Description
About Us:
With ~370 employees and ~70+ contractors Novatae is a modern specialty insurance distributor offering innovative solutions from responsive brokers, underwriters, and program managers who are passionate about our clients. As a leading MGA, program underwriter, Lloyds Coverholder and wholesaler, we offer exclusive underwriting solutions totaling ~$971M+ in annual written premiums for dozens of industry classifications, serving 6,000+ clients from more than 500+ global insurers.
Position Overview:
Novatae Risk Group is seeking a Sr. IT Systems Administrator to serve as the technical owner of our Microsoft 365 ecosystem and the broader portfolio of enterprise systems and SaaS platforms that run the business, as well as the hands-on lead for the platform migrations and system integrations that follow our mergers and acquisitions. Reporting to the CTO, this role combines deep M365 administration with day-to-day ownership of the collaboration, service management, and productivity applications relied on across the organization, in addition to new technologies and systems as they are introduced.
The Sr. IT Systems Administrator will own the design, security, governance, and day-to-day operation of Novatae’s M365 tenant—Entra ID, Intune, Purview, Exchange Online, Defender, and the Conditional Access and compliance policies that hold it together in addition to the various enterprise systems used by the organization, adhering to best practices and policies established by Novatae’s parent company, World Insurance Associates. As Novatae continues to grow through acquisition, this role will lead tenant-to-tenant, and platform to platform migrations and the consolidation of acquired IT environments into the Novatae landscape, from due-diligence discovery through cutover and decommissioning.
This role must possess a high-level of skills in design, development, analysis and technical expertise and works closely with the Manager of IT Infrastructure and the IT support team to keep systems secure, reliable, and well-documented, while advancing the organization’s strategic initiatives. It is well suited to a hands-on administrator who wants broad ownership across a modern cloud-first environment.
Essential Duties & Responsibilities:
Microsoft 365 Administration & Security
- Tenant ownership: Serve as the primary administrator and technical authority for the Microsoft 365 tenant, ensuring performance, security, licensing efficiency, and reliability across the ecosystem.
- Entra ID (Azure AD): Administer identity and access—Conditional Access, MFA, SSO, Privileged Identity Management (PIM), entitlement management, group-based licensing, and B2B/guest access.
- Intune & Autopilot: Manage endpoint enrollment, device compliance and configuration profiles, application deployment, Windows Update rings, and zero-touch provisioning via Autopilot across a hybrid fleet.
- Microsoft Purview: Implement and maintain data governance and compliance—data loss prevention (DLP), sensitivity/information-protection labels, retention policies, eDiscovery and email discovery searches, insider risk, and audit/activity reporting.
- Exchange Online: Administer mail flow, transport and connector configuration, anti-spam/anti-phishing posture, shared/resource mailboxes, and hybrid mail coexistence during migrations.
- Microsoft Defender: Operate the Defender suite—Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps—monitoring and responding to security alerts and taking necessary action.
- Policy & baseline design: Design, document, and enforce Conditional Access, compliance, configuration, and security-baseline policies; drive the migration of legacy Group Policy into cloud-managed controls.
- Collaboration workloads: Administer SharePoint Online, OneDrive, and Teams—governance, permissions, external sharing, and lifecycle management.
Infrastructure & Cloud Operations
- Azure infrastructure (IaaS): Provision and maintain Azure cloud servers, virtual machines, and SQL databases; perform routine database and server audits to monitor health, security, and compliance.
- Production systems operations: Own production operations across sites, platforms, and operating systems—backups, performance tuning, fault resolution, capacity planning, and root-cause analysis—for on-premises and cloud infrastructure.
- Security & network stack: Support and monitor the endpoint and network security stack, including CrowdStrike, Palo Alto firewalls, and WAF/analytics tooling, in coordination with Microsoft Defender.
- Vulnerability management: Run vulnerability scanning and remediation, coordinate patching across servers and endpoints, and maintain a defensible, well-documented security posture.
- Tier 3 escalation: Serve as senior/Tier 3 support for company-wide infrastructure systems and services, including Windows Servers, Azure/Entra ID, and virtualized environments.
Enterprise Applications & SaaS Administration
- ITSM platform (ServiceNow): Administer and optimize the ServiceNow environment—incident, request, and change workflows, catalog items, forms, and reporting—and serve as the platform owner for continuous improvement of IT service delivery.
- Collaboration & telephony (Zoom): Administer Zoom Phone, Zoom Meetings, and Zoom Rooms—telephony/voice standards, call routing, user and license provisioning, meeting and security policy, and conference-room AV—ensuring reliable communications across offices.
- Creative & document tools (Adobe): Manage the Adobe Admin Console—Acrobat, Creative Cloud, and Adobe Acrobat Sign / e-signature—including license assignment, entitlements, and federated sign-on.
- SaaS portfolio & SSO: Own the day-to-day administration of the broader line-of-business SaaS portfolio—provisioning, license management, and single sign-on / SCIM integration through Entra ID—applying consistent security and access standards across applications.
- Licensing & lifecycle: Track licensing, renewals, and utilization across all systems, right-sizing entitlements and coordinating onboarding/offboarding across every platform.
M&A Integration & Platform Migration
- Migration leadership: Lead tenant-to-tenant and platform migrations for acquired entities—mailboxes, OneDrive, SharePoint, Teams, identities, and endpoints—end to end, from planning through validation and cutover.
- Due-diligence discovery: Assess acquired IT environments during due diligence—inventorying identity, endpoint, security posture, data, and licensing to build an accurate integration and risk picture.
- Identity & domain consolidation: Plan and execute directory consolidation, cross-tenant identity mapping, domain cutovers, and coexistence during transition windows.
- Endpoint & data onboarding: Re-enroll and standardize acquired endpoints into Intune/Autopilot and migrate data with integrity, minimizing user disruption.
- Decommissioning: Retire legacy tenants, systems, and platforms cleanly once integration is complete, preserving records and compliance obligations.
- Tooling: Employ migration tooling (e.g., BitTitan, Quest On Demand, ShareGate, or native cross-tenant capabilities) and maintain repeatable, documented migration runbooks.
Operations, Governance & Service Delivery
- Documentation & runbooks: Create and maintain IT processes, workflows, standards, and how-to documentation—building a knowledge base that scales the team and standardizes integrations.
- Monitoring & response: Monitor M365, infrastructure, and cyber-security alerts, service health, and licensing, taking timely and appropriate action.
- Maintenance & on-call: Participate in scheduled after-hours maintenance windows and an on-call rotation, applying software releases, service packs, and patches and responding to after-hours job failures, outages, and incidents.
- SLA & ticket discipline: Serve as an escalation point for the IT support team (L2) and outsourced Level I partner, adhering to established SLAs and treating tickets as a detailed, reusable work log.
- Compliance: Support the security and compliance requirements relevant to a regulated insurance business, aligned to the standards and policies of the Parent Company.
Collaboration, Mentorship & Vendor Management
- Mentorship: Mentor Level I/II support technicians on M365, identity, endpoint, and enterprise-application practices, and serve as a technical escalation resource for the team.
- Vendor management: Manage relationships with implementation partners, software providers, vendors, and contractors, including licensing optimization and support escalations.
Experience, Knowledge Areas/Concepts, Skills & Abilities:
Required:
- 15+ years administering enterprise IT systems.
- Demonstrated experience leading or executing tenant-to-tenant migrations and platform consolidations, ideally in an M&A context.
- High proficiency across the Microsoft 365 ecosystem, including:
- Entra ID / Azure AD; Intune; Microsoft Purview — DLP; Exchange Online; Microsoft Defender (XDR); SharePoint Online
- Working knowledge of on-prem and cloud networking, Windows Server, Active Directory, and hybrid identity.
- Hands-on experience with Azure infrastructure (VMs, SQL databases, cloud servers) and production operations—backups, performance tuning, capacity planning, and root-cause analysis.
- Experience supporting an endpoint and network security stack (e.g., CrowdStrike, Palo Alto firewalls, WAF/analytics) and running vulnerability management and patching programs.
- Hands-on administration experience with enterprise business applications and SaaS platforms—such as ServiceNow (ITSM), Zoom (including Zoom Phone), and Adobe, including admin consoles, licensing, and SSO integration.
- Availability for scheduled after-hours maintenance windows and participation in an on-call rotation.
- Strong analytical and problem-solving skills, with the ability to remote-troubleshoot through disciplined diagnostic questioning.
- Ability to prioritize, organize, and maintain multiple projects to deadline, working independently with minimal supervision.
- Excellent written and verbal communication, with the patience to support non-technical users and the clarity to brief executives.
Preferred:
- Insurance Industry Experience (Retail & Wholesale)
- Exposure to regulated environments (insurance, financial services) and associated compliance frameworks
- Crowdstrike Certification
- Experience with migration tooling (BitTitan, Quest On Demand, ShareGate) and native cross-tenant migration/sync.
• PowerShell and Microsoft Graph scripting for automation and reporting.
• Familiarity with ITSM/ITIL standards and service-desk process design.
• Cloud architecture, SaaS integration, and disaster-recovery/backup strategy experience.
• Asset and vendor management; Dell Latitude/Dell Pro-class hardware experience.
Travel Required: 10-20%
#NH-1
#NH-Hybrid