The Job in a Nutshell:

The System Administrator II will work closely with the other System Administrators, and will be responsible for designing, configuring, and maintaining the Company’s infrastructure, software, and serve as a point of escalation for other IT crew members. This position will include various aspects of networking, as well. Moreover, ensuring that systems remain online and handle any other day-to-day issues that may arise. This job could include minimal travel to various locations to help aid in the projects and break-fix, as needed. The ideal candidate will come on board and immediately make an impact with projects and other daily tasks.

Applications are accepted by the date below, which may be updated if the hiring timeline is extended.

11/11/2024

Main Ingredients:

• Responsible for the following items:
  • Assumes the responsibility for following all documented policies that the IT Department has in place.
  • Backup and Recovery
    • Perform data backup and recovery operations, ensuring that all required systems and data are successfully backed up to the appropriate media types.
    • Implement and maintain data backups, retention, and recovery systems including tape backup, and off-site disk/cloud replication.
    • Test and verify that the data that is backed up is valid and can be used in a DR situation.
  • VMWare/Storage Systems
    • Monitor all hosts and virtual machines to ensure there are no systems issues, and if there are, remediate them as soon as possible.
    • Able to maintain and build the hosts by applying firmware, appropriate software images, and deploying virtual servers so they are secure and operate as intended.
  • File Servers
    • Maintain the file structure and security on the file servers.
    • Add/remove/modify the sharing and NTFS permissions.
    • Audit and ensure that routine and periodic maintenance of access permissions are completed and archive any stale/abandoned data.
  • Active Directory/DHCP, DNS, etc.
    • GPO creation/management/filtering.
    • Maintain security permissions, group memberships/roles, etc.
    • Create/terminate and manage user accounts.
    • Maintain the health of the domain controllers and anything related to ADUC/Sites-Services, etc.
    • Manage ADUC/multiple domains with various on-premise and cloud integrations.
  • Patch Management
    • Work with various systems to ensure that patch management is completed as needed
    • Stay on top of current events and zero-day threats to ensure that critical systems are being patched to avoid security incidents/hacks, etc.
  • Anti-Virus
    • Work to ensure that the anti-virus software is performing as it should be
    • Maintain the antivirus solution for all systems
    • Remove viruses, malware, ransomware, and any other identified threats from infected systems and files.
    • Report on the status of the antivirus implementation for all systems
  • Server Environment Administration
    • General System administration
    • Print server administration
    • Terminal server administration
    • Install and configure software/hardware
    • Microsoft Azure platform experience
    • Escalated resource for Windows desktop support
  • Email Administration
    • Manage and monitor Office 365 services in a hybrid infrastructure
    • Manage a highly secure system through proper configuration and system access monitoring.
    • Continue to expand and implement new security measures for the entire platform
    • Troubleshoot and resolve issues with user access and other email related problems that occur
    • Work with the NGVC Help Desk to troubleshoot email related issues, flow problems, NDRs, etc.
    • Maintain a solid and highly proficient understanding of upcoming changes to the platform and assist with change management to implement various changes and work with various departments to coordinate the changes.
    • Monitor and communicate to stakeholders the performance of the services, security risks, etc.
    • Perform investigations for suspicious emails and respond as needed to ensure security and prevent threats.
    • Stay ahead and monitor the Office 365 dashboard and ensure that security standards are in place, monitor for improper configurations, spamming, etc.
    • Collaborate with other IT team members, including networking, security and system administrators, to ensure cross training, documentation and facilitate effective issue resolution.
  • Security Management
    • Event log monitoring
    • Logging Solution (Splunk, WUG, etc.)
      • Log review
      • Security response
    • Other Areas/Project Related Work:
      • Licensing
        • Understanding of Microsoft and other providers’ licensing is a must.
        • Following proper licensing is a must. No exceptions.
      • Networking Experience
        • The ability to troubleshoot any network related issues.
        • Be able to scope out the requirements of various projects/software/hardware needs to ensure that the environment is secure, and no ports are left open/exposed.
      • Ability to follow change control processes and procedures.
      • Industry standards for system configuration - PCI Hardening, PII, SOX, and Zero Day Threat Remediation
      • Review vulnerability scans and stay ahead of the curve on security incidents and best practices
      • Certificate management
        • Responsible for all SSL certificates and the renewals, proper installation, etc., as needed.
      • Cross-train other team members
      • Experience with various IT frameworks, compliance with various frameworks/laws, and how to secure systems based on them (CIS Controls, NIST, PII, PCI, SOX, etc.)
      • Ability to analyze and determine if new products/services are safe for the environment based on PCI and SOX compliance standards.
      • Supports SOX and PCI compliance and internal audit tasks.
      • Establishes network specifications by conferring with users; analyzing workflows, access controls, information and security requirements; designing hardware administration, including interface configurations and routing protocols (dynamic and static).
      • Analyzes and resolves any alerts (hardware, software, security, etc.)
        • All alerts must be responded to according to the severity level of the alert. Monitoring alerts on the weekend will be required via email, and escalations to various crew members may be needed.
      • Ensure that the networks and overall infrastructure is locked down and segmented.
      • Analyze problems and provide technical assistance to solve them.
      • Planning and executing the configuration, installation, testing and maintenance of all infrastructure related devices.
      • Contacting various vendors and arranges for repair, troubleshooting, updates, etc. for software and hardware related issues within the infrastructure department.
      • Protects organization's value by keeping information confidential.
      • Supports tier 2 related requests for issues in production, testing, and development environments.
      • Creating and defining infrastructure-based policies and procedures.
      • Documenting all aspects of the environment.
      • Documenting all standards and procedures.
      • Establishing and maintaining effective communication and coordination with Company staff (good4u crew, management, etc.). This includes maintaining regular contact with all departments to obtain information and to correct error(s) in the network operations.
      • Accomplishes organization goals by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
      • Remediating any PCI/Vulnerability assessments
      • Manages projects with internal and external resources, and completing project on time, on budget, and as promised.
      • Provides outstanding customer service and a happy attitude to our employees, stores, and customers.
      • Schedules, maintains, and participates in the on-call rotation, respond to all messages sent by Natural Grocers staff in a timely manner, including off hours and vacations.
        • Some after-hours work (post 5:00pm) may and will be required from time to time. The frequency will vary based on the project(s) at hand; however, you will still be required to maintain the computing and network environment, installing/upgrading various systems and monitoring network performance during this time.
      • Other duties, as assigned.

Although this is a general outline of job responsibilities all employees are expected to be “hands on” and do whatever it takes to get the job done and help the company thrive.

Recipe for Success:

1. Four-year college degree in Information Technology, Computer Science or a related discipline or equivalent experience
2. Minimum 3 years of email administration experience
3. Minimum 5 years of system administration experience
4. Minimum 3 years of VMWare administration experience
5. Minimum of 2 years of system administration experience with Microsoft Azure is preferred
6. Microsoft MCP, MCSA/MCSE, CompTIA or higher certifications are preferred, not required
7. Experience supporting large-scale production environments
8. ITIL Foundation certification a plus
9. Experience with IT management frameworks and standards (ie. CIS Controls, NIST, ISO)
10. Scripting experience for task automation, specifically Exchange Online
11. Excellent written and verbal communication skills
12. Experience with hardware maintenance and lifecycle
13. Experience with RAID, SANs, and attached storage
14. Cross-train other team members of the department
15. Tier 2 infrastructure support of application issues in production, testing, and development environment
16. Gather data pertaining to project needs, and use the information to identify,
    predict, interpret, and evaluate system and network requirements
17. Strong troubleshooting and problem-solving skills, including application and network-level troubleshooting
18. Confer with company employees to identify and solve existing system problems
19. Dedicated to providing outstanding customer service to our employees, stores, and customers
20. Self-driven / Self-motivated
21. Maintains a positive and supportive attitude when communicating with others
22. Writes process and procedure documentation as required
23. Understands and abides by change control practices
24. Schedule, maintain, and participate in the on-call rotation, respond to all messages sent by NGVC staff in a timely manner, including off hours and vacations
25. Updates job knowledge by participating in educational opportunities; reading professional publications; maintaining personal networks; participates in professional organizations
26. Some travel may be required
27. Other job duties as required

This job description is not an employment contract: it does not guarantee you a job or that the above listed duties are the limit of your responsibilities.  Your job and job description are subject to change with and without notice.  You are required to accomplish any and all tasks assigned to you by your supervisor and/or other Store Support Center supervisors that may not be listed in this job description.

Here’s an overview of the benefits we offer our good4u Crew to help ensure the health and wellbeing of you and your family, now and well into the future:

All Crew Members

• Birthday Bonus Pay 
• Vitamin Bucks (up to $2,080 earned as store credit annually) 
• Holiday Pay for 5 Holidays – Stores Closed
• Paid Time Off (sick days and vacation) that Increases with Tenure 
• Paid Nutrition Education 
• good4u Crew Member Discount  
• {N}power Program (customer appreciation and rewards program) 
• Regular, Scheduled Pay Increases  
• Advancement Opportunities and Career Development 
• Health and Wellness Program  
• Employee Assistance Program (EAP)   
• Employee Referral Program

Full-Time Crew Members (30+ hours/week)

• Medical, Dental and Vision Insurance 
• Paid Parental Leave  
• Paid Medical Leave (through company paid short-term disability insurance) 
• Company Paid Short-Term Disability Insurance  
• Company Paid Life Insurance 
• Voluntary Benefits Including Hospital Indemnity, Accident Insurance, Long-Term Disability Insurance, Term Life Insurance   
• Retirement Savings Plan (401k) with discretionary Company Match  
• Healthcare and Dependent Care Flexible Spending Account (FSA)  
• Health Savings Account (HSA) with Company Match 

Diversity Statement

At the heart of Natural Grocers' commitment to our community and crew is this belief: All people should be empowered to experience health and wellbeing! We cannot be true to this conviction without honoring diversity and cultivating inclusion throughout every aspect of our organization.

At Natural Grocers, we honor our differences, embrace diversity, and cultivate inclusion because both individual and societal health are rooted in these principles. Our Crew is diverse not only in gender, race, ethnicity, sexual orientation, religion, abilities, and age but also in cultural backgrounds, thoughts, and ideas. Celebrating our diversity refreshes, expands, and shapes our perspective, energizing our mission of equitable access to health and wellness for all. We welcome everyone who would like to join us in this mission, with gratitude for the unique life experience each person brings to the table. We’re committed to nurturing an ecosystem of diversity and inclusion in which our Crew can continue to thrive.

Physical Capabilities and Environmental Demands:

N = Never

O = Occasional; 1-33% of time

F = Frequent; 34-66% of time

C = Constant; 67-100% of time

Physical Requirements:

• Must have the ability to constantly lift or carry up to 10 lbs., frequently lift or carry 11-20 lbs., and occasionally lift or carry 21-50 lbs. Must also have the ability to occasionally lift or carry 51-100 lbs. with a team lift.
• Must have the ability to frequently push or pull up to 15 lbs. and occasionally push or pull 16-100 lbs.
• Must be able to occasionally use the computer for data entry and use of mouse.
• Must be able to constantly walk, stand, use fine motor manipulations, grip, bend, twist, turn, and reach outward for the duration of the work shift.
• Must be able to frequently to reach above chest.
• Must be able to occasionally sit, squat, kneel, and climb as needed.

Environmental Requirements:

• Must be able to frequently work with sharp tools and equipment, dust, fumes, and congested worksite.
• Must be able to occasionally work with noise, cold, heat, wet, humid, outside, heights, and contact stress.