Sr. IT Systems Administrator

Job Description Location: Pune (Hybrid) Employment Type: Full-Time Work Model: Hybrid (4 Days Work From Office per Week | 1 Days Work From Home per Week) Be a Trailblazer. Build What Matters. Deliver More—Together. ROLE OVERVIEW We are looking for a proactive and hands-on IT Systems Administrator to manage the day-to-day technology operations at our Pune office. As our team scales beyond 85+ employees across India, this role will be the single point of ownership for IT asset lifecycle, employee onboarding and offboarding, identity and access management, and endpoint administration across Mac and Windows environments. This is not a deep-infrastructure or networking-heavy role. We need someone who is organized, detail-oriented, and passionate about keeping systems running smoothly for a fast-growing Salesforce consulting firm. You will be the go-to person for everything IT — from setting up a new hire’s laptop on Day 1 to ensuring our VPN and SSO configurations are secure and well-maintained. KEY RESPONSIBILITIES IT Asset Lifecycle Management Own the full lifecycle of IT hardware assets — procurement, inventory tracking, allocation, maintenance, and retirement/disposal of MacBooks, Windows laptops, monitors, peripherals, and accessories. Maintain a centralized IT asset register with real-time tracking of device assignments, warranty status, and refresh cycles. Coordinate with vendors for hardware repairs, replacements, and bulk procurement for new hires. Employee Onboarding & Offboarding Execute end-to-end IT onboarding for new hires: provision Google Workspace accounts, configure laptops (Mac/Windows), set up VPN profiles, grant application access, and deliver a ready-to-work setup on Day 1. Manage IT offboarding upon separation — revoke all access (Google Workspace, Slack, Zoho, JIRA, VPN, SSO apps), recover hardware, wipe devices, and update the asset register. Handle access changes for promotions, transfers, and role changes — adjust permissions, group memberships, and application entitlements accordingly. Google Workspace Administration Serve as the primary Google Workspace administrator — manage user accounts, organizational units (OUs), groups, aliases, and distribution lists. Configure and enforce security policies: 2-Step Verification, password policies, OAuth app whitelisting, mobile device management (MDM), and data loss prevention (DLP) rules. Manage Google Admin Console settings including Chrome device policies, Google Vault retention, and Drive sharing controls. Troubleshoot Google Workspace issues for end users — email delivery, calendar sharing, Drive permissions, and Meet connectivity. Identity, Access & SSO Management Manage Single Sign-On (SSO) configuration across the SaaS application stack — ensure all approved tools are integrated with the identity provider (Google Workspace SAML/OIDC or equivalent). Maintain a role-based access control (RBAC) matrix mapping job functions to application entitlements. Conduct periodic access reviews and audits to ensure least-privilege compliance and remove stale accounts. Manage user provisioning and deprovisioning across core platforms: Slack, Zoho People Plus, Zoho Books, JIRA, Confluence, Zoom, and other business applications. VPN & Endpoint Security Administer Palo Alto GlobalProtect VPN — manage VPN profiles, user/group assignments, split-tunnel policies, and troubleshoot client connectivity issues across Mac and Windows. Ensure all endpoints comply with security baselines: OS patch levels, disk encryption (FileVault/BitLocker), antivirus/EDR agents, and firewall configurations. Deploy and validate OS updates, security patches, and application updates across the fleet. Mac & Windows Endpoint Administration Configure, deploy, and support macOS and Windows devices for employees — including initial imaging/setup, software installations, printer configuration, and peripheral support. Troubleshoot hardware and software issues: OS crashes, performance degradation, connectivity problems, application errors, and driver issues. Evaluate and recommend endpoint management solutions (Jamf, Intune, or similar) as the organization scales. Day-to-Day IT Support & Helpdesk Provide Tier 1/Tier 2 technical support to 85+ employees across Pune, Nagpur, and Indore offices — respond to IT requests via Slack, email, or in-person. Maintain an IT knowledge base with troubleshooting guides, FAQs, and self-service documentation to reduce repeat queries. Support conference room AV equipment, printers, and office network connectivity. Security & Compliance Support Assist in implementing and maintaining IT security policies aligned with ISO 27001 and SOC 2 requirements. Support security awareness initiatives — phishing simulations, policy communications, and new-hire security orientation. Maintain documentation for IT audits: access logs, device inventory, policy acknowledgements, and incident records. Requirements REQUIRED QUALIFICATIONS 3 to 6 years of hands-on experience in IT systems administration, endpoint management, or corporate IT support. Strong proficiency in Google Workspace Admin Console — user management, security settings, OUs, groups, and Chrome policies. Hands-on experience administering both macOS and Windows 10/11 in a corporate environment. Working experience with Palo Alto GlobalProtect VPN or equivalent enterprise VPN solutions. Practical understanding of SSO/SAML/OIDC concepts and experience integrating SaaS applications with an identity provider. Experience with IT asset management — tracking inventory, managing procurement, and handling device lifecycle. Familiarity with SaaS application administration: Slack, Zoho, JIRA/Confluence, Zoom, or similar tools. Excellent communication skills — ability to support non-technical users with patience and clarity. Strong organizational skills with attention to documentation and process discipline. PREFERRED QUALIFICATIONS (NICE-TO-HAVE) Experience with endpoint management platforms such as Jamf (for Mac) or Microsoft Intune. Exposure to Google Workspace security features: DLP, Vault, Context-Aware Access, or BeyondCorp concepts. Basic networking knowledge — DNS, DHCP, firewall rules, and Wi-Fi troubleshooting (not CCNP-level depth). Familiarity with scripting for IT automation (Google Apps Script, PowerShell, Bash, or Python). Experience supporting a distributed/hybrid workforce across multiple office locations. Any relevant certifications: Google Workspace Administrator, CompTIA A+/Network+/Security+, ITIL Foundation, or Apple Certified Support Professional (ACSP). Prior experience in a Salesforce ecosystem or technology consulting company is a plus. Benefits Why Join mindZvue? We are a Salesforce Summit (Platinum) Partner , Great Place to Work® Certified , and ISO-certified organization that truly believes in the power of collaboration. Benefits Crafted for You Hybrid Work Model 4 days Work From Office Per Week 1 day Work From Home Per Week Meal Card – ₹3,000 per month Paid Time Off (PTO) – 22 days annually Monthly Wellness + Phone Reimbursement – ₹2,000 per month Women’s Wellness Leave – 1 paid leave per quarter for self-care Comprehensive Health Insurance – Corporate + Parental coverage A culture that truly values learning, inclusion, flexibility, and well-being Join Our Bandwagon If you’re obsessed with Salesforce, excited by cloud technologies, and eager to create meaningful impact— mindZvue is your next destination . Explore Life at mindZvue: