Systems Administrator – Endpoint & Identity

Job not on LinkedIn

🔥 0 minutes ago

🔔 Pennsylvania – Remote

🔔 Pennsylvania – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

⌨️ Systems Administrator

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

AMC Health

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2002

🏥 Healthcare

☁️ SaaS

🤖 Artificial Intelligence

💰 Private equity on 2021-07

Healthcare • SaaS • Artificial Intelligence

AMC Health is an enterprise virtual care and remote patient monitoring company that provides clinician-led virtual care, AI-driven predictive models, and real-time physiometric data capture. It partners with health plans, health systems, government programs (including Veterans Affairs), employers, and clinical trials to reduce readmissions, improve chronic disease outcomes, and lower cost of care through an end-to-end platform combining RPM devices, predictive analytics, care management, and quality improvement services.

📋 Description

• Administer Microsoft 365 tenant services, including Exchange Online, SharePoint/OneDrive, and Teams • Administer Microsoft Intune across Windows and macOS, including enrollment, configuration and compliance policies, application deployment, patch rings, and updates • Perform zero-touch provisioning through Windows Autopilot and Apple Business Manager • Maintain standardized device builds and reduce configuration drift • Coordinate endpoint hardware logistics, procurement, drop-shipping, RMAs, and secure device returns or disposal • Administer Entra ID users, groups, roles, licensing, SSO integrations, and application registrations • Design, test, deploy, and tune Conditional Access and MFA policies • Execute identity lifecycle management, including onboarding, role changes, and offboarding access revocation • Enforce least-privilege and role-based access and conduct periodic access reviews and recertification • Configure endpoint controls supporting HIPAA Security Rule safeguards, including access control, automatic logoff, audit logging, and encryption • Enforce BitLocker and FileVault full-disk encryption and manage key escrow and recovery • Maintain DLP and device compliance policies protecting PHI • Execute remote lock and wipe for lost, stolen, or compromised devices • Support incident response and breach investigations with device and access log evidence • Maintain endpoint security baselines and remediate vulnerability findings • Maintain documentation and produce evidence for HIPAA audits, risk assessments, SOC 2 reviews, and customer security questionnaires • Serve as escalation point for advanced remote Windows and macOS desktop support • Diagnose operating system, application, authentication, VPN, network connectivity, printing, and hardware issues remotely • Manage support ticket queue against SLAs and communicate with non-technical staff, primarily in writing • Develop SOPs, runbooks, internal documentation, and end-user knowledge base articles • Read and write PowerShell scripts to automate repetitive administrative work • Track hardware, software, and license inventory across the asset lifecycle • Interface with Network Engineering, Security, and Application teams • Provide technical knowledge and recommendations to staff • Perform after-hours maintenance, patching, and incident response as needed • Perform other related duties as assigned

🎯 Requirements

• 3–6 years' experience in IT systems administration, including hands-on administration of Microsoft 365 and Microsoft Intune in a production environment • 3 years' experience serving as a direct technical interface to internal and external customers • Working understanding of HIPAA and handling of Protected Health Information (PHI) in an end-user computing environment • Demonstrated desktop support experience on both Windows and macOS • Working knowledge of DNS, DHCP, TCP/IP, VPN, and remote diagnosis of home network and connectivity issues • Ability to read and write PowerShell scripts for administrative automation • Excellent written communication and self-directed work habits, with sound judgment about when to escalate • Demonstrated experience in a majority of: Windows and macOS endpoint administration; Entra ID or Active Directory; SSO, MFA, and Conditional Access; HIPAA-compliant endpoint controls; BitLocker and FileVault encryption and key escrow; Windows Autopilot and Apple Business Manager; macOS management at scale with Jamf, Kandji, or comparable platform; SaaS identity governance or SCIM-based provisioning; EDR, SIEM, or vulnerability management tooling; fully distributed remote workforce support; HIPAA, HITRUST, or SOC 2 audits • Microsoft MD-102 or 3+ years hands-on endpoint administration experience • Microsoft SC-300, Microsoft AZ-104, or Apple Certified Support Professional preferred • Must be a U.S. citizen residing in the continental United States • Must maintain a suitable home work environment with reliable high-speed internet • Ability to perform a stationary computer-based role with extended periods of computer use • Ability to occasionally lift and handle computer equipment up to 25 pounds

🏖️ Benefits

• Fully remote position • Some after-hours availability for maintenance, patching, and incident response • Minimal travel required