Enterprise System Administrator (SY26-27)

Enterprise Systems Administrator

Job Purpose and Summary

The Enterprise Systems Administrator will serve as a technical resource within Boston Public Schools' Enterprise Systems & Security team, responsible for the administration, integration, and support of the district's core enterprise platforms. This can include identity and access management systems, Google Workspace, Active Directory, endpoint management platforms, single sign-on (SSO) and security systems.

Primary Job Duties & Responsibilities

1. Enterprise Systems Administration & Integration - 20%

• Independently administer and support enterprise systems, including Google Workspace, identity and access management, Active Directory, SSO platforms, directory synchronization tools, and endpoint management platforms.

• Administer and maintain the organization''s Mobile Device Management (MDM) environment, including device enrollment, configuration, provisioning, and lifecycle management for supported devices.

• Configure and manage system and device profiles, policies, restrictions, applications, security settings, and compliance requirements in accordance with established technical and security standards.

• Manage device enrollment and deployment processes, including integration with Apple Business Manager and other device-management platforms.

• Support enterprise endpoint security, web filtering, and related technology platforms.

• Monitor system and device status, compliance, inventory, and system health; investigate and resolve issues affecting system functionality, security, or user access.

• Support the implementation, configuration, and deployment of new enterprise systems, tools, integrations, and system enhancements.

2. System Reliability, Security & Compliance - 20%

• Monitor enterprise systems and platforms to identify performance, availability, security, and compliance issues.

• Apply established security protocols and system configurations to support data protection and compliance with district policies.

• Maintain appropriate user and device access controls and ensure system configurations support organizational security requirements.

• Troubleshoot and resolve technical issues involving enterprise systems, identity and access, endpoint management, and related platforms.

• Assist with system audits, assessments, and remediation activities.

• Coordinate with cybersecurity staff to address system security issues and maintain configurations in accordance with established security standards.

3. Technical Support & Troubleshooting - 20%

• Provide Tier 2 technical support for enterprise systems, resolving issues escalated from the Service Desk.

• Troubleshoot and resolve complex issues involving Google Workspace, Active Directory, SSO, MDM, endpoint management, and related enterprise platforms.

• Investigate system issues, identify root causes, and implement appropriate solutions within established procedures.

• Escalate issues requiring architectural, security, vendor, or senior technical support.

• Coordinate with Service Desk and other IT teams to resolve escalated user and system issues.

4. Application, Device & Access Management - 20%

• Manage user accounts, permissions, access, device enrollment, and system configurations in accordance with established policies and procedures.

• Manage application deployment, updates, configurations, and removal across supported devices and platforms.

• Support automated device enrollment and deployment processes, including Apple Business Manager and MDM integrations.

• Monitor device compliance, inventory, and lifecycle status and address issues affecting device functionality or security.

• Support staff in the effective and secure use of enterprise platforms, applications, and managed devices.

5. Documentation, Standards & Continuous Improvement - 15%

• Develop and maintain system documentation, configuration procedures, troubleshooting guides, and operational documentation.

• Follow established standards and procedures for system administration, access management, endpoint management, and security.

• Identify recurring issues and opportunities to improve system performance, automation, security, reliability, and user experience.

• Assist with testing, documenting, and implementing system improvements, integrations, and platform updates.

• Maintain current knowledge of enterprise systems, cloud platforms, identity management, endpoint management, Apple technologies, and related technologies.

6. Other duties as assigned - 5%

Total: 100%

Education

• Bachelor's degree in Information Technology, Computer Science, or related field (or equivalent experience).

Prior Relevant Work Experience

• 3 to 5 years

Required Skills & Other Minimum Required Qualifications

List specific skills or talents that a qualified candidate should possess.

• Bachelor's degree in information technology, Computer Science, or related field (or equivalent experience)

• 3+ years of experience in enterprise systems administration or related technical roles

• Proven experience administering Google Workspace in an enterprise environment

• Experience with MDM platforms (e.g., JAMF, Intune)

• Experience with identity management systems (e.g., Active Directory, SSO, directory sync tools)

• Experience supporting endpoint management and/or security platforms

• Strong troubleshooting and problem-solving skills

• Excellent communication and interpersonal skills

• Current authorization to work in the United States

Preferred Qualifications & Skills

• Google Workspace Administrator Certification

• Familiarity with cybersecurity tools (e.g., EDR, web filtering systems)

• Experience in K-12 education or public sector environments

• Experience supporting system integrations across multiple platforms

• Familiarity with Boston and Boston Public Schools

Essential Functions

Essential job functions are the fundamental duties of a position, the things a person holding the job absolutely must be able to do.

• Regular and predictable attendance

• Employee will be required to travel when needed

• Employee will be required to host and facilitate calls using standard MS Office applications

Physical Requirements

• Remain in a seated or stationary position for extended periods

• Ability to work for extended periods of time leveraging office tools such as computers

• Ability to work remotely in a quiet environment

• Ability to host multi-hour conference calls

• Ability to travel via car, plane, train, bus

Disclaimer:?This job description should not be construed to imply that these requirements are the exclusive standards of the position. ?Incumbents will follow any other instructions, and perform any other related duties, as may be required.? The employer has the right to revise this job description at any time.? The job description is not to be construed as a contract for employment.

Your employment with BPS is at will. This means your employment is for an indefinite period of time and it is subject to termination by you or BPS with or without cause, with or without notice, and at any time. Nothing in this policy or any other policy of BPS shall be interpreted to be in conflict with or to eliminate or modify in any way, the at-will employment status of BPS employees.

BPS is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

BPS will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or

action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)