About Us
Windsor Advisory Group is a registered investment advisor (RIA) serving ultra-high-net-worth individuals and families. Our technology stack spans a custom React/Next.js client portal, a FastAPI backend on Azure, Salesforce CRM, M365, and Intune device management.
Technology is not an afterthought at Windsor; it is a part of how we differentiate. The person in this role will work directly alongside our Director of Technology on infrastructure, production systems, and client-facing products.
Position Overview
We are looking for someone who is energized by variety, comfortable context-switching between writing Python and resetting an MFA token in the same afternoon, and who takes pride in owning systems end-to-end without being told what to do next.
What This Role Focuses On
This is primarily an IT systems administration and helpdesk role. This role is the first line of support for our team and the owner of our day-to-day technology operations
This role requires three distinct skill sets; each one maps to expected, recurring work at Windsor.
|
IT & Systems Administration
|
Helpdesk & Operations
|
Growth Path: Software Development
|
|
• M365 & Entra ID
|
• Internal user support
|
• Python Fundamentals
|
|
• Intune / Apple Business Mgr
|
• Device setup & troubleshooting
|
• REST API Basics
|
|
• Conditional Access & MFA
|
• SaaS app administration
|
• SQL/Databases
|
|
• Email security (DMARC/SPF)
|
• Incident triage & escalation
|
• Exposure to our FastAPI/React Stack
|
|
• Defender for Cloud
|
• Runbook & SOP Authoring
|
• GitHub Actions CI/CD
|
|
• User lifecycle & provisioning
|
• Asset & License Tracking
|
• Direct Mentorship
|
|
• SCIM & SSO integrations
|
• Onboarding/Offboarding
|
|
|
• Vendor & contract mgmt
|
• Phishing & Spoofing Investigations (with MSP)
|
|
Day-to-Day Responsibilities
IT systems & infrastructure
- Administer Microsoft 365, Entra ID, Exchange Online, Teams, and SharePoint
- Manage device fleet in Intune and Apple Business Manager (limited)
- Maintain security posture: Conditional Access, MFA, break-glass accounts, DMARC/SPF/DKIM
- Work closely with MSP to make sure tickets are being completed in a timely manner
- Support SCIM provisioning, SSO configurations, and connected app OAuth flows
Salesforce & business applications
- Administer Salesforce: permission sets, data loads, workflow automation
- Build and maintain Power Automate connectors and cross-system integrations
- Support recruiting pipeline automation and CRM data quality initiatives
Helpdesk & operations
- Serve as first-line technical support for internal staff across hardware and software issues
- Write and maintain runbooks, SOPs, and documentation for everything you own
- Manage vendor relationships, renewals, and technology procurement
- Work with MSP to security incidents, phishing investigations, and spoofing events
Growth track: Software Development (as interest and bandwidth allow)
- Shadow and eventually contribute small fixes to the Windsor client portal (React/Next.js/Typescript)
- Get exposure to our FastAPI backend, Pydantic models, and Azure-hosted services
- Learn how we integrate with Orion, Schwab, and Salesforce APIs
What You Bring
Non-negotiable
- Experience with Python
- Hands-on Microsoft 365 and Entra ID administration (not just end-user familiarity)
- Comfort troubleshooting hardware, software, and network issues for non-technical staff
- High ownership mentality: you notice things that need doing and do them without being told
Strongly preferred
- Experience with Intune, Conditional Access, and MFA/security tooling
- Familiarity with Salesforce or another CRM
- Background in compliance-sensitive environments (RIA, broker-dealer, legal, healthcare)
A Plus (Not Required)
- Any prior exposure to Python, JavaScript, or scripting
- Curiosity about software development; this role can grow in that direction overtime if interested
What This Role Actually Looks Like
Candor on the day-to-day reality
Most days you’ll be supporting end users (resetting passwords, provisioning laptops, etc.) and working proactively to keep our M365 enviorment tight and secure. Some weeks bring a security alert that needs quick triage, or a vendor renewal that needs attention. This is the core of the job, not a steppingstone to be endured.
If you’re curious about the software side, there is a real and supported path to spend more time there as you build skills. That said, currently we’re hiring for someone who wants to own IT and helpdesk first and grow from there on their own timeline.
What We Offer
- Direct, unfiltered access to the full technology stack — no ticket queues, no permission gates
- A genuine seat at the table for technology strategy, AI adoption, and architecture decisions
- Competitive compensation commensurate with the breadth this role requires
- A small team that will notice and value your contributions immediately
Why Windsor Advisory Group?
- Collaborative and supportive team culture
- A firm that values precision, integrity, and long-term relationships
- In office with flexibility to work remotely as life warrants
* We participate in E-Verify. View the required notices here: E-Verify Participation Poster, Right to Work Poster