Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through:

• Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation​

• Analytics: deliver analytic applications & services that generate insight on how to measurably improve​

• Expertise: provide clinical, financial & operational experts who enable & accelerate improvement​

• Engagement: attract, develop and retain world-class team members by being a best place to work​

Senior Systems Engineer / Microsoft Platform & DevOps Administrator

Position Summary

The Systems Engineer, Sr. is responsible for the design, implementation, automation, administration, and support of enterprise Microsoft cloud and on-premises infrastructure. This role serves as a technical lead for Microsoft 365, Entra ID, Intune, Azure, Active Directory, Okta integrations, automation initiatives, security compliance, endpoint management, and DevOps operational processes. The position focuses on improving operational efficiency through automation, strengthening security posture, and ensuring reliable delivery of enterprise technology services.

Core Responsibilities

Microsoft 365 Administration

• Administer Microsoft 365 services, including:
  • Exchange Online
  • Microsoft Teams
  • SharePoint Online
  • OneDrive for Business
  • Microsoft Graph
• Manage provisioning, compliance, retention, and access controls.
• Implement and maintain Microsoft security best practices.
• Troubleshoot user access, authentication, and collaboration platform issues.

Identity & Access Management

• Manage Microsoft Entra ID (Azure AD) and hybrid identity environments.
• Administer Active Directory, Group Policy, LDAP, and identity synchronization.
• understand and maintain SSO integrations using Okta and SAML.
• Implement lifecycle management processes for onboarding, offboarding, and access reviews.
• Manage privileged access and role assignments.
• Develop automated account cleanup and governance processes.

Endpoint Management

• Administer Microsoft Intune and endpoint security policies.
• Manage Windows device enrollment, configuration, compliance, and patching.
• Lead device migrations and modernization initiatives.
• Deploy security baselines and endpoint protection controls.
• Maintain Windows Hello for Business and modern management solutions.
• Support macOS and Windows endpoint administration.

Azure Infrastructure Administration

• Deploy and manage Azure virtual machines and cloud resources.
• Maintain Azure storage, networking, Key Vault, and resource groups.
• Manage Azure encryption, backup, disaster recovery, and security controls.
• Implement infrastructure modernization initiatives.
• Monitor cloud utilization and optimize cloud resources.

Security & Compliance

• BitLocker and encryption technologies.
• Support compliance audits and access certifications.
• Perform vulnerability remediation and security monitoring.
• Automate security governance and access review processes.

DevOps & Automation

• Design and develop automation using:
  • PowerShell
  • Python
  • Microsoft Graph API
  • Azure Automation
  • REST APIs
• Automate user lifecycle management and identity workflows.
• Build automated reporting, monitoring, and operational dashboards.
• Implement Infrastructure as Code practices where appropriate.

Systems Administration

• Maintain server infrastructure and enterprise applications.
• Support in office applications such as badges, video, etc.
• Support DNS, DHCP, certificates, networking, and authentication services.
• Develop operational standards and documentation.

Project Leadership

• Lead infrastructure migration and transformation projects.
• Coordinate cross-functional technical initiatives.
• Provide technical guidance and mentoring to team members.
• Collaborate with vendors and business stakeholders.

Technical Skills

Microsoft Technologies

• Microsoft 365 Administration
• Exchange Online
• Teams Administration
• SharePoint Online
• OneDrive Administration
• Microsoft Intune
• Microsoft Entra ID
• Azure Active Directory Connect
• Azure Virtual Machines
• Azure Key Vault
• Azure Storage
• Azure Networking
• Microsoft Defender

Identity Platforms

• Okta Administration
• SAML Authentication
• SCIM Provisioning
• MFA Technologies
• Privileged Identity Management

Automation & Scripting

• PowerShell
• Python
• Microsoft Graph API
• Azure Automation
• REST APIs
• JSON
• Git

Infrastructure

• Active Directory
• Group Policy
• Windows Server
• DNS / DHCP
• Hybrid Identity
• Desktop Virtualization
• Endpoint Security

Preferred Qualifications

• 5+ years of Systems Engineering or Systems Administration experience.
• 3+ years administering Microsoft 365 and Azure environments.
• Experience with Intune, Entra ID, Azure, and Okta.
• Strong PowerShell and Python automation experience.

Key Performance Indicators

• Platform availability and uptime
• Security compliance metrics
• Automation coverage and efficiency gains
• Endpoint compliance rates
• Patch and vulnerability remediation performance
• User and device lifecycle accuracy
• Project delivery success
• Reduction of manual operational effort

(Equal Employment Opportunity has been, and will continue to be, a fundamental principle at Health Catalyst, where employment is based upon personal capabilities and qualification without discrimination or harassment on the basis of race, color, national origin, religion, sex, sexual orientation, gender identity, age, disability, citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law.. Health Catalyst is committed to a work environment where all individuals are treated with respect and dignity..)

The above statements describe the general nature and level of work being performed in this job function. They are not intended to be an exhaustive list of all duties, and indeed additional responsibilities may be assigned by Health Catalyst.

Studies show that candidates from underrepresented groups are less likely to apply for roles if they don’t have 100% of the qualifications shown in the job posting. While each of our roles have core requirements, please thoughtfully consider your skills and experience and decide if you are interested in the position. If you feel you may be a good fit for the role, even if you don’t meet all of the qualifications, we hope you will apply. If you feel you are lacking the core requirements for this position, we encourage you to continue exploring our careers page for other roles for which you may be a better fit.

At Health Catalyst, we appreciate the opportunity to benefit from the diverse backgrounds and experiences of others. Because of our deep commitment to respect every individual, Health Catalyst is an equal opportunity employer.