About This Role
This IT Administrator role is the company's in-house technology owner, responsible for keeping every user, device, system, and network working and secure. It is a hands-on generalist position that involves setting up new hires, fixing issues, administering Microsoft 365, protecting data, managing backups, and overseeing outside IT vendors. The role suits a practical problem solver comfortable with both shop-floor equipment and cloud administration.
Responsibilities
- Provide first-line and second-line support for all employees by ticket, phone, and in person; log every request and close it with a written resolution
- Build and issue laptops, desktops, phones, and tablets for new hires, so they are ready on the first day, using a standard image and checklist
- Run onboarding and offboarding with HR: create accounts, assign licenses and groups, and on separation disable access the same day, recover equipment, and transfer files and mailboxes
- Maintain a hardware and software asset register by user and serial number, including warranty dates and license counts
- Train employees on company systems, secure email habits, and phishing awareness
- Administer Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive, Forms, and Power Automate, including users, groups, shared mailboxes, distribution lists, and licensing
- Own the company's domains and DNS records, email security settings (SPF, DKIM, DMARC), and the company website hosting relationship
- Serve as the technical administrator for QuickBooks, Katana, Paylocity, and other cloud applications: user access, roles, integrations, and vendor support tickets
- Support Power Automate flows and scheduled reports that the business depends on and alert the owner the same day when one fails
- Support engineering CAD workstations and licenses, plotters, and printers, and keep shop-floor PCs, CNC equipment computers, and production tablets running
- Enforce multi-factor authentication on every account, a company password manager, and least-privilege access; no shared logins
- Manage endpoint protection, patching, and device encryption on all company computers and phones
- Run backups for Microsoft 365, cloud applications, and on-site data, and test a restore at least quarterly
- Protect confidential OEM engineering data and supplier and customer information under the company's NDAs and supplier access terms
- Watch for and respond to security incidents: phishing, compromised accounts, malware, and lost devices
- Report any incident to management the same day and keep an incident log
- Support Finance's controls against payment fraud: suspicious payment or bank-change requests are verified by phone before anyone acts
- Maintain the written IT policies (acceptable use, access control, backup and recovery, and incident response) and support cyber insurance applications and renewals