Senior IT Specialist

Job Description: Senior IT Specialist
Company: Christopherson Business Travel
Location: Salt Lake City, UT 
Department: Technology
Reports To: Manager, IT & DevOps
Level: Level 3 (Senior), Individual Contributor
Job Family: Engineering & Technology
FLSA Classification: Exempt (Computer Employee)
Job Code: TEC-ITS-03

About Christopherson Business Travel
Christopherson Business Travel is a leading travel management company delivering innovative corporate travel solutions, exceptional client service, and technology-driven insights. We partner with organizations to optimize travel programs, enhance traveler experiences, and drive measurable savings.

Position Summary
The Senior IT Specialist is the senior escalation point for Christopherson's internal IT, resolving the complex endpoint, identity, collaboration and network issues that reach beyond the standard help desk queue. This role administers the platforms that keep a largely remote workforce productive and secure, including Microsoft 365, endpoint management and identity services, and automates the routine work around them. It sets the technical bar for the IT Support Engineers and works independently on projects of moderate scope, partnering with infrastructure, information security and business teams.

Key Responsibilities
Escalated Support & Problem Resolution
- Resolves escalated and complex incidents across endpoints, applications, identity and connectivity, documenting root cause and fix.
- Identifies recurring issues from ticket trends and removes the underlying cause rather than repeating the workaround.
- Participates in the after hours and on call rotation for critical internal systems.

Endpoint & Collaboration Platform Administration
- Administers Microsoft 365, including Exchange Online, Teams, SharePoint and OneDrive, within assigned permissions.
- Manages Windows and macOS endpoints through Intune, Autopilot and JAMF, including configuration profiles, compliance policies and app deployment.
- Owns patching, encryption and endpoint protection coverage for the fleet and reports exceptions to the manager.
- Maintains standard device builds and hardware lifecycle records from procurement through secure disposal.
Identity, Access & Security Operations
- Administers Active Directory and Microsoft Entra ID accounts, groups, conditional access and multi factor authentication.
- Runs onboarding, role change and offboarding access workflows and verifies access is removed promptly at separation.
- Supports periodic access reviews and supplies evidence for PCI DSS and other security reviews, in partnership with information security.
- Follows established procedures for reporting and containing suspected security events on endpoints and accounts.
Automation, Documentation & Projects
- Automates provisioning, reporting and routine administration with PowerShell and the department's tooling.
- Maintains runbooks, configuration standards and knowledge base articles so support work is repeatable.
- Leads small to mid sized IT projects such as software rollouts, platform migrations and office technology setups.
Mentorship & Collaboration
- Mentors IT Support Engineers on troubleshooting, documentation and tooling, carrying no direct reports and no performance management responsibility.
- Partners with infrastructure, DevOps, information security and business application owners on changes that affect employees.
- Coordinates with vendors and service providers on support cases, renewals and license usage.

Qualifications
Required
- Five or more years of IT support or systems administration experience, including time as an escalation point for other support staff.
- Hands on administration of Microsoft 365 and of Active Directory or Microsoft Entra ID, including groups, conditional access and multi factor authentication.
- Experience managing Windows endpoints with Intune and Autopilot or comparable endpoint management tooling.
- Working PowerShell scripting skill applied to administration and automation tasks.
- Solid understanding of networking fundamentals, including DNS, DHCP, VPN, Wi-Fi and basic firewall concepts.
- Clear written and verbal communication, with the discipline to document what was done and why.
Preferred
- Certifications such as Microsoft 365 Certified: Endpoint Administrator, CompTIA Network+ or Security+.
- Experience managing macOS devices with JAMF.
- Experience supporting a PCI DSS or similarly regulated environment.
- Experience with Atlassian tools such as Jira Service Management, Jira and Confluence.

Core Competencies
- Advanced troubleshooting and root cause analysis
- Automation first mindset
- Security and access discipline
- Ownership through resolution
- Clear technical documentation
- Mentors technical staff effectively
- Discretion with employee data

What We Offer
- Competitive base salary
- Comprehensive benefits package including medical, dental, vision, HSA with company contribution, FSA, and 401(k) with company match
- Paid time off, ten company paid holidays, and two one-week company administrative leave periods in July and December
- Professional development and technical certification support
- Flexible work environment
- A collaborative, mission-driven culture built on our values of creating value and valuing people