The System Administrator II will work closely with the other System Administrators, and will be responsible for designing, configuring, and maintaining the Company’s infrastructure, software, and serve as a point of escalation for other IT crew members. This position will include various aspects of networking, as well. Moreover, ensuring that systems remain online and handle any other day to day issues that may arise. This job could include minimal travel to various locations to help aid in the projects and break-fix, as needed. The ideal candidate will come on board and immediately make an impact with projects and other daily tasks. This position does not offer relocation . This is not a remote or hybrid position.

Main Ingredients:

• Assumes the responsibility for following all documented policies that the IT Department has in place.
  • Backup and Recovery
    • Perform data backup and recovery operations, ensuring that all required systems and data are successfully backed up to the appropriate media types.
    • Implement and maintain data backups, retention, and recovery systems including tape backup, and off-site disk/cloud replication.
    • Test and verify that the data that is backed up is valid and can be used in a DR situation.
  • VMWare/Storage Systems
    • Monitor all hosts and virtual machines to ensure there are no systems issues, and if there are, remediate them as soon as possible.
    • Able to maintain and build the hosts by applying firmware, appropriate software images, and deploying virtual servers so they are secure and operate as intended.
  • File Servers
    • Maintain the file structure and security on the file servers.
    • Add/remove/modify the sharing and NTFS permissions.
    • Audit and ensure that routine and periodic maintenance of access permissions are completed and archive any stale/abandoned data.
  • Active Directory/DHCP, DNS, etc.
    • GPO creation/management/filtering.
    • Maintain security permissions, group memberships/roles, etc.
    • Create/terminate and manage user accounts.
    • Maintain the health of the domain controllers and anything related to ADUC/Sites-Services, etc..
    • Manage ADUC/multiple domains with various on-premise and cloud integrations.
  • Patch Management
    • Work with various systems to ensure that patch management is being completed, as needed
    • Stay on top of current events and zero-day threats to ensure that critical systems are being patched to avoid security incidents/hacks, etc.
  • Anti-Virus
    • Work to ensure that anti-virus software is performing as it should be
    • Maintain the antivirus solution for all systems
    • Remove viruses, malware, ransomware, and any other identified threats from infected systems and files.
    • Report on the status of the antivirus implementation for all systems
  • Server Environment Administration
    • General System administration
    • Print server administration
    • Terminal server administration
    • Install and configure software/hardware
    • Microsoft Azure platform experience
    • Escalated resource for Windows desktop support
  • Email Administration
    • Manage and monitor Office 365 services in a hybrid infrastructure
    • Manage a highly secure system through proper configuration and system access monitoring.
    • Continue to expand and implement new security measures for the entire platform
    • Troubleshoot and resolve issues with user access and other email related problems that occur
    • Work with the NGVC Help Desk to troubleshoot email related issues, flow problems, NDRs, etc.
    • Maintain a solid and highly proficient understanding of upcoming changes to the platform and assist with change management to implement various changes and work with various departments to coordinate the changes.
    • Monitor and communicate to stakeholders the performance of the services, security risks, etc.
    • Perform investigations for suspicious emails and respond as needed to ensure security and prevent threats.
    • Stay ahead and monitor the Office 365 dashboard and ensure that security standards are in place, monitor for improper configurations, spamming, etc.
    • Collaborate with other IT team members, including networking, security and system administrators, to ensure cross training, documentation and facilitate effective issue resolution.
  • Security Management

• Event log monitoring
• Logging Solution (Splunk, WUG, etc.)
• Log review
• Security response

• Other Areas/Project Related Work:
  • Licensing

• Understanding of Microsoft and other providers’ licensing is a must.
• Following proper licensing is a must. No exceptions.
• Networking Experience
  • The ability to troubleshoot any network related issues.
  • Be able to scope out the requirements of various projects/software/hardware needs to ensure that the environment is secure, and no ports are left open/exposed.

• Ability to follow change control processes and procedures.
• Industry standards for system configuration - PCI Hardening, PII, SOX, and Zero Day Threat Remediation
• Review vulnerability scans and stay ahead of the curve on security incidents and best practices
• Certificate management
  • Responsible for all SSL certificates and the renewals, proper installation, etc., as needed.
• Cross-train other team members
• Experience with various IT frameworks, compliance with various frameworks/laws, and how to secure systems based on them (CIS Controls, NIST, PII, PCI, SOX, etc.)
• Ability to analyze and determine if new products/services are safe for the environment based on PCI and SOX compliance standards.
• Supports SOX and PCI compliance and internal audit tasks.
• Establishes network specifications by conferring with users; analyzing workflows, access controls, information and security requirements; designing hardware administration, including interface configurations and routing protocols (dynamic and static).
• Analyzes and resolves any alerts (hardware, software, security, etc.)
  • All alerts must be responded to according to the severity level of the alert. Monitoring alerts on the weekend will be required via email, and escalations to various crew members may be needed.
• Ensure that the networks and overall infrastructure is locked down and segmented.
• Analyze problems and provide technical assistance to solve them.
• Planning and executing the configuration, installation, testing and maintenance of all infrastructure related devices.
• Contacting various vendors and arranges for repair, troubleshooting, updates, etc. for software and hardware related issues within the infrastructure department.
• Protects organization's value by keeping information confidential.
• Supports tier 2 related requests for issues in production, testing, and development environments.
• Creating and defining infrastructure-based policies and procedures.
• Documenting all aspects of the environment.
• Documenting all standards and procedures.
• Establishing and maintaining effective communication and coordination with Company staff (good4u crew, management, etc.). This includes maintaining regular contact with all departments to obtain information and to correct error(s) in the network operations.
• Accomplishes organization goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
• Remediating any PCI/Vulnerability assessments
• Manages projects with internal and external resources, and completing project on time, on budget, and as promised.
• Provides outstanding customer service and a happy attitude to our employees, stores, and customers.
• Schedules, maintains, and participates in the on-call rotation, respond to all messages sent by Natural Grocers staff in a timely manner, including off hours and vacations.
  • Some after-hours work (post 5:00pm) may and will be required from time to time. The frequency will vary based on the project(s) at hand; however, you will still be required to maintain the computing and network environment, installing/upgrading various systems and monitoring network performance during this time.
• Other duties, as assigned.

• Four-year college degree in Information Technology, Computer Science or a related discipline or equivalent experience
• Minimum 3 years of email administration experience
• Minimum 5 years of system administration experience
• Minimum 3 years of VMWare administration experience
• Minimum of 2 years of system administration experience with Microsoft Azure is preferred
• Microsoft MCP, MCSA/MCSE, CompTIA or higher certifications are preferred, not required
• Experience with Microsoft Azure, Office 365 and Mimecast SEG.
• Experience supporting large-scale production environments
• Scripting experience for task automation, specifically Exchange Online
• Excellent written and verbal communication skills
• Experience with hardware maintenance and lifecycle
• Experience with RAID, SANs, and attached storage
• Cross-train other team members of the department
• Tier 2 infrastructure support of application issues in production, testing, and development environment
• Gather data pertaining to project needs, and use the information to identify,
  predict, interpret, and evaluate system and network requirements
• Strong troubleshooting and problem-solving skills, including application and network-level troubleshooting
• Confer with company employees to identify and solve existing system problems
• Dedicated to providing outstanding customer service to our employees, stores, and customers
• Self-driven / Self-motivated
• Maintains a positive and supportive attitude when communicating with others
• Writes process and procedure documentation as required
• Understands and abides by change control practices
• Schedule, maintain, and participate in the on-call rotation, respond to all messages sent by NGVC staff in a timely manner, including off hours and vacations
• Updates job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participates in professional organizations
• Other duties as assigned
• Some travel may be required

• Birthday Bonus Pay
• Vitamin Bucks (up to $2,080 earned as store credit annually)
• Holiday Pay for 5 Holidays – Stores Closed
• Paid Time Off (sick days and vacation) that Increases with Tenure
• Paid Nutrition Education
• good4u Crew Member Discount
• {N}power Program (customer appreciation and rewards program)
• Regular, Scheduled Pay Increases
• Advancement Opportunities and Career Development
• Health and Wellness Program
• Employee Assistance Program (EAP)
• Employee Referral Program

Full-Time Crew Members (30+ hours/week)

• Medical, Dental and Vision Insurance
• Paid Parental Leave
• Paid Medical Leave (through company paid short-term disability insurance)
• Company Paid Short-Term Disability Insurance
• Company Paid Life Insurance
• Voluntary Benefits Including Hospital Indemnity, Accident Insurance, Long-Term Disability Insurance, Term Life Insurance
• Retirement Savings Plan (401k) with discretionary Company Match
• Healthcare and Dependent Care Flexible Spending Account (FSA)
• Health Savings Account (HSA) with Company Match

Diversity Statement

O = Occasional; 1-33% of time

F = Frequent; 34-66% of time

C = Constant; 67-100% of time

F = Frequent; 34-75% of time

C = Constant; 76-100% of time