We are seeking a skilled System Administrator to ensure the stability and integrity of our IT infrastructure. Success in this role means maintaining optimal system performance and providing exceptional support to our users.
Riverbay Managment Group provides management and business operations support for a portfolio of early stage and growth companies.
The Role
We're looking for a hands-on Microsoft 365 Systems Administrator to own day-to-day management of our cloud environment across RBMG and its affiliates. You'll keep our tenant secure, well maintained and easy to use, and support a remote, bring-your-own-device (BYOD) workforce. You'll also be the primary point of contact for our managed service provider on escalations and project work.
This is a builder role in a growing organization. You'll shape standards, not just follow them.
What You'll Do
• Tenant administration: Manage Exchange Online, Teams, OneDrive and SharePoint, including user onboarding and offboarding, licensing, groups, mailboxes, shared resources and retention settings.
• Identity and access: Administer Microsoft Entra ID, including conditional access, MFA, role-based access and privileged access through Privileged Identity Management (PIM). Follow approval workflows for high-risk changes.
• Security and compliance: Configure and monitor Microsoft Defender, Purview (DLP, sensitivity labels, retention) and Secure Score. Respond to alerts, support incident response, and implement security and compliance requirements in partnership with Risk Management.
• BYOD device and app management: Use Microsoft Intune to protect company data on personal devices, primarily through app protection policies (MAM) rather than full device enrollment, respecting employee privacy while keeping data secure.
• System maintenance: Manage service health, change rollouts, Microsoft roadmap updates, backups, documentation and configuration baselines to keep the environment clean and auditable.
• End user support: Provide responsive, friendly Tier 1–2 support through our Teams-integrated ticketing, and create how-to guides that help colleagues get the most out of Microsoft 365.
• Vendor coordination: Serve as the main liaison with our MSP for escalations, after-hours coverage and project work. Review vendor changes and hold them to agreed standards.
• Multi-entity support: Support users and configurations for several affiliated companies within a shared tenant, keeping access, data and branding properly separated.
What We're Looking For
• 3–5+ years administering Microsoft 365 in a cloud-first environment
• Strong working knowledge of Exchange Online, Teams, OneDrive/SharePoint, Entra ID and Intune
• Experience securing BYOD or remote workforces, including conditional access and app protection policies
• Familiarity with Defender and Purview, and with security frameworks or audit support
• PowerShell scripting for Microsoft 365 administration and automation
• Clear communication with non-technical users and a service-first attitude
• Comfort working independently on a small, remote team
Nice to Have
• Microsoft certifications such as MS-102 (Microsoft 365 Administrator Expert), SC-300 or MD-102
• Experience in healthcare or another regulated environment (HIPAA awareness a plus)
• Experience managing a multi-entity or multi-brand tenant
• Experience working alongside a managed service provider
$60,000 - $80,000 per year