HybridThree days on-site per week in the Agoura Hills office; occasional travel may be required.
IT OperationsSystem Administration, Network Engineering & Administration
About the job
Requirements
Must possess a vibrant personal relationship with Jesus Christ and agree with the Joni and Friends statement of faith.
A Bachelor's degree in Computer Science or Information Technology, or an Associate's degree and three to five relevant IT certifications, is required.
Five or more years of complex network and system administration work experience is required.
Three or more IT certifications related to administration of Microsoft services, identity management, network services, IT/cybersecurity, CRM, or ERP systems are required.
Strong experience with Microsoft Entra ID (Azure Active Directory), including Conditional Access, single sign-on, and identity governance.
Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient).
Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment.
Proven proficiency in network, system, and server administration, including server virtualization and management of cloud services.
Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure Active Directory) in a hybrid or cloud-first environment.
Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems.
Expert knowledge of networking concepts, protocols, and security is required.
Knowledge and three or more years of experience supporting voice over IP telecommunications systems and mobile device configuration is required.
Ability to install and upgrade hardware systems, learn new software systems, train others to use the systems, and coordinate multiple projects simultaneously.
Ability to organize and prioritize a wide range of daily tasks with varied deadlines.
Good judgment in recognizing and maintaining confidentiality of sensitive information.
Must enjoy working with others in a team environment and be flexible to meet department and ministry requirements.
Must be dependable, cooperative, flexible, and exhibit enthusiasm and initiative.
Must support a flexible schedule and work evening or weekend hours when needed.
Good verbal and written interpersonal communication skills and ability to organize and prioritize a wide range of daily tasks with varied deadlines.
Must be detail-oriented, committed to accuracy, collaborative, self-starting, flexible, and able to work independently.
Must demonstrate a keen sense of confidentiality.
Strong general computer skills and competent working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the internet.
Must be able to sit for extended periods, operate a computer and standard office equipment, communicate clearly in person and over the phone, and occasionally stand, walk, bend, kneel, or reach.
May occasionally need to lift, carry, push, or pull items and equipment weighing up to 25 pounds.
Responsibilities
Administer and implement IT infrastructure, including networks, servers, the Microsoft tenant, Entra, and Active Directory.
Set up LAN/WAN systems and services in compliance with organizational guidelines and procedures, including SD-WAN, VLAN segmentation, and secure remote connectivity.
Monitor LAN/WAN performance and ensure it meets organizational needs for performance, resiliency, and traffic routing across distributed locations.
Maintain domain name registrations and certificates needed for organizational operations, including SSL and SSO certificates and expiration monitoring.
Configure email services using Microsoft Exchange Online or Server and Microsoft 365.
Ensure systems are properly configured and operating systems are updated and secure, including endpoint compliance policies, patching, and device security baselines.
Provide IT support escalation for complex issues related to IT systems, software, and hardware.
Track software usage and licensing for legal compliance, including Microsoft licensing, SaaS subscriptions, and vendor licensing portals.
Troubleshoot remote access connectivity issues, including VPN, Conditional Access, and endpoint compliance-related access issues.
Create, implement, enforce, and monitor security policies, strategies, and procedures to protect organizational data and systems.
Configure and maintain security for the Microsoft tenant, domain, network, servers, email, software systems, and end-user computers.
Install, configure, and maintain enterprise security platforms, including Fortinet (FortiGate, FortiClient, EMS, and related services), Microsoft security tools, and endpoint protection platforms.
Implement and maintain SSO and MFA for major software systems, including enterprise application registration, SSO configuration, certificate lifecycle management, and identity governance.
Monitor, investigate, and respond to security events and alerts across systems, including firewall, endpoint, and identity platforms.
Support the organization's VoIP telecommunications system and ongoing needs.
Ensure voice and conferencing capabilities for headquarters and field operations work properly, and engage vendors for support and new services as needed.
Configure and troubleshoot mobile devices, connectivity, and integration with software systems.
Implement and oversee security administration of major software systems used by the organization.
Administer and support cloud-based SaaS platforms, CRM and ERP systems, including integration with SSO, user provisioning, and access control.
Use Intune to secure, control, and manage organizational devices and applications, including Autopilot deployment, Win32 application packaging, compliance policies, and device lifecycle management.
Administer Microsoft 365 systems such as Teams, SharePoint, and OneDrive, including security configuration, sharing controls, and governance policies.
Automate system administration tasks using scripting and modern tools such as PowerShell and APIs.
Research and implement integrations between enterprise systems to improve efficiency and security.
Complete training or self-study to gain knowledge or certifications for new software systems to ensure proper administration and security.
Research and implement innovative automated approaches for system administration and operational efficiency, including scripting, automation, and process optimization.
Lead and guide vendor engagement for enhanced systems services and support.
Manage network printers, multifunction printers, and printing services, including cloud printing systems.
Work with vendors to ensure printing equipment is serviced and supported.
Maintain detailed documentation of network and system configurations.
Create standard operating procedures and best practices.
Communicate with and train staff and ITS team members on IT infrastructure and systems.
Manage data backups of critical systems and maintain offsite or cloud data storage, including cloud backup platforms and protection against data loss or ransomware.
Test and verify data backups, perform restoration tasks, and conduct at least annual restoration testing, including periodic validation of restore procedures and recovery timelines.
Remain current with industry-related technology standards and best practices.
Participate in strategy planning and implement solutions for new or improved IT infrastructure and software systems.
Manage vendors for outsourced IT services and system support.
Lead projects and assignments that support the overall IT strategic plan.
Complete or participate in annual audits of IT systems, infrastructure, and security.
Travel occasionally as required.
Perform other duties and projects assigned by the supervisor to support department and organizational needs.
Model Joni and Friends' Christian beliefs and practices during working and nonworking hours.
Support fellow staff and volunteers in following Christ through prayer, sharing Scripture, and setting an example of faithful Christian living.
Engage with people living with disabilities with love and dignity in a manner that commends and proclaims the gospel.
Participate in or lead prayer and worship during meetings, events, and outreaches.
Affirm the Joni and Friends Statement of Faith annually and refrain from conduct or promoting religious beliefs inconsistent with it.
Uphold and advance the organization's mission and vision through its values.
Actively attend a church whose statement of faith does not contradict Joni and Friends' Statement of Faith.
Desired Qualifications
Experience with scripting or automation, such as PowerShell or equivalent, is strongly preferred.
Understanding of Christian ministry, specifically Joni and Friends, is desirable.
We are only considering local candidates or those willing to relocate.
Duties: Perform duties and responsibilities including, but not limited to:
IT Infrastructure Administration and Support
Administration and implementation of IT Infrastructure including networks, servers, Microsoft tenant, Entra, Active Directory and more
Setup and ensure LAN/WAN system and services are compliant with the organization’s guidelines and procedures including SD-WAN, VLAN segmentation, and secure remote connectivity
Monitor and ensure LAN/WAN performance meet organizational needs including performance, resiliency, and traffic routing across distributed locations
Maintain domain name registrations and certificates needed for organization’s operations including SSL certificates, SSO certificates, and expiration monitoring
Configure email services – Microsoft Exchange Online or Server and Microsoft 365 software
Ensure systems are properly configured and Operating Systems are updated and secure including endpoint compliance policies, patching, and device security baselines
Provide IT support escalation for complex support issues related to IT systems, software, and hardware
Track software usage and licensing to ensure legal compliance including Microsoft licensing, SaaS subscriptions, and vendor licensing portals
Troubleshoot remote access connectivity issues including VPN, conditional access, and endpoint compliance-related access issues
Security
Create, implement, enforce, and monitor security policies, strategies, and procedures to protect the data and systems of the organization
Configure and maintain security for all aspects of the Microsoft tenant, domain, network, servers, email, software systems, and end-user computers
Install, configure, and maintain enterprise security platforms including Fortinet (Fortigate, FortiClient, EMS, and related services), Microsoft security tools, and endpoint protection platforms
Implement and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for all major software systems including enterprise application registration, SSO configuration, certificate lifecycle management, and identity governance
Monitor, investigate, and respond to security events and alerts across systems including firewall, endpoint, and identity platforms
Telecommunications
Support VOIP telecommunication system and on-going needs of organization
Ensure voice and conferencing capabilities for headquarters and field operations is working properly and engage vendor for support and new services when needed
Configure and troubleshoot mobile devices, connectivity, and integration to our software systems
Software Systems Administration
Implement and oversee Security Administration of major software systems used by organization
Administer and support cloud-based SAAS platforms, CRM and ERP systems used across the organization including integration with SSO, user provisioning, and access control
Utilize Intune to secure, control and manage organizational devices and applications including Autopilot deployment, Win32 application packaging, compliance policies, and device lifecycle management
Administer all Microsoft 365 systems such as Teams, Sharepoint, OneDrive, etc. including security configuration, sharing controls, and governance policies
Automate system administration tasks using scripting and modern tooling (PowerShell, APIs, or equivalent)
Research and implement integrations between enterprise systems to improve efficiency and security
Complete training or self-study to gain knowledge and/or certifications for new software systems to ensure proper administration and security
Research and implement innovative and automated approaches for system administration tasks and operational efficiencies that will save time and effort including scripting, automation, and process optimization
Lead and guide vendor engagement for enhanced services and support of systems
Printing & Scanning Solutions
Manage network printers and multi-functional printers, and printing services including cloud printing systems
Interface with vendors to ensure equipment is serviced and supported
Documentation and Training
Maintain detailed documentation of network and system configurations
Create standard operating procedures and best practices
Communicate and train staff and ITS team members on IT Infrastructure and Systems
Data Backup Services
Manage data backups of critical systems and maintain offsite/cloud data storage including cloud backup platforms and protection against data loss or ransomware
Test and verify data backups; perform restoration tasks and minimum annual restoration test including periodic validation of restore procedures and recovery timeline
Other
Remain current with industry related technology standards and best practices
Participate in strategy planning and implement solutions for new or improved IT infrastructure and software systems
Vendor management for outsourced services and support of IT systems
Lead projects and assignments to support the overall IT strategic plan
Complete or participate in annual audits of IT Systems, Infrastructure and Security
Occasional travel may be required
Other duties and projects assigned by supervisor to support department and organizational needs
Qualifications:
Must possess a vibrant personal relationship with Jesus Christ and agree with the Joni and Friends statement of faith
Desire to serve in a growing and dynamic Christian service ministry
Bachelor’s degree in Computer Science or Information Technology OR Associate’s degree and 3-5 relevant IT Certifications required
5+ years of complex network and system administration work experience required
Three or more IT certifications related to administration of Microsoft services, Identity Management, Network Services, IT/Cyber Security, CRM or ERP systems are required
Strong experience with Microsoft Entra ID (Azure AD), including Conditional Access, SSO, and identity governance
Experience managing firewall and network security platforms, preferably Fortinet (FortiGate, EMS, and FortiClient)
Experience with endpoint management using Microsoft Intune, including device provisioning and application deployment
Proven proficiency in network, system and server administration including server virtualization and management of cloud services is required
Working knowledge and experience implementing and supporting Microsoft Active Directory and Microsoft Entra ID (Azure AD) in a hybrid and/or cloud-first environment is required
Experience with security monitoring, log analysis, and incident response across identity, endpoint, and network systems
Experience with scripting or automation (PowerShell or equivalent) strongly preferred
Expert knowledge of networking concepts, protocols and security is required
Knowledge and 3+ years’ experience supporting VOIP telecommunications systems and mobile device configuration is required
The ability to install and upgrade hardware systems, learn new software systems, train others to use the systems and coordinate multiple projects simultaneously is required
Ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines is required
Good judgment required in recognizing and maintaining confidentiality of sensitive information
Must enjoy working with others in a team environment and be flexible to meet the requirements of the department and ministry
Must be dependable, cooperative, flexible, and exhibit enthusiasm and initiative
Must support a flexible schedule and work evening/weekend hours when needed
Good interpersonal communication skills both verbal and written and the ability to effectively organize and prioritize a wide range of daily tasks with varied deadlines are necessary
Must be detail oriented, committed to accuracy, a collaborator and self-starter who is flexible and able to work independently
Must demonstrate a keen sense of confidentiality
Strong general computer skills are necessary along with a competent, working knowledge of Windows, Microsoft Excel, Microsoft Word, Microsoft Outlook, and the Internet
Understanding of Christian ministry and specifically Joni and Friends is desirable
Physical Requirements: This position primarily involves sedentary work in an office setting. The employee must be able to sit for extended periods, operate a computer and other standard office equipment, communicate clearly in person and over the phone, and occasionally stand, walk, bend, kneel or reach to access files and supplies or move items. The role may also require occasionally lifting, carrying, pushing, or pulling items and equipment up to 25 pounds. Work is performed in a professional office setting with occasional movement throughout the facility. The environment is typically quiet to moderate in noise level, with standard lighting and temperature conditions. Employees are expected to maintain safety and ergonomic awareness while performing all tasks. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the job.
Compensation: $98,000 - $115,000 per year. This is a hybrid position working in the Agoura Hills office on Monday, Tuesday, and Thursday. Wednesday and Friday are remote workdays.
EMPLOYEE MINISTRY ENGAGEMENT:
Joni and Friends is a Christ-centered community. Therefore, we expect every employee at Joni and Friends to excel in their walk with Christ and in their specific employment role in our Christian community. We purposely create a gospel-centered environment and offer leadership and development training to help employees perform their work with integrity and excellence, serving in our Christian community at Joni and Friends to fulfill our religious ministry: to share the gospel and serve people living with disabilities.
All employees do this, regardless of their specific role, by:
Modeling Joni and Friends’ Christian beliefs and practices to advance our gospel mission during working hours and nonworking hours
Supporting fellow staff and volunteers at Joni and Friends in following Christ, by praying for each other, sharing Scripture and setting an example of how to live a faithful Christian life
Engaging in the lives of people living with disabilities with love, dignity, and in a manner that commends and proclaims the gospel.
Participating or leading in prayer and worship during meetings, events, and outreaches
Affirming the Joni and Friends Statement of Faith annually and not engaging in any conduct or promoting any religious beliefs inconsistent with such beliefs
Upholding and advancing Joni and Friends’ Mission and Vision through a focus on our Values.
Actively attending a church that has a statement of faith that does not contradict Joni and Friends’ Statement of Faith
Joni and Friends seeks to glorify God in the way we conduct ourselves, and in the work we do together as a Christian community. Employment at Joni and Friends is not only a job but a ministry and a calling from God.