Hybrid Azure Systems Administrator

at PrePass

• Job title: Azure Systems Administrator
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: Azure, Cloud, DNS, Terraform, Vault
• Location requirements: Hybrid, Phoenix, United States

About the role

• Azure Systems Administrator responsible for Windows Server VM administration and Azure infrastructure support at PrePass. Collaborating with engineering, security, and IT operations teams for system reliability.

Responsibilities

• **What you’ll do**
• **Azure IaaS – Windows Server VM administration**
• Provision, configure, and maintain **Windows Server VMs in Azure**, including sizing, performance tuning, disk/storage management, and availability planning
• Perform daily operational health checks (OS integrity, service availability, CPU/memory/disk trends, scheduled task/job success, and event log review)
• Troubleshoot Windows platform issues (services, certificates, networking, DNS, authentication, resource constraints) and coordinate resolution with stakeholders
• **Patch management & updates (Azure Update Manager)**
• Own VM patching operations using **Azure Update Manager** (maintenance windows, classification-based patching, phased rollouts, restart coordination)
• Monitor patch compliance and remediate failed deployments and “no update data” scenarios
• Communicate scheduled maintenance to stakeholders and execute updates in a controlled, auditable manner
• **Backup & recovery (Azure Backup)**
• Implement and operate **Azure Backup** for Azure VMs (policy configuration, monitoring, retention governance)
• Perform and document periodic restore tests and recovery procedures to ensure operational readiness
• **Identity & directory services (AD DS + Azure AD Connect)**
• Administer **AD DS hosted on Azure VMs (domain controllers)**: users/groups, OUs, **Group Policy (GPO)**, security groups, and delegated access
• Maintain domain controller health and dependencies (DNS, replication health, time synchronization, patching coordination, operational runbooks)
• Operate and maintain **Azure AD Connect** (hosted on a Windows VM in Azure): monitor sync health, troubleshoot sync failures, manage scope/filtering, and support upgrades/maintenance
• Maintain documentation/runbooks for configuration, troubleshooting, and recovery procedures
• **Web and file services (IIS + File Servers)**
• Administer and troubleshoot **IIS** (site/app configuration, bindings/certs, app pools, logging, performance troubleshooting)
• Administer and support **Windows File Servers** (SMB shares, NTFS/share permissions, access controls, troubleshooting access/performance issues)
• **Security posture & vulnerability management (Defender for Cloud)**
• Use **Microsoft Defender for Cloud** to monitor security posture, address recommendations, and remediate vulnerabilities
• Contribute to baseline hardening and security improvements aligned to organizational standards
• **Monitoring, incident response & continuous improvement**
• Participate in an on-call rotation; support incident response, service restoration, root cause analysis, and preventative improvements
• Automate repeatable administrative work using **PowerShell** and Azure-native tooling
• Create and maintain operational documentation (runbooks/SOPs/diagrams/inventories)

Requirements

• **Requirements (Must have)**
• 3+ years administering **Windows Server** in production, including **Windows Server VMs in Azure**
• Hands-on experience with **Azure VM operations** (provisioning, troubleshooting, performance tuning, lifecycle management)
• Hands-on experience with **Azure Update Manager** (maintenance windows, phased patching, compliance tracking)
• Hands-on experience with **Azure Backup** (policy setup, monitoring, restores, retention)
• Hands-on experience with **Microsoft Defender for Cloud** (recommendations, vulnerability remediation, posture management)
• Hands-on experience administering **AD DS** (users/groups/OUs, GPO, permissions) on domain controllers running on Azure VMs
• Hands-on experience with **Azure AD Connect** (monitoring, troubleshooting sync issues, scope/filtering, maintenance/upgrades)
• Hands-on experience administering and troubleshooting **IIS**
• Hands-on experience administering **Windows File Servers** (SMB shares + permissions)
• Strong documentation and communication skills; ability to collaborate across IT, engineering, and security teams
• **Nice to have**
• **Load balancing** experience (design/support/troubleshooting)
• **Microsoft Failover Clustering** experience (design/support/troubleshooting)
• **Azure PaaS experience** (e.g., App Services, Functions, Storage, Key Vault, managed databases, etc.)
• Infrastructure as Code experience (Terraform/Bicep/ARM)
• CI/CD operational support experience
• Endpoint/device management tooling experience (Intune / ConfigMgr)
• Certificate lifecycle management and secrets management practices
• Relevant certifications (optional): **AZ‑104**, Windows/Identity certifications, security-focused certifications

Benefits

• **How We Will Take Care of You**
• Robust benefit package that includes medical, dental, and vision that start on date of hire.
• Paid Time Off, to include vacation, sick, holidays, and floating holidays.
• 401(k) plan with employer match.
• Company-funded “lifestyle account” upon date of hire for you to apply toward your physical and mental well-being (i.e., ski passes, retreats, gym memberships).
• Tuition Reimbursement Program.
• Voluntary benefits, to include but not limited to Legal and Pet Discounts.
• Employee Assistance Program (available at no cost to you).
• Company-sponsored and funded “Culture Team” that focuses on the Physical, Mental, and Professional well-being of employees.
• Community Give-Back initiatives.
• Culture that focuses on employee development initiatives.