Enterprise Systems Administrator
\r\nThe Enterprise Systems Administrator will serve as a technical resource within Boston Public Schools’ Enterprise Systems & Security team, responsible for the administration, integration, and support of the district’s core enterprise platforms. This can include identity and access management systems, Google Workspace, Active Directory, endpoint management platforms, single sign-on (SSO) and security systems.
\r\nIndependently administer and support enterprise systems, including Google Workspace, identity and access management, Active Directory, SSO platforms, directory synchronization tools, and endpoint management platforms.
\r\nAdminister and maintain the organization's Mobile Device Management (MDM) environment, including device enrollment, configuration, provisioning, and lifecycle management for supported devices.
\r\nConfigure and manage system and device profiles, policies, restrictions, applications, security settings, and compliance requirements in accordance with established technical and security standards.
\r\nManage device enrollment and deployment processes, including integration with Apple Business Manager and other device-management platforms.
\r\nSupport enterprise endpoint security, web filtering, and related technology platforms.
\r\nMonitor system and device status, compliance, inventory, and system health; investigate and resolve issues affecting system functionality, security, or user access.
\r\nSupport the implementation, configuration, and deployment of new enterprise systems, tools, integrations, and system enhancements.
\r\nMonitor enterprise systems and platforms to identify performance, availability, security, and compliance issues.
\r\nApply established security protocols and system configurations to support data protection and compliance with district policies.
\r\nMaintain appropriate user and device access controls and ensure system configurations support organizational security requirements.
\r\nTroubleshoot and resolve technical issues involving enterprise systems, identity and access, endpoint management, and related platforms.
\r\nAssist with system audits, assessments, and remediation activities.
\r\nCoordinate with cybersecurity staff to address system security issues and maintain configurations in accordance with established security standards.
\r\nProvide Tier 2 technical support for enterprise systems, resolving issues escalated from the Service Desk.
\r\nTroubleshoot and resolve complex issues involving Google Workspace, Active Directory, SSO, MDM, endpoint management, and related enterprise platforms.
\r\nInvestigate system issues, identify root causes, and implement appropriate solutions within established procedures.
\r\nEscalate issues requiring architectural, security, vendor, or senior technical support.
\r\nCoordinate with Service Desk and other IT teams to resolve escalated user and system issues.
\r\nManage user accounts, permissions, access, device enrollment, and system configurations in accordance with established policies and procedures.
\r\nManage application deployment, updates, configurations, and removal across supported devices and platforms.
\r\nSupport automated device enrollment and deployment processes, including Apple Business Manager and MDM integrations.
\r\nMonitor device compliance, inventory, and lifecycle status and address issues affecting device functionality or security.
\r\nSupport staff in the effective and secure use of enterprise platforms, applications, and managed devices.
\r\nDevelop and maintain system documentation, configuration procedures, troubleshooting guides, and operational documentation.
\r\nFollow established standards and procedures for system administration, access management, endpoint management, and security.
\r\nIdentify recurring issues and opportunities to improve system performance, automation, security, reliability, and user experience.
\r\nAssist with testing, documenting, and implementing system improvements, integrations, and platform updates.
\r\nMaintain current knowledge of enterprise systems, cloud platforms, identity management, endpoint management, Apple technologies, and related technologies.
\r\nTotal: 100%
\r\n3 to 5 years
\r\nList specific skills or talents that a qualified candidate should possess.
\r\nBachelor’s degree in information technology, Computer Science, or related field (or equivalent experience)
\r\n3+ years of experience in enterprise systems administration or related technical roles
\r\nProven experience administering Google Workspace in an enterprise environment
\r\nExperience with MDM platforms (e.g., JAMF, Intune)
\r\nExperience with identity management systems (e.g., Active Directory, SSO, directory sync tools)
\r\nExperience supporting endpoint management and/or security platforms
\r\nStrong troubleshooting and problem-solving skills
\r\nExcellent communication and interpersonal skills
\r\nCurrent authorization to work in the United States
\r\nGoogle Workspace Administrator Certification
\r\nFamiliarity with cybersecurity tools (e.g., EDR, web filtering systems)
\r\nExperience in K–12 education or public sector environments
\r\nExperience supporting system integrations across multiple platforms
\r\nFamiliarity with Boston and Boston Public Schools
\r\nEssential job functions are the fundamental duties of a position, the things a person holding the job absolutely must be able to do.
\r\nRegular and predictable attendance
\r\nEmployee will be required to travel when needed
\r\nEmployee will be required to host and facilitate calls using standard MS Office applications
\r\nRemain in a seated or stationary position for extended periods
\r\nAbility to work for extended periods of time leveraging office tools such as computers
\r\nAbility to work remotely in a quiet environment
\r\nAbility to host multi-hour conference calls
\r\nAbility to travel via car, plane, train, bus
\r\nDisclaimer:?This job description should not be construed to imply that these requirements are the exclusive standards of the position. ?Incumbents will follow any other instructions, and perform any other related duties, as may be required.? The employer has the right to revise this job description at any time.? The job description is not to be construed as a contract for employment.
\r\n\r\n
Your employment with BPS is at will. This means your employment is for an indefinite period of time and it is subject to termination by you or BPS with or without cause, with or without notice, and at any time. Nothing in this policy or any other policy of BPS shall be interpreted to be in conflict with or to eliminate or modify in any way, the at-will employment status of BPS employees.
\r\n\r\n
BPS is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.
\r\n\r\n
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
\r\n
BPS will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or
action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)
If you are searching for a teaching position in BPS, we strongly encourage you to visit
Need help or have a question about your application? Please check the
\r\nIF YOU ARE EXPERIENCING TECHNICAL ISSUES WHILE TRYING TO APPLY, please try clearing your browser cache and cookies, or check the