Systems Administrator

The Bureau of Information Systems provides a full range of technology support services for key business functions and Charter mandated responsibilities of the Comptroller's Office. These services include technology strategic planning, web site development, graphic design, disaster recovery, systems development, network administration, audio/visual services, business process re-engineering, change management, program management, security administration, Service Desk, computer operations, telecommunications, and document management. As part of security administration, Advanced Threat Protection (ATP) technology is used for detecting and preventing situations where sensitive information is exposed outside the organization's network.

Under the direction of the Director of IT Operations & Network Services, the System Administrator manages Active Directory provisioning, Office 365 administration, ATP monitoring, security administration and MS security updates. Tasks include, but are not limited to, the following:

Microsoft Active Directory Administration

• Provide identity management functions for entire account lifecycle, including creation, modifying, and separation accounts from the environment.

• Perform and monitor security administration by modifying users, groups and application links, passwords etc. for all agency critical systems.

• Manage security policies for desktop, laptops, and mobile devices.

Microsoft Endpoint Manager / Microsoft Intune Administration

• Test, deploy, and report on MS security updates and MECM patch management & software deployments to servers and clients; monitor for new updates.

• Provide Intune security administration for desktops, laptops, and mobile devices.

• Mitigate and resolve security related items as they relate to Endpoint management updates.

• Provide Tier 2 support with desktops, laptops, and mobile devices in regard to missing patches and/or Intune compliancy.

Microsoft 365 Administration

• Maintaining security by monitoring the system for potential vulnerabilities, identifying and mitigating risks.

• Perform and monitor Microsoft 365 product licensing, permissions, features, and group access.

• Manage Exchange Online, including mailbox permissions, quarantined items.

• Troubleshooting technical issues such as email delivery failures or authentication problems

• Managing the deployment of new features or functionality after they have been tested in a staging environment.

• Analyze and monitor Microsoft Office 365 Advanced Threat Protection management alerts and email quarantine for policy violations/escalation.

• Manage Microsoft Security and Compliance Administration portals, monitoring and mitigating security related issues. Provide solutions to complex Microsoft 365 security challenges.

• Support Microsoft 365 eDiscovery functionality for Office of General Counsel

Print Management Administration

• Setup, configure, and deploy printers throughout the agency.

• Provide Tier 2 support for Print environment, including Secure LDAP sign-in, Secure Print, Scanning from Multi-Function Printers.

• Manage the managed service portal for service and consumable's replacement on the printers.

Fax Solution Administration

• Administer the current fax solution, including adding, changing, removing users/mailboxes that need to receive incoming faxes.

• Setup multifunction printers to receive incoming faxes where needed.

• Setup inbound fax numbers to route to network fileshares through city ftp server and scheduled scripts to route appropriately.

Physical Security System Administration

• Administer the current key card access system, assigning/removing appropriate access to users as required.

• Monitor video surveillance cameras to ensure all are recording properly.

• Laisse with security vendor on scoping, quoting, and installing new card readers or video surveillance cameras.

Information Technology Support

• Assist in maintaining the agency's network security policies, standards, and procedures.

• Provide Tier 2 technology support to team members of the Service Desk as an escalation point for unsolved issues.

• Utilize the agency's trouble ticket management software.

• Participate in technical working groups strategizing for future requirements and propose architecture enhancements based on business needs. Research and recommend innovative approaches for system administration tasks.

• Prepare security related reports using different applications for management.

Perform related assignments and special projects as required.

QUALIFICATION REQUIREMENTS: A baccalaureate degree from an accredited college or university and three (3) or more years of satisfactory full-time computer operations experience, in a large-scale networked, multi-tiered, or mainframe computer environment, data communications network experience or experience in LAN or WAN computer environments, and/or local desktop support.

Minimum Qualifications

1.A baccalaureate degree, from an accredited college including or supplemented by twenty-four (24) semester credits in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or

2.A four-year high school diploma or its equivalent approved by a State's department of education or a recognized accrediting organization and three years of satisfactory experience in any of the areas described in "1" above; or

3.Education and/or experience equivalent to "1" or "2", above. College education may be substituted for up to two years of the required experience in "2" above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. In addition, twenty-four (24) credits from an accredited college or graduate school in cyber security, network security, computer science, computer programming, computer engineering, information technology, information science, information systems management, network administration, or a pertinent scientific, technical or related area; or a certificate of at least 625 hours in computer programming from an accredited technical school (post high school), may be substituted for one year of experience.

Preferred Skills

• 4-5 years of experience in Microsoft Server Administration with MCSA certification

• Expertise in Microsoft Endpoint Configuration Management (MECM) / Microsoft Intune for servers and workstations

• Expertise in Active Directory Administration, including, but not limited to, Account Creation, Security Permissions, DNS, DHCP, Group Policy Management, Print Management, and Sites and Services management

• Working knowledge of Microsoft 365 products, including Exchange Online, SharePoint, OneDrive, PowerShell, Microsoft Azure, eDiscovery

• Extensive knowledge of Microsoft desktop operating systems (Windows 10/11) and Office Suite

• Familiar with New York City mainframe applications (FMS, PMS, Vendex, etc.) in order to liaise with other City agencies, such as FISA, DOF, etc.

• Ability to plan, organize and work on multiple tasks simultaneously

• Experience in reading MECM client Logs and Patch compliance

• Working knowledge of Advanced Threat Protection technology and policies creation and multi-factor authentication technology

• Working knowledge of OpenText XMedius faxing systems

• Ability to work in a team environment

• Strong communication skills.

55a Program

This position is also open to qualified persons with a disability who are eligible for the 55-a Program. Please indicate at the top of your resume and cover letter that you would like to be considered for the position through the 55-a Program.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education's website at https://studentaid.gov/pslf/.

Residency Requirement

New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for 2 continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of interview.

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.