Junior Systems Administrator (Temporary, 6-Months)
Summary
A 6-month temporary Junior Systems Administrator role at Pyx Health, a cloud-native digital health company, covering for a sysadmin on extended leave. Day to day: managing Entra ID/Microsoft 365 identity, Intune endpoints, SaaS access (Salesforce), Tier 2 helpdesk escalations, patching, and compliance documentation in a 100% Azure environment.
Pyx Health is a cloud-native digital health company. Our IT environment is 100% Microsoft/Azure, with no on-premises infrastructure, and we comply with HITRUST r2 and HIPAA requirements. We are seeking a Junior Systems Administrator to cover for a Systems Administrator on extended leave.
This is a hands-on role on a five-person IT team. You will manage day-to-day identity, endpoint, and SaaS administration, support the helpdesk with escalations, and help keep our compliance evidence current. You will be expected to get up to speed quickly, work independently on defined tasks, and escalate clearly when something is outside your expertise.
Microsoft Entra ID and Microsoft 365 administration
- Manage user lifecycle in Entra ID: onboarding, permission and group changes, password resets, MFA and Conditional Access troubleshooting, and clean offboarding
- Administer Intune device profiles, compliance policies, and enrollment for Windows and macOS endpoints
- Support Single Sign-On (SAML/OIDC) configuration and troubleshooting for enterprise applications
- Resolve Exchange Online and Microsoft 365 issues escalated from the helpdesk
- Assist with Windows 365 Cloud PC provisioning and Azure resource housekeeping
SaaS and business application support
- Manage user access, roles, and permission sets in Salesforce and other SaaS platforms following least-privilege principles
- Assist with Salesforce sandbox refreshes and moving users in and out of test environment
- Support integrations between HRIS, identity, and business systems (provisioning flows, API and webhook troubleshooting)
Security and compliance
- Execute monthly patching cycles (Action1) and confirm endpoint compliance
- Follow documented procedures for access control, change management, and incident response
Helpdesk and documentation
- Serve as Tier 2 escalation for the Helpdesk Lead
- Keep runbooks and knowledge base articles current in Confluence
- 1 to 3 years of hands-on experience administering Microsoft Entra ID (Azure AD) and Microsoft 365 in a cloud-first or fully cloud environment, including device profiles, user permissions, offboarding, password resets, and SSO
- Working knowledge of Microsoft Intune device enrollment and configuration
- Solid understanding of role-based access control and user permission management across SaaS applications
- Experience troubleshooting VPN, DNS, and cloud connectivity issues
- Foundational networking knowledge (OSI model, TCP/IP, firewall and routing concepts)
- Basic SQL and comfort reading API and webhook log
- Clear written and verbal communication; able to document work and explain issues to non-technical staff
Preferred Qualifications
- Salesforce administration exposure, particularly permissions, profiles, and sandbox management
- Cisco Meraki dashboard experience
- Windows 365 or Azure Virtual Desktop experience
- Exposure to HIPAA, HITRUST, SOC 2, or similar compliance framework
- PowerShell or Microsoft Graph scripting