System Administrator

System Administrator Phoenix, AZ - Must be local to Phoenix AZ About KAEDIX KAEDIX exists to change how the world constructs fundamentally. Join us in pursuing transformational change in every aspect of AEC. Were made up of brilliant engineers, manufacturers, programmers, and other generalists who are united by the notion that to make great things intelligently is a worthy pursuit. Building Today. Transforming Tomorrow. About the Position KAEDIX is seeking a highly capable System Administrator (Contractor) to manage our internal IT systems across a hybrid team. This role combines Tier 12 helpdesk responsibilities with ad-hoc strategic infrastructure ownership, including MDM, endpoint security, identity management, and SSO integrations supported by the CIO. Youll support daily tech operations, troubleshoot quickly, and proactively shape systems to support KAEDIX as we scale. Your Goal: Ensure seamless daily operations while building a secure, automated, and future-ready IT foundation. Key Responsibilities Helpdesk & Support Provide chat/email/phone support for team-wide IT issues Troubleshoot macOS and Windows hardware/software issues Support Microsoft 365 (Outlook, Teams, OneDrive, SharePoint) Resolve MFA, identity, and access issues via Microsoft Entra ID Coordinate device pickup, provisioning, and replacements Provide onsite support in Phoenix for device swaps, conference gear, or connectivity issues Endpoint & Device Management Provision and maintain device inventory (Apple Business Manager) Administer Jamf for Apple devices (with future transition to Intune) Remote lock/wipe lost or offboarded devices Deploy policies and profiles for compliance, security, and performance Security & Compliance Monitor and respond to Microsoft Defender for Endpoint alerts Generate and review monthly device security reports Enforce Conditional Access and MFA policies Support SOC2 readiness and basic compliance hardening User Lifecycle Management Handle onboarding and offboarding of users across M365 and SaaS tools Provision RBAC-based access across key apps (e.g., Odoo, HubSpot, Todoist) Maintain rapid offboarding protocol: access revoked within 1 hour of request Proactive IT Operations Monitor systems for preventative risk or performance issues Conduct quarterly IT infrastructure reviews and share roadmap recommendations Recommend cost-effective tools or automations to improve workflows and security Strategic Initiatives Lead MDM migration from Jamf to Microsoft Intune Design and implement SSO workflows for key platforms (e.g., Todoist, Miro, Gusto) Build automated provisioning scripts or workflows across SaaS stack Partner with leadership to plan Zero Trust security and device lifecycle automation SLA Expectations Onsite support in Phoenix may be requested for P1 or P2 issues involving devices or connectivity. Critical (P1): Device down, MFA failure, account lockout First Response: < 15 minutes Resolution Target: < 4 hours High (P2): Odoo/HubSpot login issues, Defender alerts First Response: < 1 hour Resolution Target: < 1 business day Routine (P3): New user setup, file access, hardware sync First Response: < 4 business hours Resolution Target: < 3 business days Qualifications Education & Experience 3+ years in IT systems admin or support roles (including contractor/freelance experience) Experience managing both day-to-day IT and long-term systems design Prior work with small/hybrid or startup teams Technical Skills Expertise in Microsoft 365 administration (Exchange, Teams, OneDrive, SharePoint) Hands-on experience managing Apple Business Manager and Jamf for Apple fleets Familiar with Microsoft Defender for Endpoint: monitoring, triage, and reporting Comfortable with remote lock/wipe, compliance policies, and secure device provisioning Familiar with SSO/SAML integrations and MDM migrations Comfortable scripting in PowerShell or Bash Certifications (Preferred, but not required) Microsoft Certified: Modern Desktop Administrator Associate Microsoft Certified: Security, Compliance, and Identity Fundamentals Jamf Certified Associate or 200-level+ certification CompTIA Security+ or equivalent Apple Certified Support Professional (ACSP) Soft Skills Clear and proactive communicator Comfortable with minimal oversight and high autonomy Bias toward secure, scalable, and automated solutions Strong follow-through and systems thinking mindset Work Environment Contractor role with flexible, part-time hours Primarily remote, but must be available for onsite response in Phoenix when needed Fast-paced, experimental culture where execution wins over perfection Regular async collaboration with CIO and ops/tech teams Lightly structured environment initiative is critical #J-18808-Ljbffr