IT System Administrator

📋 Job Overview

Easygenerator is a fast-growing EdTech scale-up transforming how teams share knowledge. We build award-winning e-learning software used by global enterprises, and we’re just getting started. We’re an AI-first company, using cutting-edge tools both in our products and internal workflows. You’ll gain hands-on AI experience and develop a future-proof skillset while contributing to a fast-moving, high-impact product.

🏢 About Easygenerator

Easygenerator is a fast-growing EdTech scale-up transforming how teams share knowledge. We build award-winning e-learning software used by global enterprises, and we’re just getting started. We’re an AI-first company, using cutting-edge tools both in our products and internal workflows. You’ll gain hands-on AI experience and develop a future-proof skillset while contributing to a fast-moving, high-impact product.

🎯 The Role

Manage and administer global Microsoft 365 tenant(s) (E3/E5) across multiple regions. Architect and maintain secure configurations across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams. Lead enterprise identity strategy using Microsoft Entra ID, including Conditional Access, Identity Protection, RBAC, and Privileged Identity Management (PIM). Enforce Zero Trust principles, least-privilege access, and Just-in-Time access models. Administer Microsoft Intune and Windows 365 environments, including device compliance policies, security baselines, and Autopilot provisioning. Lead global laptop provisioning for new hires, ensuring secure configuration and timely delivery. Own and manage the full Joiner-Mover-Leaver lifecycle globally, including onboarding and off-boarding across all systems and devices. Maintain an accurate and up-to-date IT asset inventory, including hardware and software tracking. Monitor global device health, compliance posture, and endpoint performance. Own and manage Microsoft Defender security suite (Endpoint, Office 365, Identity, Cloud Apps). Configure Microsoft Purview (DLP, retention policies, Insider Risk, eDiscovery, Sensitivity Labels). Monitor and respond to identity and endpoint security incidents in coordination with SOC teams. Manage global licensing strategy (E3/E5, add-ons, cost optimization). Support SIEM integrations (Microsoft Sentinel or third-party tools). Conduct periodic global access reviews, entitlement audits, and compliance checks. Develop PowerShell automation to streamline provisioning, deprovisioning, and administrative tasks. Maintain audit-ready documentation and support ISO 27001, SOC 2, and GDPR compliance efforts. Continuously improve operational efficiency, governance frameworks, and security posture.

✅ Key Responsibilities

• Manage and administer global Microsoft 365 tenant(s) (E3/E5) across multiple regions.
• Architect and maintain secure configurations across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
• Lead enterprise identity strategy using Microsoft Entra ID, including Conditional Access, Identity Protection, RBAC, and Privileged Identity Management (PIM).
• Enforce Zero Trust principles, least-privilege access, and Just-in-Time access models.
• Administer Microsoft Intune and Windows 365 environments, including device compliance policies, security baselines, and Autopilot provisioning.
• Lead global laptop provisioning for new hires, ensuring secure configuration and timely delivery.
• Own and manage the full Joiner-Mover-Leaver lifecycle globally, including onboarding and off-boarding across all systems and devices.
• Maintain an accurate and up-to-date IT asset inventory, including hardware and software tracking.
• Monitor global device health, compliance posture, and endpoint performance.
• Own and manage Microsoft Defender security suite (Endpoint, Office 365, Identity, Cloud Apps).
• Configure Microsoft Purview (DLP, retention policies, Insider Risk, eDiscovery, Sensitivity Labels).
• Monitor and respond to identity and endpoint security incidents in coordination with SOC teams.
• Manage global licensing strategy (E3/E5, add-ons, cost optimization).
• Support SIEM integrations (Microsoft Sentinel or third-party tools).
• Conduct periodic global access reviews, entitlement audits, and compliance checks.
• Develop PowerShell automation to streamline provisioning, deprovisioning, and administrative tasks.
• Maintain audit-ready documentation and support ISO 27001, SOC 2, and GDPR compliance efforts.
• Continuously improve operational efficiency, governance frameworks, and security posture.

📌 Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 2+ years of enterprise Microsoft 365 administration experience.
• 1+ year hands-on experience managing Microsoft E5 security capabilities.
• Strong expertise in Microsoft Entra ID, Conditional Access, PIM, and identity governance.
• Experience with Microsoft Intune, Windows 365, and endpoint security management.
• Hands-on experience with Microsoft Defender suite and security incident response.
• Solid understanding of Zero Trust architecture and identity-first security models.
• Experience operating within a multi-region or global organization.
• Strong PowerShell scripting and automation skills.
• Knowledge of compliance frameworks such as ISO 27001, SOC 2, and GDPR.
• Analytical, detail-oriented, and proactive with a strong security-first mindset.
• Ability to document processes clearly and support audit requirements.

⭐ Desirable Experience

• Experience with cloud-based identity and access management solutions.
• Knowledge of advanced threat detection and response techniques.
• Understanding of network security principles and protocols.
• Experience with IT service management frameworks (e.g., ITIL).
• Strong communication and interpersonal skills.

🎁 Benefits

Competitive salary and benefits package.

🛂 Visa & Eligibility

Easygenerator is an equal opportunity employer and welcomes applications from all qualified candidates regardless of visa status or work authorization.