Job description

WHY THIS ROLE MATTERS: You are the technical backbone of F&B’s IT infrastructure. Every network connection that works reliably across offices and project sites, every Microsoft 365 and Azure service that performs without interruption, every security patch applied before a vulnerability is exploited, every backup that actually recovers data when it has to — you own those outcomes. The IT Support Specialist handles what team members see and touch every day; you manage the systems underneath that make everything else possible. This role exists because reliable infrastructure does not maintain itself. With multiple offices, remote project sites, and field teams depending on cloud applications for project management, financial reporting, and communication — the network, servers, and cloud platforms have to work. When they don’t, the business stops. You prevent that through proactive monitoring, disciplined maintenance, rigorous security practices, and the technical depth to resolve complex problems before they become outages. You are also the Tier 2 and Tier 3 escalation point for the IT Support Specialist — the technical resource they turn to when issues exceed their scope. Resolve what they cannot, document what you learn so institutional knowledge is captured, and help them build their own capability over time. The Senior Manager should be able to trust you to keep the infrastructure running and secure without daily oversight — and to surface issues before they become service disruptions. WHAT YOU OWN: KEY ROLES & RESPONSIBILITIES Networking, Connectivity, & Traffic Control Reliable connections everywhere F&B works — offices, project sites, and the field. Install, configure, monitor, and troubleshoot switches, firewalls, wireless access points, VPNs, and internet connectivity across every location — meeting enterprise uptime targets. Coordinate network upgrades, capacity improvements, and new site connectivity. Field teams pulling drawings and running Procore from job sites should never be stopped by a network failure that proactive administration would have prevented. Ensure Network Traffic is limited to approved connections and enable port security for managed hardware Systems, Cloud & Endpoint Administration The platforms F&B runs on — available, current, and performing. Administer Microsoft 365, Azure, on-premises servers, storage, and core enterprise platforms — accounts, permissions, access controls, performance, and availability. Apply updates, patches, and upgrades on schedule; support the Procore, HRIS, ERP, and payroll integrations that Finance, HR, and Operations depend on. Manage the device fleet through enterprise endpoint management — deployment, security compliance, lifecycle planning, and accurate asset inventory. Cybersecurity Operations Threats found and fixed before they become incidents. Monitor security alerts, vulnerabilities, and threat activity; implement controls and remediate within defined SLAs. Manage endpoint protection, identity and access management, and security tooling; support audits, assessments, and incident response. Escalate significant security events to the Senior Manager immediately — security issues that age unreported create compounding, preventable risk. Manage Security Policies that apply to devices, user and service accounts, and network traffic Backup, Recovery & Proactive Monitoring A backup that has never been tested is not a backup. Own backup integrity and disaster recovery readiness — monitor jobs, validate completion, test recovery periodically, and keep DR documentation current. Maintain proactive monitoring across all environments — catch performance degradation, capacity concerns, and failure indicators before team members feel them. Plan capacity ahead of organizational growth — the Senior Manager should hear about infrastructure issues from your monitoring, not from team members reporting outages. Tier 2/3 Escalation & Developing the Specialist Resolve what the frontline cannot — and teach as you go. Serve as the technical escalation resource for the IT Support Specialist — resolving complex issues, documenting root causes, and improving support processes. Coach the Specialist through unfamiliar problems and share the reasoning, not just the fix — they should be measurably more capable each quarter. Documentation is not optional — undocumented solutions become tribal knowledge and single points of failure. EXPERIENCE, TRAINING & CERTIFICATIONS 5–10 years of progressive network and systems administration Microsoft 365 Administrator and Azure Administrator Associate certifications (active, or equivalent) Advanced network administration — switching, firewalls, wireless, VPN, multi-site; cybersecurity operations experience Enterprise endpoint management (Intune or equivalent) Proven backup administration with tested recovery CompTIA Network+ and Security+ (or equivalent), identity & access administration, firewall & network security, endpoint management administration, and disaster recovery & business continuity

Requirements

Must-haves

Networking, Connectivity, & Traffic Control
Reliable connections everywhere F&B works — offices, project sites, and the field.
Install, configure, monitor, and troubleshoot switches, firewalls, wireless access points, VPNs, and internet connectivity across every location — meeting enterprise uptime targets.
Coordinate network upgrades, capacity improvements, and new site connectivity.
Field teams pulling drawings and running Procore from job sites should never be stopped by a network failure that proactive administration would have prevented.
Ensure Network Traffic is limited to approved connections and enable port security for managed hardware
Systems, Cloud & Endpoint Administration
The platforms F&B runs on — available, current, and performing.
Administer Microsoft 365, Azure, on-premises servers, storage, and core enterprise platforms — accounts, permissions, access controls, performance, and availability.
Apply updates, patches, and upgrades on schedule; support the Procore, HRIS, ERP, and payroll integrations that Finance, HR, and Operations depend on.
Manage the device fleet through enterprise endpoint management — deployment, security compliance, lifecycle planning, and accurate asset inventory.
Cybersecurity Operations
Threats found and fixed before they become incidents.
Monitor security alerts, vulnerabilities, and threat activity; implement controls and remediate within defined SLAs.
Manage endpoint protection, identity and access management, and security tooling; support audits, assessments, and incident response.
Escalate significant security events to the Senior Manager immediately — security issues that age unreported create compounding, preventable risk.
Manage Security Policies that apply to devices, user and service accounts, and network traffic
Backup, Recovery & Proactive Monitoring
A backup that has never been tested is not a backup.
Own backup integrity and disaster recovery readiness — monitor jobs, validate completion, test recovery periodically, and keep DR documentation current.
Maintain proactive monitoring across all environments — catch performance degradation, capacity concerns, and failure indicators before team members feel them.
Plan capacity ahead of organizational growth — the Senior Manager should hear about infrastructure issues from your monitoring, not from team members reporting outages.
Tier 2/3 Escalation & Developing the Specialist
Resolve what the frontline cannot — and teach as you go.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurego

Platform: bamboohr
Effort: medium