Senior Systems Administrator I at Biofire

Job description

WHO WE ARE Biofire Technologies is on a mission to give gun owners better tools for reducing preventable gun injuries and deaths, especially among children. We believe our technology, combined with a best-in-class customer experience, will define the future of firearms safety for the next generation. Our mission-driven approach has earned support from the firearm community, the tech world, and the media. Biofire employees encompass a diverse range of talents, including world-class engineers who have designed and tested firearms, medical devices, robots, cars, satellites, rockets, and supersonic jets; expert technicians from aerospace, defense tech, special forces, and gunsmithing; and elite operators from high-tech, advanced manufacturing, and regulated industries. Whether building the product or powering the company behind it, every Biofire team member is united by an obsession with safety, reliability, and operational excellence. OUR CULTURE Reducing accidental firearm injuries and deaths requires original thinking and authentic collaboration, so we’re deeply invested in building a team and culture that can achieve our mission together. Team members enjoy autonomy and flexibility from day one, so expect to be immediately tasked with solving challenging problems and building new systems that work. We’ll hold you accountable for executing audacious goals, giving and receiving honest feedback, and helping your teammates succeed. You’ll receive respect, kindness, and support from every direction while you figure out how to get it all done. ABOUT THE ROLE As a Senior Systems Administrator I at Biofire, you will run our identity, device, and SaaS systems day to day and help keep our core on-premises and cloud infrastructure reliable. You will implement improvements to access and endpoint management, automate routine work, and build passwordless access and recovery practices that scale with the company. You will work independently on routine changes and collaborate with TechOps leadership on changes with a wider impact. Success in this role means extending our group-based access rollout, automating joiner, mover, and leaver workflows, completing the device policy cleanup, and documenting and testing recovery for critical services. You will split your time between planned projects and complex Help Desk escalations, improve the team’s ability to resolve recurring issues, and communicate risks and blockers early. If you’re excited about helping to solve mission-critical challenges, we encourage you to apply. KEY RESPONSIBILITIES Day-to-day responsibilities of the role will include: - Run Microsoft Entra ID, including Conditional Access, groups, SSO, and SCIM, and implement role-based access across the company while documenting exceptions; - Automate joiner, mover, and leaver workflows with PowerShell, Microsoft Graph, Azure Automation, or similar tools, and report on access health; - Manage Windows, Mac, and iOS devices in Intune and Mosyle, including enrollment, compliance, apps, updates, and policy documentation; - Maintain TechOps-managed on-premises and cloud-hosted servers, networks, and production-floor IT systems, including scheduled patching, monitoring, and backups; - Document and test recovery runbooks for critical services; lead technical triage and restoration for TechOps incidents in line with the incident plan, including occasional urgent after-hours response; - Resolve Tier 2 Help Desk escalations and reduce recurring issues through root-cause fixes, runbooks, and training; - Balance scoped improvement projects with operational and incident work, assess dependencies and rollback plans before high-impact changes, and raise project risks early. QUALIFICATIONS We understand that not all applicants will possess skills that perfectly align with our job qualifications. At Biofire, we appreciate diverse experiences from various industries, and we encourage all individuals who meet the necessary qualifications to submit their applications. Equivalent experience is welcome. - At least 4 years in IT, including 2 years in a systems administration role in a business environment. - Hands-on Microsoft Entra ID or comparable identity administration (such as Okta), including group-based access, joiner/mover/leaver processes, and SSO/SCIM integrations. - Windows endpoint management in Intune (enrollment, compliance, apps, and updates) and Apple device administration in an MDM such as Mosyle or Jamf. - Administrative automation with PowerShell, Python, or APIs, plus clear documentation and the ability to help a Help Desk team learn. - Operating production server or cloud services, including patching, monitoring, backups, and tested restores, with working knowledge of networking fundamentals. PREFERRED QUALIFICATIONS, NOT REQUIRED - Microsoft certifications such as SC-300, MD-102 or AZ-104. - Passwordless sign-in with FIDO2 security keys or Windows Hello for Business. - Manufacturing or other regulated environments, including ISO 27001 controls. COMPENSATION AND BENEFITS In addition to competitive pay, as a full-time employee at Biofire you are eligible for: - Stock Options in Biofire, 401(k), HSA - and other financial benefits - Medical Insurance - including plan options with $0 payroll deduction - Dental, Vision and Life Insurance Plans - with $0 payroll deduction - 3 Weeks Vacation and Sick time (Flex Time for salary positions), and 13 Paid Holidays - Parental Leave - and other family-building, adoption and surrogacy benefits The compensation range for this role is $110,000 - $130,000 /annual salary + stock options + benefits. Pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment. LOCATION This is a full-time, salaried role, based at our dog-friendly headquarters in Broomfield, Colorado. This role is onsite about four days a week and will include regular time at Armory 1, our new manufacturing facility, once it opens. There is no standing on-call rotation, but occasional urgent incidents may require after-hours response. We expect you to bring your very best, and in return, we will provide the support necessary for you to excel. You'll collaborate with colleagues you appreciate, respect, and find inspiration from, and have access to all the technical resources needed. DIVERSITY & INCLUSION We’re bringing innovation to a technological problem that has persisted for decades, so we depend on diverse, inclusive, and collaborative teams to break new ground and do great work. We welcome people from all qualified backgrounds, and we don’t discriminate based on race, religion, color, political affiliation, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. ELIGIBILITY This role handles information subject to US Export Control Regulations. Applicants must be (a) a citizen of the United States; (b) a lawful permanent resident of the United States (“Green Card” holder); or (c) a person admitted into the United States as an asylee or refugee to be considered for the position.

Requirements

Must-haves

Day-to-day responsibilities of the role will include:
Run Microsoft Entra ID, including Conditional Access, groups, SSO, and SCIM, and implement role-based access across the company while documenting exceptions;
Automate joiner, mover, and leaver workflows with PowerShell, Microsoft Graph, Azure Automation, or similar tools, and report on access health;
Manage Windows, Mac, and iOS devices in Intune and Mosyle, including enrollment, compliance, apps, updates, and policy documentation;
Maintain TechOps-managed on-premises and cloud-hosted servers, networks, and production-floor IT systems, including scheduled patching, monitoring, and backups;
Document and test recovery runbooks for critical services; lead technical triage and restoration for TechOps incidents in line with the incident plan, including occasional urgent after-hours response;
Resolve Tier 2 Help Desk escalations and reduce recurring issues through root-cause fixes, runbooks, and training;
Balance scoped improvement projects with operational and incident work, assess dependencies and rollback plans before high-impact changes, and raise project risks early.
At least 4 years in IT, including 2 years in a systems administration role in a business environment.
Hands-on Microsoft Entra ID or comparable identity administration (such as Okta), including group-based access, joiner/mover/leaver processes, and SSO/SCIM integrations.
Windows endpoint management in Intune (enrollment, compliance, apps, and updates) and Apple device administration in an MDM such as Mosyle or Jamf.
Administrative automation with PowerShell, Python, or APIs, plus clear documentation and the ability to help a Help Desk team learn.
Operating production server or cloud services, including patching, monitoring, backups, and tested restores, with working knowledge of networking fundamentals.
Microsoft certifications such as SC-300, MD-102 or AZ-104.
Passwordless sign-in with FIDO2 security keys or Windows Hello for Business.
Manufacturing or other regulated environments, including ISO 27001 controls.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurepython

Platform: ashby
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave