System Administrator

About REP:      REP designs world-class, innovative gym equipment that is sold around the world, and we are now expanding into apparel, supplements, athletes, and events. REP was established in 2012 by two brothers who shared a deep passion for fitness. From our humble beginnings of selling bumper plates out of a small garage, REP has experienced remarkable growth, now occupying over 300,000+ square feet of office and distribution space in the USA and internationally. With a dedicated team of over 150+ fitness enthusiasts, our mission is to "Improve Lives by Sharing our Passion for Strength." Our commitment to innovation, customer service, and value sets us apart.    We believe in building a culture centered around fitness, so we specialize in outfitting home gyms, commercial gyms, and strength and conditioning facilities. Our dedication to excellence has been recognized multiple times when we were featured in the Inc. 5000 fastest growing private companies in 2018 and 2021 and then voted the best home strength product launch in 2022 by Garage Gym Experiment.  Our team works out together, and we regularly invite fitness superstars to join us. We organize fun challenges to test our limits – and the limits of our equipment .    At REP, we continue to grow and bring new opportunities for those who want to be a part of a winning team. We firmly believe that being surrounded by like-minded individuals fuels creative energy and fosters a fun and collaborative work environment. This role is based in our state-of-the-art headquarters in Colorado with a bright, spacious, shared workspace; scenic views of the Rocky Mountains; and a kitchen always stocked with healthy snacks, protein powder, and coffee. We offer a hybrid work environment with a minimum of three days in the office, but there’s flexibility about which days and hours.   Our Core Values:   Think Like a Customer – We empathize with our customers; understand the ‘ why’ behind every decision we make   Progress not Perfection – We don’t let perfect get in the way of good ; we are better today than we were yesterday   Positive Attitude – Be a glass half-full kind of person and remember to have fun   Teamwork without Ego – We put the team above ourselves; we only win together   Take Initiative – We drive momentum; if there is an opportunity to make us better, we want to hear it   About this role:   REP is hiring a Systems Administrator to own the technology the company runs on: our Microsoft 365 tenant, identity and access, 200+ Windows and macOS endpoints, the network across all sites, and the dozens of software platforms the business relies on daily. You'll be the primary technical resource for the organization and accountable for keeping systems up, secure, and recoverable.   The role is split between service and engineering. Service means responding to a broken laptop, a new hire first day, a down time clock on the warehouse floor, or a store associate who can't ring a sale. Engineering means deploying config and policy via tested scripts, automating identity lifecycle from our HRIS, tuning application-control and network policy, and eliminating recurring manual requests for good.   We're growing, and this is an opportunity to support our employees across our four sites in our retail stores and additional distribution centers (California, Colorado, and Pennsylvania). Support can't scale by adding headcount; we need someone who builds leverage instead.   You'll report to the Manager of IT Operations and work alongside our Systems, Web Development, and AI/Data teams, our outsourced SOC, and regional IT/network partners. This is an on-site role at our Colorado HQ, with occasional travel to distribution centers and retail locations.    Essential Functions:   Microsoft 365, Identity and Access Administration   Administer REP’s Microsoft 365 tenant — Exchange Online, SharePoint Online, OneDrive and Teams — including tenant configuration, service health, mail flow and message hygiene, retention and data governance. Administer Entra ID as a controlled lifecycle: user and group lifecycle, role-based access, licensing, Conditional Access, MFA and password less methods, and SSO/SAML/SCIM integrations for enterprise applications. Maintain least privileged standards and run periodic access reviews.   Endpoint Management and Device Lifecycle   Own the complete device lifecycle for 200+ Windows and macOS endpoints plus the iPadOS and kiosk fleet: Windows Autopilot and Apple Business Manager/ADE enrollment, Intune configuration profiles and compliance policies, application packaging and deployment, driver and OS patch rings, BitLocker and File Vault encryption with key escrow, procurement, imaging, refresh, secure decommissioning, hardware standards and asset tracking, and equipment provisioning and shipping to remote employees. Deliver fleet-wide changes through tested, version-controlled scripts using staged rollout and documented rollback.   Endpoint Security, RMM, and Security Operations   Own the remote monitoring and management and application-control platforms (Ninja One and Threat Locker) end to end - deployment and agent health, policy creation and tuning, allowlisting and elevation request handling, remote support sessions, automated patching and script execution. Serve as primary point of contact for REP’s outsourced SOC: triage, investigate and remediate escalated alerts such as impossible travel, anomalous sign-in and unusual IP activity; coordinate containment and document findings; support endpoint protection coverage and hygiene alongside the SOC-managed Sentinel One instance. Issue third-party and API credentials only against a governed register with defined owner, scope and expiration.   Network, SASE, and Site Infrastructure   Own REP’s Cato Networks SASE environment - site and endpoint client deployment, firewall and security policy, SD-WAN across locations, QoS and