Senior IT Administrator

Job Description

The Senior IT Administrator will own the direction of the firm's internal IT department and is its hands-on technology lead across both offices. You will run day-to-day IT operations in partnership with our managed service provider (MSP), lead technology integration for firms we acquire, serve as a technical partner to Operations on the firm's wealth management technology stack, and own the firm's visibility into how employees use Claude and other generative AI tools.

\n

\n

Key responsibilities

\n

\n

AI Usage Monitoring and Reporting

\n

\n
• Serve as the administrator and owner of the firm's Claude environment: user provisioning, seat management, roles, and access policies.

\n

• Manage iboss web gateway policies and logging, including rules that govern access to sanctioned and unsanctioned AI services.

\n

• Ensure iboss logs are reliably ingested into Microsoft Sentinel, monitoring the connector for gaps and data-quality issues.

\n

• Build and maintain Sentinel KQL queries, workbooks, and analytics/alert rules that report on AI activity.

\n

• Track which AI services are accessed, by whom, how often, and from which devices or locations.

\n

• Identify unsanctioned "shadow AI" tools and recommend whether to block, sanction, or govern them.

\n

• Correlate gateway activity with Microsoft Entra ID identity data to attribute usage to individual users, groups, and departments.

\n

• Translate findings into clear, non-technical summaries for leadership, Compliance, and security stakeholders.

\n

• Support audit and regulatory requests with documented, repeatable reporting.

\n

\n

\n

M&A Tech Onboarding

\n

\n
• Lead IT integration for acquired firms and incoming advisor teams: discovery, account and data migration, device provisioning, and cutover.

\n

• Assess acquired environments for security, licensing, and compliance gaps, and coordinate with the MSP.

\n

• Document integration playbooks so each onboarding is faster and more consistent than the last.

\n

\n

\n

Systems Administration

\n

\n
• Administer Microsoft 365 and Entra ID: user accounts, groups, licensing, conditional access, and security settings.

\n

• Own Microsoft entitlements, permissions, and periodic access reviews, enforcing least-privilege access.

\n

• Conduct and document entitlement audits to support compliance, internal audit, and regulatory exams.

\n

• Administer core systems and line-of-business applications in partnership with the MSP.

\n

\n

\n

Wealth Technology Stack

\n

\n
• Serve as the firm's technical lead for its wealth management platforms, including Black Diamond and Orion (portfolio accounting and performance reporting) and Salesforce, Wealthbox, and Redtail (CRM), along with related custodian, financial planning, and billing integrations.

\n

• Build working knowledge of how advisors and Operations use these platforms (performance reporting, billing, client onboarding, household and account data) in order to partner with Operations on implementing changes, improving workflows, and bringing forward ideas for new tools and capabilities.

\n

• Manage user provisioning, role-based access, SSO/MFA, and offboarding across these platforms, and include them in periodic access reviews and entitlement audits.

\n

• Maintain an inventory of wealth platforms, integrations, and data flows (custodian feeds, portfolio accounting, CRM, and reporting), and monitor integration health, working with vendors and the MSP to resolve sync failures, data issues, and outages.

\n

• Support platform conversions, consolidation, and data migration, including onboarding acquired firms and advisor teams onto the firm's platforms.

\n

• Assist Compliance and Operations with vendor due diligence (security questionnaires, SOC 2 reviews), data-privacy controls, and exam or audit requests involving these systems.

\n

• Evaluate AI features embedded in these platforms and third-party AI tools that touch client or firm data, as part of the firm's AI governance program.

\n

\n

\n

End-user support

\n

\n
• Set up, image, configure, and deploy laptops, desktops, monitors, and peripherals.

\n

• Provide hands-on Tier 1 and 2 troubleshooting for hardware, software, connectivity, and access issues across both offices.

\n

• Assist with phone system support, including user setup, moves, adds, and changes.

\n

• Light support with client-facing systems and technology used in client meetings and service.

\n

\n

\n

Employee Lifecycle

\n

\n
• Own the IT onboarding and offboarding process, including timely provisioning, access removal, and equipment return.

\n

• Deliver IT orientation for new hires covering systems, security expectations, and acceptable use, including approved AI tools.

\n

\n

\n

Asset management/Vendor partnership

\n

\n
• Maintain accurate hardware and software inventory, including assignment, lifecycle, warranties, and license utilization.

\n

• Serve as the firm's day-to-day point of contact with our third-party MSP: escalate tickets, track SLAs, and coordinate projects.

\n

\n

\n

\n

Qualifications

\n

Required

\n

\n
• 5+ years of hands-on IT administration experience, including end-user support and systems administration, with demonstrated ownership of IT direction, budgets, and roadmap priorities.

\n

• Strong Microsoft 365 and Entra ID (Azure AD) administration skills: users, groups, licensing, conditional access, and permissions.

\n

• Experience administering a secure web gateway or proxy (iboss preferred; Zscaler, Netskope, or similar considered).

\n

• Experience working with a managed service provider and holding vendors accountable to SLAs.

\n

• Working knowledge of networking fundamentals: TCP/IP, DNS, DHCP, VPN, Wi-Fi, and basic firewall concepts.

\n

• Ability to work onsite at both our Oak Brook and Chicago Loop offices.

\n

• Experience supporting line-of-business applications and managing third-party software vendors, including SSO/identity integration and access controls.

\n

\n

Preferred

\n

\n
• Experience in financial services, ideally an RIA, broker-dealer, or other FINRA/SEC-regulated firm.

\n

• Working knowledge of wealth management technology, such as portfolio accounting and performance reporting (Black Diamond, Orion), CRM (Salesforce, Wealthbox, Redtail), and related custodian, financial planning, and billing platforms, with the ability to partner with Operations on workflow improvements.

\n

• Experience administering enterprise generative AI tools (Claude, Microsoft Copilot, ChatGPT Enterprise) or building AI usage governance.

\n

• Familiarity with Intune or another endpoint management platform, and with VoIP/cloud phone systems.

\n

• Certifications such as Microsoft 365 Administrator (MS-102), Security Operations Analyst (SC-200), CompTIA Network+ or Security+.

\n

\n

\n

\n

Work environment

\n

\n
• Occasional after-hours or weekend work may be needed for system changes, M&A cutovers, or urgent issues.

\n

• The role requires lifting and moving IT equipment up to 30 lbs and travel between offices.

\n

\n

\n

\n

\n

Rothschild Wealth Partners offers a competitive total rewards package designed to support your professional and personal well-being. The salary range for this position is $110,000– $150,000, commensurate with experience, plus eligibility for an annual performance bonus.