System Administrator

We are seeking a skilled Systems Administrator to join our IT team. This is a hands-on, high-ownership role responsible for managing and securing our Microsoft-centric infrastructure, supporting daily IT operations across the organization, and acting as the primary IT point.
The ideal candidate is comfortable owning both operational support and security operations, thrives in a fast-paced environment, and has deep familiarity with the Microsoft 365 ecosystem including Intune, Defender for Endpoint, Azure AD, and Exchange.

Key Responsibilities
Microsoft 365 & Identity Management

• Administer Microsoft 365 tenant: user lifecycle, licensing, groups, and shared resources
• Manage Azure Active Directory (Entra ID) including conditional access, MFA, and SSO integrations
• Configure and maintain Exchange Online: mailboxes, shared mailboxes, distribution lists, mail flow rules
• Administer SharePoint Online and OneDrive policies and permissions
• Monitor and manage Microsoft 365 service health and incident response

Endpoint & Device Management (Intune)

• Own Microsoft Intune for Windows, macOS, iOS, and Android device management.
• Build and maintain device compliance policies, configuration profiles, and deployment rings
• Manage application packaging and deployment (Win32, MSIX, LOB apps) via Intune
• Support Autopilot provisioning and device onboarding workflows using Intune and Apple Business Manager
• Administer and troubleshoot IT peripherals.

Security Operations

• Manage Microsoft Defender for Endpoint — onboarding, policy configuration, alert triage, and remediation
• Monitor Microsoft Defender XDR / Security portal for threats, vulnerabilities, and incidents
• Administer Microsoft Purview for data classification, DLP, and compliance policies
• Manage Exchange Online Protection (EOP) including anti-spam, anti-phishing, and quarantine policies
• Maintain Tenant Allow/Block Lists and alert policies in Microsoft Defender
• Conduct periodic vulnerability assessments and remediation tracking via Defender Vulnerability Management
• Support security awareness initiatives including phishing simulation programs

Infrastructure & Cloud

• Manage Azure resources including subscriptions, resource groups, and IAM
• Administer and maintain Azure AD App Registrations and enterprise application integrations
• Support Logic Apps, Azure Communication Services, and automation workflows
• Monitor infrastructure health and manage cloud cost optimization
• Own backup and disaster recovery strategy, including Carbonite and Azure-native backup solutions

IT Operations & Helpdesk

• Serve as escalation point for day-to-day IT support requests across the organization and its’ different products
• Manage IT ticketing and helpdesk operations (Jira Service Management)
• Administer third-party SaaS platforms including HubSpot, Adobe, Business Central, Carbonite, Keeper, and others.
• Maintain IT asset inventory and procurement lifecycle.
• Manage vendor relationships and SaaS licensing renewals.
• Document processes, runbooks, and IT policies in Confluence.

Projects & Automation

• Lead IT infrastructure projects end-to-end from scoping through deployment.
• Build and maintain automation workflows (Power Automate, Azure Logic Apps) to improve operational efficiency.
• Participate in security audits and ITGC compliance reviews.
• Support onboarding and offboarding workflows and ensure timely access provisioning/deprovisioning.

Responsibility Area	% of Time	Priority
IT Operations & Helpdesk	20%	High
Endpoint & Device Management (Intune)	20%	High
Security Operations	20%	High
Microsoft 365 & Identity Management	15%	Medium
Infrastructure & Cloud	15%	Medium
Projects & Automation	5%	Low
Other / Ad-hoc	5%	Low

Required Qualifications

• 2+ years of experience in a Systems Administrator or IT Administrator role
• Independent end-to-end ownership of a Microsoft 365 environment (Exchange, SharePoint, Teams, Azure AD) - architecture decisions, security posture, and user lifecycle, not just ticket execution
• Strong proficiency with Microsoft Intune — device management, compliance policies, app deployment
• Experience with Microsoft Defender for Endpoint and the Defender XDR security stack
• Working knowledge of Azure (IAM, App Registrations, resource management)
• Familiarity with PowerShell scripting for automation and administration tasks
• Experience managing macOS and Windows endpoints in an enterprise environment
• Solid understanding of email security (EOP, SPF, DKIM, DMARC)
• Strong troubleshooting skills and ability to work independently with minimal supervision
• Excellent communication skills — able to explain technical concepts to non-technical stakeholders

Nice to Have

• Microsoft certifications: MS-102 (M365 Administrator), CompTIA A+, Security+ or equivalent
• Experience with Jira and Confluence (Atlassian ecosystem)
• Familiarity with HubSpot, Business Central (Dynamics), or similar SaaS platforms
• Experience with Logic Apps, Power Automate, or other automation tools
• Background supporting a hybrid (remote + on-site) workforce.
• Experience with compliance frameworks (SOC 2, ISO 27001, or similar)

Salary
Hourly rate from 20 EUR based on skills and experience.

Location
Work from anywhere - see you online. We have offices in old-town Vilnius when you need or feel like coming in.

What about perks?

• Outgrow your role. Join other initiatives. Build your skills and test your strengths.
• Learn. All the time. Would you like to attend conferences or take paid training? There is a budget for that.
• We will not let you become obsolete. But whatever you do - give it your best.
• Pitch your ideas about anything. We build startups! Let’s build yours together.
• Work hard, play hard. Adrenaline junkie or zen. Or a casual all-nighter in the city.
• Take time off. Even if you don't - still do. Don’t feel bad about taking a day with a same-day notice. We have all been there. Just be respectful of your responsibilities and to your team.
• Additional health insurance. Take care of yourself. It just makes sense.

About Us
We build cool stuff and have fun doing it. Adroiti is a stack-agnostic technology incubator company. Founded a decade ago, we wondered a lot, built a lot, and learned a lot. We are a diverse group of 90+ engineers, artists, facilitators, avatars and entrepreneurs, empowered by technology. We aim to build disruptive, meaningful, and incremental innovations. We are informal, and we relish adaptive work culture.