IT System Administrator

Tennessee Orthopaedic Alliance is the largest orthopaedic surgery group in Nashville and Middle Tennessee. TOA concentrates on the diagnosis and treatment of disorders and injuries of the musculoskeletal system which allow our patients to live their best life. Ninety plus years later we are advancing the practice of orthopaedic surgery throughout the state.

There are a number of reasons why TOA is an employer of choice; here are a few of them:

• Stability - TOA has been in Middle Tennessee since 1926 and has expanded to 35 locations.

•  Impact - TOA's team members use our careers -- whether in our clinics or our business office -- to make a positive difference in the community by building relationships and helping patients live their best life.

• Work Environment - The TOA team focuses on fostering an excellent working environment; one of positivity, collaboration, job satisfaction, and engagement.

• Total Rewards - TOA offers competitive salaries based on the current Middle Tennessee wage market, plus a comprehensive suite of benefits, including Medical, Dental, Paid Time Off, and more. Our 401(k) plan provides a company match, safe harbor match and profit sharing match to go along with your contributions.

Here is an overview of the IT System Administrator role: They are responsible for TOA's on-premises and cloud server environment, Microsoft 365 hybrid tenant, identity and access management, and the enterprise voice platform. Installs and maintains server hardware and software, and troubleshoots issues with programs, slowness, and outages. Remediates security vulnerabilities and maintains system backups and recovery testing. Completes assignments as part of new projects, upgrades, break/fix, or other initiatives as directed. Cross trains and backfills the Network Administrator. Specifically, they will:

Server and Systems Administration

• Administer physical and virtual servers, including storage allocation, operating system patching, software configuration, and lifecycle management

• Administer Azure Virtual Desktop, ensuring availability of host pools and that scheduled reboots and updates complete successfully

• Configure monitoring software to ensure issues are addressed proactively, and respond to correct issues

• Maintain all server grade equipment in switch closets at locations

• Ensure system backups complete successfully and perform restores and routine recovery testing as needed

• Maintain accurate technical documentation and standard operating procedures

Identity, Access, and Microsoft 365

• Administer Active Directory: manage users, groups, and devices; audit and clean up stale accounts; and maintain overall directory health using tools such as PingCastle

• Administer the Microsoft 365 environment, including users, groups, applications, and license assignment and reclamation

• Build and maintain single sign-on integrations with third party applications, including AD group mapping, SCIM provisioning, claims, and exchange of SSO values with vendors

• Administer Microsoft Intune in partnership with the desktop support team, including applications, compliance and configuration policies, and device enrollment

• Manage file share and folder permissions, including security groups, read/write access, and periodic access reviews and cleanup

• Administer self-service password and account management tooling, including certificate renewal, user enrollment assistance, and policy configuration

• Maintain Active Directory auditing and reporting tools, including data connectivity, account re-authentication, and license installation

Telecom and Voice

• Administer the cloud VoIP phone system, including call routing, menus and options, call groups, and extension management

• Maintain phone schedules across all locations, including rolling phones, holiday schedules, and unplanned closures

• Administer voicemail transcription services, including adding and removing users

• Configure and support overhead paging systems at existing and new care center locations, coordinating break/fix work with the vendor

• Submit and track spam and robocall mislabeling removal requests for TOA phone numbers

Security and Vulnerability Management

• Remediate findings from routine vulnerability and threat management scans, track issues to closure, and participate in recurring review calls with our security partner

• Apply security patches and hardening standards across the server environment in support of HIPAA and organizational compliance requirements

Collaboration

• Cross train with the Network Administrator on both networking and server administration to better support the team as a whole

• Coordinate with third party vendors and managed service partners on escalations, projects, and new site builds

• Provide escalation support to the help desk and desktop support team as needed

Requirements

Here are the qualifications and requirements our successful candidate will possess:

EDUCATION AND EXPERIENCE

• Associates in CSCI preferred, equivalent 4+ years' experience accepted

• 3 years server administration experience preferred

• Experience administering Microsoft 365 required

• Experience with Active Directory and Group Policy required

• Experience with Microsoft Intune, Azure Virtual Desktop, or Entra ID preferred

• Experience supporting a healthcare environment and HIPAA requirements preferred

KNOWLEDGE, SKILLS AND ABILITIES (KSAs)

• Strong analytical/technical ability

• Excellent communications skills (i.e. ability to interact effectively with end users, physicians, management and co-workers)

• Strong sense of urgency and responsiveness to others while staying focused on the issues at hand

• Working knowledge of single sign-on concepts, including SAML, SCIM provisioning, and claims mapping

• Familiarity with vulnerability management and remediation workflows

• Comfortable with data migrations between systems

•  Active Directory Group Policy

•  Experience with domain merges/collapse would be a plus

•  Two factor authentication system (Duo)

•  Comfortable scripting for administrative tasks (PowerShell preferred)

TOA is an equal opportunity employer. TOA conducts drug screens and background checks on applicants who accept employment offers.