Safehold Inc. · 1 week ago
Systems Administrator & Support Lead
Safehold Inc. is seeking a highly skilled, adaptable, and service-oriented Systems Administrator & Support Lead to oversee the firm’s IT infrastructure while serving as the primary point of contact for all end-user support. This role requires a versatile, multi-disciplinary IT professional capable of operating across cybersecurity, networking, hardware, software, cloud services, and daily support operations.
Responsibilities
Review, analyze, and resolve security alerts, vulnerabilities, and threat notifications, ensuring timely remediation and incident follow-up
Manage the firm’s cybersecurity awareness program, including KnowBe4 training campaigns, phishing simulations, user enrollment, tracking completion, and generating compliance or audit reports
Manage all identity and access platforms, including Entra ID, Active Directory, Group Policy, MFA, Conditional Access policies, SSO integrations for SaaS applications, and authentication/authorization workflows
Administer and support the full Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint, OneDrive, Intune endpoint management, security/compliance configurations, application policies, and end-to-end user lifecycle operations
Manage the firm’s cloud-based infrastructure and on-premises firewalls, switches, networking components, and connectivity services
Configure, maintain, and support remote access and VPN services (Fortinet), including profile creation, policy updates, MFA integration, and troubleshooting connectivity issues for remote users
Coordinate with external providers—including MSPs for Azure and networking, SaaS vendors, and security service partners
Leverage AI-assisted tools (e.g., Microsoft Copilot, ChatGPT) to streamline workflows, improve operational processes, enhance documentation quality, and support continuous improvement efforts across the organization
Provide documentation, evidence, and remediation support for internal and external audit and compliance reviews
Manage patching and updates for operating systems, applications, endpoints, and servers to maintain a secure and compliant environment
Troubleshoot and resolve issues across the full infrastructure stack—including endpoints, servers, virtualization, storage, networking, remote access, WAN acceleration, and security tools—while identifying and implementing root-cause fixes to prevent recurrence
Oversee asset lifecycle management, including procurement, inventory tracking, licensing, warranty management, and timely replacement of end-of-life hardware
Develop scripts and automations (e.g., PowerShell, Graph API, Intune automations) to streamline provisioning, reporting, and remediation, reducing manual effort and operational overhead
Serve as the primary point of contact for all technology support issues, delivering Tier 1–3 support through the ticketing system, in-person requests, and remote support tools
Own the full onboarding and offboarding process, including account provisioning/deprovisioning, hardware preparation, device assignment, application access setup, and end-user training
Maintain accurate logging and tracking of all support requests in the Zendesk ticketing system, ensuring proper categorization, documentation, and follow-through
Build, image, configure, and deploy laptops and mobile devices, ensuring consistent baselines, security compliance, and proper enrollment into Intune and endpoint management systems
Install, diagnose, repair, maintain, and upgrade hardware, software, peripherals, mobile devices, and printers to ensure optimal performance and reliability
Support workstation and office equipment, including docking stations, monitors, webcams, headsets, and other peripherals, ensuring proper configuration and connectivity
Provide comprehensive mobile device support, including iOS/Android troubleshooting, MDM enrollment via Intune, device policies, email setup, and coordination with mobile carriers such as Verizon and AT&T for activations, line changes, SIM swaps, and service escalations
Create and deliver end-user training, documentation, and user guides, including onboarding materials, and process documentation
Support the firm’s document library and data workflows, including permission issues, collaboration needs, structured storage, access troubleshooting, and content-related support
Provide support for SaaS and line-of-business applications, including access issues, SSO troubleshooting, permissions, and vendor escalations
Identify patterns and recurring support issues, implementing root-cause fixes, configuration changes, or process improvements to reduce repeat incidents
Support conference rooms and collaboration tools, including displays, meeting hardware, A/V equipment, and Microsoft Teams Rooms functionality
Provide executive-level support, ensuring high-quality technical assistance when issues arise
Collaborate with cross-functional teams (HR, Finance, Legal, Operations) to address system-related issues, improve workflows, and support technology-driven initiatives
Qualification
Required
4–6+ years of combined systems administration and end‑user support experience in a fast‑paced, high‑demand environment
Hands‑on experience with Entra ID, Active Directory, Group Policy, Conditional Access, MFA, and SSO/SAML integrations for SaaS applications
Proficiency with endpoint management tools such as Intune for enrollment, compliance, device configuration, and application deployment
Deep understanding of Windows 11, workstation hardware, imaging, and enterprise device deployment processes
Experience with network fundamentals, including DHCP, DNS, VPNs, firewalls, routing, switching, and wireless technologies
Experience configuring and supporting enterprise VPN platforms (Fortinet preferred), including profile creation, MFA integration, and remote access troubleshooting
Experience supporting iOS and Android devices, MDM enrollment, email/mobile app setup, and coordinating with mobile providers for provisioning and service management
Demonstrated ability to troubleshoot across the full technology stack—hardware, OS, networking, identity, cloud services, and SaaS applications—with the ability to perform root‑cause analysis
Experience coordinating with MSPs and SaaS vendors for escalations, issue resolution, and service management
Experience with ticketing systems such as Zendesk, including accurate logging, categorization, and documentation of all issues
Excellent communication, customer service, and stakeholder‑management skills, with the ability to support non‑technical and executive users
Highly organized, detail‑oriented, and able to work independently while managing multiple priorities
Results‑driven, self‑motivated, and able to perform effectively in fast‑paced environments such as finance, investment, or trading
Commitment to continuous learning and staying current with emerging technologies and best practices
Preferred
Experience administering Microsoft 365, including Exchange Online, Teams, SharePoint, OneDrive, Intune, and M365 security/compliance features
Proficiency with PowerShell or similar automation/scripting tools
Familiarity with Azure identity, security, and cloud integrations
Cybersecurity experience working with endpoint protection tools, vulnerability scanners, MDR/SOC partners, or security platforms
Benefits
PTO
Paid Sick Time Off
Paid Holidays
Medical
Dental
Vision
Life
Disability insurance
401K
Company
Safehold Inc.
Safehold Inc.
H1B Sponsorship
Safehold Inc. has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (2)
2024 (1)
Funding
Current Stage
Public CompanyTotal Funding
$3.89B2025-11-25Post Ipo Debt· $400M
2024-11-12Post Ipo Debt· $400M
2024-04-15Post Ipo Debt· $2B
Recent News
2026-01-06
2025-12-04
2025-12-01
Company data provided by crunchbase