IT Systems Engineer

You own the identity, collaboration, and endpoint platforms every employee depends on: Active Directory and Entra ID, Microsoft 365 and Google Workspace, SSO for our SaaS stack, and device management across Windows and macOS. You script the repetitive work and document what you build.

Responsibilities:

Administer Active Directory and Entra ID: user lifecycle, groups, GPO, DNS, Entra Connect and hybrid sync health, Conditional Access, privileged-role and stale-account hygiene

Administer Microsoft 365 (Exchange, Teams, licensing) and Google Workspace (org units, groups, Drive governance, Entra-federated auth, multi-domain coexistence)

Own SSO onboarding and maintenance for SaaS applications in Entra (SAML/OIDC, SCIM where supported)

Endpoint management: Intune for Windows and Jamf for macOS, covering enrollment, compliance policy, patching, app deployment, and configuration baselines, in partnership with the desktop support team

Administer Mimecast and Webex Control Hub

Use scripting to make IT operations faster and more consistent: PowerShell and Graph for bulk user and license changes, group cleanup, reporting on stale accounts and device compliance, and Intune/Jamf deployment scripts. Look for the repetitive manual task and script it away

Own certificate renewals, service accounts, and backup verification for identity and SaaS data

Hands-on presence for the KC HQ: server room and network closet work, hardware receiving and staging, and onsite backup for AV and conference systems when the desktop team needs it

Maintain runbooks in the IT Confluence space

Tier 2 escalation for identity, licensing, collaboration, and endpoint tickets

Qualities:

4+ years in a Windows/Entra environment of 500+ users: AD (GPO, DNS, replication troubleshooting), Entra Connect, Conditional Access

Hands-on Intune and Jamf administration

2+ years administering Google Workspace, ideally alongside M365

Comfortable in PowerShell: you write your own scripts for day-to-day admin work (bulk changes, reporting, Intune remediations) and can read and adapt Graph API calls

SSO configuration and troubleshooting (Entra enterprise apps)

Networking literacy (DNS, DHCP, VLANs, VPN)

Documents without being asked

Plus: Jira/Confluence administration, Mimecast, agency or professional-services background

BarkleyOKRP’s Commitment to Diversity, Equity, Inclusion + Belonging

At BarkleyOKRP, DEI+B drives work that matters. We believe people and creativity are made of the same substance, and when every perspective is valued, the impact is stronger. We build belonging as a business strategy, power inclusive creativity that delivers measurable results, and hold ourselves accountable as a B Corp committed to progress over performative intent. When people are valued, the work carries greater impact.