IT Infrastructure Analyst 2

Job description

At TOPS Products, we manufacture and distribute organizational products that help simplify your life. Our trusted products continue a long history of helping people stay organized, productive, and innovative. As the North American leader in Office products and organizational solutions, TOPS Products operates with safety and integrity at the center of everything we do. Join our IT Infrastructure team as a Infrastructure Analyst 2 and play a key role in owning, supporting, securing, and improving Microsoft cloud infrastructure and productivity platforms across TOPS Products' manufacturing, distribution, creative, and administrative teams. This role administers and configures Microsoft Azure, Microsoft 365, Teams, Defender, Exchange Online, SharePoint Online, Entra ID, and related cloud services while driving practical automation that improves IT efficiency, consistency, reporting, and operational support. You will serve as a technical administrator and lead automation efforts using a balanced mix of AI-enabled and traditional tools to improve operational speed, accuracy, and consistency. The role requires comfort working with Global Administrator-level privileges across tenant-wide identity, security, licensing, service health, auditability, and change control. You will also identify repeatable administrative work that can be standardized, scripted, or automated to strengthen IT support and accelerate business initiatives. Reports To: Manager – IT Infrastructure What You’ll Do: Own and Improve Microsoft Cloud and Infrastructure Services • Serve as an administrator across Azure and Microsoft 365, including Entra ID, Exchange Online, SharePoint Online, OneDrive, Teams, Defender, Purview, and related admin centers. • Configure tenant-wide settings with a focus on secure access, least privilege, role-based administration, licensing, service health, audit logging, and operational reliability. • Administer Azure infrastructure, including virtual machines, storage, networking fundamentals, monitoring, backup and recovery coordination, cost awareness, and secure configuration standards. • Troubleshoot complex issues across cloud services, identity, email, collaboration platforms, endpoints, security tooling, and integrations. • Support legacy Active Directory as needed, including user/group support, hybrid identity, DNS/DHCP/GPO, and coordination between on-premises and cloud identity. • Operate Microsoft Defender across endpoint, identity, Office 365, and cloud workloads — including alert triage, policy tuning, investigation support, and posture improvement. • Administer Intune and endpoint management, including device compliance, configuration profiles, application deployment, enrollment, endpoint security baselines, and reporting. • Support Teams Voice as a secondary responsibility, including user configuration, policy review, number assignment, and troubleshooting. • Drive Automation and Operational Efficiency • Identify recurring administrative, reporting, security, licensing, onboarding/offboarding, group, endpoint, and compliance tasks that can be automated, standardized, or eliminated. • Build practical automation using PowerShell, Microsoft Graph PowerShell SDK, Microsoft Graph API, Exchange Online PowerShell, Teams PowerShell, SharePoint Online PowerShell, Azure PowerShell, Azure CLI, KQL, REST APIs, Power Automate, Logic Apps, and Azure Automation. • Leverage AI-enabled tools responsibly to accelerate IT operations — including knowledge retrieval, reporting, ticket enrichment, administrative summaries, documentation, and repeatable workflow execution. • Deliver measurable improvements in time-to-complete, error reduction, and operational visibility through scripts, scheduled jobs, dashboards, and lightweight internal tools. • Document automations with purpose, owner, permissions, inputs/outputs, error handling, logging, rollback, and support procedures so they remain supportable by the team. • Partner with IT and the Business • Work closely with IT Infrastructure peers, internal IT staff, and business sponsors to resolve issues, deliver improvements, and support business critical services. • Translate operational needs into clear technical requirements, implementation plans, test plans, and support documentation. • Communicate technical impacts, risks, and trade-offs for proposed changes and service improvements. • Support Testing, Documentation, and Adoption • Lead testing and validation for configuration changes, automations, policies, and scripts before production deployment. • Create and maintain administrative runbooks, knowledge base articles, process guides, diagrams, standards, and handoff materials. • Drive consistent adoption of new tools, automations, and administrative standards across the IT team through clear change management. Qualifications Required • Bachelor’s degree in Information Technology, Computer Science, Engineering, Business Systems, or a related field; equivalent practical experience and relevant certifications will be considered. • 4+ years of hands-on experience administering Microsoft cloud, infrastructure, collaboration, endpoint, or security services in a business environment. • Strong working knowledge of Azure, Microsoft 365, Entra ID, Teams, Exchange Online, SharePoint Online, OneDrive, Defender, AI tools, and Microsoft administrative centers. • Experience operating with top-level administrative privileges, change control, auditability, least privilege, and careful handling of tenant-wide settings. • Strong PowerShell scripting skills with hands-on experience across Microsoft Graph, Exchange Online, Teams, SharePoint Online, and Azure PowerShell modules, plus Azure CLI, KQL, and REST APIs. • Demonstrated ability to convert manual or repetitive IT work into documented, supportable scripts, automations, reports, or standard operating procedures. • Tier 3 troubleshooting capability with strong documentation, communication, and cross-functional collaboration skills. Preferred • Experience with Intune, endpoint management, Teams Voice, Microsoft Purview, Microsoft Sentinel, Azure Automation, Logic Apps, Power Automate, Copilot Studio, Power Platform, or Azure AI services. • Working knowledge of legacy Active Directory, hybrid identity, DNS, DHCP, Group Policy, Windows Server, and migration from legacy infrastructure to cloud-managed services. • Microsoft certifications in Azure, Microsoft 365, Security, Endpoint, or Power Platform — or demonstrated prompt engineering and AI tooling experience — are a plus. Additional Requirements • Ability to work independently while keeping work transparent, documented, and supportable by the broader IT team. • Ability to support occasional after-hours change windows, incident response, or business-critical service restoration. • Willingness to travel up to 10% across the U.S., Canada, and Mexico, with additional travel as project needs require. Location Naperville, Illinois (Hybrid work schedule: In-office Monday, Tuesday and Thursday and remote Wednesday and Friday, unless business travel or on-site support is required.)