership and escalation: Route andprioritize support tickets, help coordinate support coverage and issueresolution, and serve as the technical escalation point for IT support staff.Mentor junior team members and promote clear documentation, consistentoperational practices, and timely risk escalation.
• Facilities andcritical-environment infrastructure: monitor andcoordinate the power, cooling, and environmental systems supporting officetechnology rooms and server rooms, including UPS units, PDUs, circuits,temperature/humidity monitoring, and HVAC. Coordinate with building management,datacenter providers, electricians, and HVAC vendors during incidents,maintenance, capacity changes, and planned shutdowns.

Skillsand qualifications

• In-depth knowledge of MicrosoftWindows Server, Active Directory, Microsoft 365, MS Teams, andMulti-Factor Authentication.
• Hands-on experience administeringnon-human identity: service accounts, service principal names, Entra IDapp registrations, and credential lifecycle management.
• Experience with VMware vSpherevirtualization.
• Strong experience administeringWindows file servers and network storage at scale - permissions, quotas,capacity monitoring, and migrations.
• Strong understanding of email flowand mail security, including routing, spam, malware, and DLP; hands-onexperience with a secure email gateway (Proofpoint, Mimecast, or similar).
• Strong understanding of networkingconcepts and protocols (TCP/IP, DNS, DHCP, VLANs, etc.), coupled withexperience in configuring, monitoring, and managing firewalls to securethe corporate network, and enforce access controls.
• Experience with endpoint protectionand data-governance platforms (CrowdStrike, Varonis, or similar).
• Proficiency with PowerShell forinfrastructure automation, reporting, and administration.
• Hands-on experience with physicalserver hardware, including racking, structured cabling, hardwarediagnostics, and component replacement (disks, memory, power supplies,etc.).
• Working knowledge of the power andenvironmental requirements of server rooms and network closets, includingUPS systems, rack PDUs, electrical capacity, cooling, temperature/humiditymonitoring, and escalation to facilities, datacenter, and buildingvendors.
• Proven experience as a SystemsAdministrator or similar role, with 7+ years managing enterprise ITinfrastructure in a hands-on environment.
• Experience supporting DR,backup/restore testing, infrastructure monitoring, change control, anddocumented operational procedures.
• Experience operating and evidencingIT controls in a regulated or audited environment, including accessreviews, change management, exception management, and policy compliance.
• Demonstrated experience withsoftware and cloud-license governance, entitlement reviews, vendorrenewals, and cost-conscious subscription management.
• Proven ability to lead technicalprojects and coordinate internal stakeholders, managed service providers,and other vendors from scope through implementation.
• Strong organizational skills, withthe judgment to identify control gaps, document risks, drive remediation,and communicate status clearly to technical and non-technicalstakeholders.

Preferredqualifications

• Bachelor's degree in ComputerScience, Information Technology, or related field (or equivalentexperience).
• Experience in financial services oranother regulated, audited environment.
• Exposure to eDiscovery, legal hold,or regulatory production processes.
• Experience with cloud computingplatforms such as AWS or Azure is a plus.
• Experience with configurationmanagement tooling (Ansible, PowerShell DSC, or similar) is beneficial.
• Familiarity with market dataplatforms, particularly Bloomberg administration and entitlements.
• Familiarity with Avaya PBXadministration, analog/POTS lines, and telecom vendor coordination.

Whatwe’re looking for

• Excellent problem-solving skills andattention to detail.
• Strong communication andinterpersonal skills, including the ability to explain technical issues tonon-technical stakeholders.
• Discretion and sound judgment whenhandling confidential company, employee, and legal data.
• A practical, service-oriented approach;able to balance competing priorities, document work clearly, and escalaterisks appropriately.
• Comfortable serving as a technicalescalation point and mentoring junior IT staff.
• On-site only — this is not a remoteor hybrid role.
• Occasional scheduled after-hourswork for patching windows and recovery testing.
• Ability to move and install ITequipment and work in server rooms, wiring closets, and office locationsas needed.
• If located in NYC, must have abilityto travel to CT or our DR site in Westchester as needed.