Natural Grocers Systems Administrator 1 in Lakewood, Colorado
The System Administrator I will work closely with the other System Administrators, and will be responsible for designing, configuring, and maintaining the Company’s infrastructure, software, and serve as a point of escalation for other IT crew members. In addition to that, the primary role will be to handle email related tickets, maintain, and improve upon the existing email infrastructure (Office 365 with Azure AD Connect). This position will include various aspects of networking, as well. Moreover, ensuring that systems remain online and handle any other day to day issues that may arise. This job could include minimal travel to various locations to help aid in the projects and break-fix, as needed.The ideal candidate will come on board and immediately make an impact with projects and other daily tasks.
Assumes the responsibility for following all documented policies that the IT Department has in place.
Backup and Recovery
Perform data backup and recovery operations, ensuring that all required systems and data are successfully backed up to the appropriate media types
Implement and maintain data backups, retention, and recovery systems including tape backup, and off-site disk/cloud replication
Test and verify that the data that is backed up is valid and can be used in a DR situation
Monitor all hosts and virtual machines to ensure there are no systems issues, and if there are, remediate them as soon as possible
Able to maintain and build the hosts by applying firmware, appropriate software images, and deploying virtual servers so they are secure and operate as intended
Maintain the file structure and security on the file servers
Add/remove/modify the sharing and NTFS permissions
Audit and ensure that routine and periodic maintenance of access permissions are completed and archive any stale/abandoned data
Active Directory/DHCP, DNS, etc.
Maintain security permissions, group memberships/roles, etc.
Create/terminate and manage user accounts
Maintain the health of the domain controllers and anything related to ADUC/Sites-Services, etc.
Manage ADUC/multiple domains with various on-premise and cloud integrations
Work with various systems to ensure that patch management is being completed, as needed
Stay on top of current events and zero-day threats to ensure that critical systems are being patched to avoid security incidents/hacks, etc.
Work to ensure that anti-virus software is performing as it should be
Maintain the antivirus solution for all systems
Remove viruses, malware, ransomware, and any other identified threats from infected systems and files.
Report on the status of the antivirus implementation for all systems
Server Environment Administration
General System administration
Print server administration
Install and configure software/hardware
Microsoft Azure platform experience
Escalated resource for Windows desktop support
Manage and monitor Office 365 services in a hybrid infrastructure
Manage a highly secure system through proper configuration and system access monitoring
Continue to expand and implement new security measures for the entire platform
Troubleshoot and resolve issues with user access and other email related problems that occur
Work with the NGVC Help Desk to troubleshoot email related issues, flow problems, NDRs, etc.
Maintain a solid and highly proficient understanding of upcoming changes to the platform and assist with change management to implement various changes and work with various departments to coordinate the changes
Monitor and communicate to stakeholders the performance of the services, security risks, etc.
Perform investigations for suspicious emails and respond as needed to ensure security and prevent threats
Stay ahead and monitor the Office 365 dashboard and ensure that security standards are in place, monitor for improper configurations, spamming, etc.
Collaborate with other IT team members, including networking, security and system administrators, to ensure cross training, documentation and facilitate effective issue resolution
Event log monitoring
Logging Solution (Splunk, WUG, etc.)
Other Areas/Project Related Work:
Understanding of Microsoft and other providers’ licensing is a must
Following proper licensing is a must. No exceptions
The ability to troubleshoot any network related issues
Be able to scope out the requirements of various projects/software/hardware needs to ensure that the environment is secure, and no ports are left open/exposed
Ability to follow change control processes and procedures.
Industry standards for system configuration - PCI Hardening, PII, SOX, and Zero Day Threat Remediation
Review vulnerability scans and stay ahead of the curve on security incidents and best practices
Must be able to identify and verify proper SSL certificates for security purposes
Cross-train other team members
Experience with various IT frameworks, compliance with various frameworks/laws, and how to secure systems based on them (CIS Controls, NIST, PII, PCI, SOX, etc.)
Ability to analyze and determine if new products/services are safe for the environment based on PCI and SOX compliance standards.
Supports SOX and PCI compliance and internal audit tasks.
Establishes network specifications by conferring with users; analyzing workflows, access controls, information and security requirements; designing hardware administration, including interface configurations and routing protocols (dynamic and static).
Analyzes and resolves any alerts (hardware, software, security, etc.)
All alerts must be responded to according to the severity level of the alert. Monitoring alerts on the weekend will be required via email, and escalations to various crew members may be needed.
Ensure that the networks and overall infrastructure is locked down and segmented, with help from other system administrators
Analyze problems and provide technical assistance to solve them
Planning and executing the configuration, installation, testing and maintenance of all infrastructure related devices
Contacting various vendors and arranges for repair, troubleshooting, updates, etc. for software and hardware related issues within the infrastructure department
Protects organization's value by keeping information confidential
Supports tier 1 related requests for issues in production, testing, and development environments
Creating and defining infrastructure-based policies and procedures
Documenting all aspects of the environment
Documenting all standards and procedures
Establishing and maintaining effective communication and coordination with Company staff (good4u crew, management, etc.). This includes maintaining regular contact with all departments to obtain information and to correct error(s) in the network operations
Accomplishes organization goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments
Remediating any PCI/Vulnerability assessments
Manages projects with internal and external resources, and completing project on time, on budget, and as promised
Provides outstanding customer service and a happy attitude to our employees, stores, and customers
Schedules, maintains, and participates in the on-call rotation, respond to all messages sent by Natural Grocers staff in a timely manner, including off hours and vacations
Some after-hours work (post 5:00pm) may and will be required from time to time. The frequency will vary based on the project(s) at hand; however, you will still be required to maintain the computing and network environment, installing/upgrading various systems and monitoring network performance during this time
Other duties, as assigned
Although this is a general outline of job responsibilities all employees are expected to be “hands on” and do whatever it takes to get the job done and make the company thrive.
Bachelor’s degree in Information Technology, Computer Science or a related discipline or equivalent experience
Minimum 2 years of email administration experience
Minimum 2 years of system administration experience
Minimum 1 years of VMWare administration experience
Minimum of 1 years of system administration experience with Microsoft Azure is preferred
Microsoft MCP, CompTIA or higher certifications are preferred
Experience supporting medium to large-scale production environments
Scripting experience for task automation, specifically Exchange Online
Excellent written and verbal communication skills
Experience with hardware maintenance and lifecycle
ITIL Foundation certification a plus
Experience with IT management frameworks and standards a plus (ie. CIS Controls, NIST, ISO)
Cross-train other team members of the department
Tier 1 infrastructure support of application issues in production, testing, and development environment
Gather data pertaining to project needs, and use the information to identify,predict,interpret, and evaluate system and network requirements
Strong troubleshooting and problem-solving skills, including application and network-level troubleshooting
Confer with company employees to identify and solve existing system problems
Dedicated to providing outstanding customer service to our employees, stores, and customers
Maintains a positive and supportive attitude when communicating with others
Writes process and procedure documentation as required
Understands and abides by change control practices
Schedule, maintain, and participate in the on-call rotation, respond to all messages sent by NGVC staff in a timely manner, including off hours and vacations
Updates job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participates in professional organizations
Some travel may be required
Other job duties as required
This job description is not an employment contract: it does not guarantee you a job or that the above listed duties are the limit of your responsibilities. Your job and job description are subject to change with and without notice. You are required to accomplish any and all tasks assigned to you by your supervisor and/or other Store Support Center supervisors that may not be listed in this job description.
Must have the ability to lift 50 lbs. on an occasional basis.
Must be able to carry up to 50 lbs. on an occasional basis.
Requires the use of both arms and both hands with full range of motion.
Must be able to bend at the waist and knees, twist, push and pull on occasional basis.
Must be able to stand, walk, kneel, squat, and climb as needed.
Must be able to reach overhead and away from the body.
Must be able to sit for extended periods while working at a desk and/or computer.
This job description is not an employment contract: it does not guarantee you a job or that the above listed duties are the limit of your responsibilities. Your job and job description are subject to change with and without notice. You are required to accomplish any and all tasks assigned to you by your supervisor and/or other corporate supervisors that may not be listed in this job description.
Need help finding the right job?
We can recommend jobs specifically for you!
Address12612 W Alameda Pkwy