Business Systems Administrator

ABOUT THE FIRM HIS Envoys Group, LLC is a faith-driven financial firm committed to helping individuals, families, family offices, businesses, and nonprofits steward their God-entrusted resources for Kingdom impact. We partner with and serve a wide range of individual and institutional clients, including churches, ministries, rescue missions, retreat centers, and values-driven for-profit organizations, providing investment, retirement, and financial consulting solutions that align with Biblical principles. Our team shares a deep commitment to our clients' mission and values. We believe stewardship is a calling, not just a job. Our Biblically Responsible Investing (BRI) strategies reflect this conviction, helping clients pursue both financial growth and eternal impact. At HIS Envoys Group, professional expertise and Biblical purpose come together. POSITION SUMMARY The Business Systems Administrator owns the day-to-day administration of the firm's core business systems, principally Salesforce and the Microsoft 365 environment, and serves as the firm's internal technology function. The role configures and maintains these systems, administers user identity and access, manages the endpoint fleet, resolves end-user technology issues, and assembles the evidence supporting the firm's annual SOC 1 examination. The Business Systems Administrator advances the firm's mission by making certain that the people serving our ministry and faith-driven clients have systems that work, data they can trust, and technology that supports their stewardship of client relationships. KEY RESPONSIBILITIES • Salesforce Administration. Serve as the firm's accountable Salesforce administrator across all entities, owning user and license administration, permission sets, sharing rules, flows, reports and dashboards, sandbox testing, and the support queue for Salesforce issues. • Microsoft 365 Tenant and Identity Administration. Administer the Microsoft 365 tenant across all entities, including Exchange Online, SharePoint, Teams and OneDrive, and own identity and access administration in Microsoft Entra ID, including conditional access, MFA, and the full employee lifecycle from provisioning to offboarding. • Endpoint Management and Device Lifecycle. Manage the firm's Windows and macOS fleet through Microsoft Intune, including enrollment, configuration profiles, compliance policies, disk encryption, and zero-touch provisioning through Autopilot and Apple Business Manager. • End-User Support and Service Desk. Serve as the firm's internal technology support function for all staff, triaging, resolving and documenting requests across accounts, applications, printing, conference room technology, telephony and mobile devices. • Patch, Update and Vulnerability Remediation. Own the patching program across the endpoint fleet and track vendor security advisories relevant to the firm's technology stack. • Network, Telephony and On-Site Support. Administer the firm's network equipment and Dialpad telephony environment, and provide hands-on support at the Colorado Springs office. • SOC 1 and Regulatory Control Evidence. Assemble and maintain the recurring evidence supporting the firm's annual SOC 1 examination, including access reviews, onboarding/offboarding records and patch compliance reporting. • Documentation and Automation. Maintain written runbooks and system documentation, and build automation connecting the firm's systems, including Microsoft Graph, BambooHR and Salesforce integrations. REQUIRED QUALIFICATIONS • Three (3) or more years of hands-on systems administration experience, or an equivalent combination of education and experience. • Demonstrated Salesforce administration experience, including permission sets, sharing rules, flows, reports and release management. • Demonstrated Microsoft 365 administration experience, including Entra ID identity and access management and Intune endpoint management. • Proven ability to own systems end to end and exercise sound independent judgment on configuration and access decisions. • Experience providing direct end-user support to non-technical colleagues with patience and clarity. • Demonstrated discretion handling confidential employee, financial and client information. • Ability to write documentation another person can follow and to work from written procedure. • Ability to work in person at the firm's Colorado Springs office on a hybrid schedule, with in-office presence required for hands-on network, telephony and equipment support. PREFERRED QUALIFICATIONS • Salesforce Administrator certification (ADM 201) or Advanced Administrator. • Microsoft 365 Certified: Endpoint Administrator Associate, or Identity and Access Administrator Associate. • Experience in financial services or another regulated industry, with exposure to audit evidence collection. • Familiarity with SOC 1, SOC 2 or comparable control frameworks. • Experience with a cloud-native Microsoft estate: Entra join, Autopilot, conditional access, and modern device management. • Experience migrating file shares to SharePoint, including permission remediation. • macOS management experience alongside Windows. • Automation or scripting experience, including PowerShell, Microsoft Graph, or low-code integration platforms. • Bachelor's degree in information systems, computer science, business, or a related field. COMPENSATION & BENEFITS Pay Range: $75,000-$95,000 annually, commensurate with experience, certifications and demonstrated proficiency. This role is classified exempt under the administrative and computer employee exemptions of the Fair Labor Standards Act. Placement within the range is determined by depth of Salesforce and Microsoft 365 administration experience, certifications held at hire, regulated-industry exposure, and demonstrated automation capability. Compensation history is not requested or considered. Benefits: • Medical insurance via the firm's Individual Coverage Health Reimbursement Arrangement (ICHRA). • Dental and vision coverage with national provider networks. • Employer-provided life insurance, short-term disability, and long-term disability coverage. • Monthly benefit allowance applicable toward employer-sponsored benefits. • 401(k) retirement plan with employer contributions and a tenure-based matching schedule. • Generous Paid Time Off covering vacation, sick, and personal renewal time, plus paid holidays. • Eligibility for company profit sharing based on organizational performance. • Reimbursement for approved certifications, licenses, and continuing education. APPLICATION PROCESS Qualified candidates are invited to apply through the firm's careers portal at hisenvoysgroup.bamboohr.com/careers. Applications will be reviewed on a rolling basis until the position is filled. EQUAL OPPORTUNITY EMPLOYER HIS Envoys Group, LLC is an Equal Opportunity Employer. The firm welcomes qualified candidates from all backgrounds and complies with all applicable federal, state, and local anti-discrimination laws. The firm does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, pregnancy, veteran status, or any other characteristic protected by applicable law. The firm provides reasonable accommodations for religious beliefs, disability, pregnancy, and other protected characteristics in accordance with applicable law. Candidates who require an accommodation during the application or interview process should contact the firm's Director of Administration & HR. PAY TRANSPARENCY DISCLOSURE This posting is provided in accordance with applicable state pay transparency laws, including the Colorado Equal Pay for Equal Work Act and the Illinois Equal Pay Act. The compensation range disclosed reflects the firm's good-faith determination of the pay it expects to provide for this position at the time of posting. Actual compensation will depend on the selected candidate's experience, qualifications, and other lawful factors. Benefits described are subject to plan terms and eligibility requirements.