## Overview Friendly Solutions is a managed IT services provider supporting small and mid-size businesses across legal, financial, healthcare, construction, manufacturing, and other industries. This role delivers remote technical support across all areas of SMB IT infrastructure. The ideal candidate is a resourceful generalist capable of independent problem-solving across diverse client environments. --- ## Responsibilities **Desktop, Email & Application Support** - Microsoft 365 administration across multiple tenants (Outlook, OneDrive, Teams, mail flow) - Windows workstation and laptop deployment, configuration, and remote troubleshooting - User onboarding and offboarding (accounts, email, permissions, MFA, licenses) - Email migration, spam filtering (SpamTitan), and phishing response - Industry-specific business application support **Infrastructure & Security** - Active Directory, Group Policy, DNS, and DHCP management - Security incident response and access control enforcement - Multi-factor authentication (Duo Security) and endpoint protection (ESET) management - Firewall, switch, and wireless access point configuration - VPN setup and maintenance with MFA integration - Server and backup administration (Acronis, Veeam) --- ## Qualifications **Required:** - Windows 10/11 administration - Microsoft 365 multi-tenant administration - Windows Active Directory and Group Policy - Networking fundamentals (TCP/IP, DNS, DHCP, VPN) - Remote troubleshooting tools (ScreenConnect, RDP, or equivalent) - Strong communication skills in English and Polish - Ability to manage multiple priorities independently **Preferred:** - Firewall configuration (/pfSense) - Backup solutions (Veeam) - Duo Security - Industry-specific software experience - CompTIA A+/Network+/Security+, Microsoft 365 certifications, or CCNA

Summary Craig Group is seeking a knowledgeable, proactive IT & Google Workspace Consultant to support and optimize our technology environment. This is a hands-on contractor role for someone who enjoys solving problems, recommending practical solutions, and helping a remote team work efficiently through well-managed systems. This is an excellent opportunity for an experienced IT professional looking for flexible, ongoing consulting work with a growing, technology-enabled consulting firm. Responsibilities - Own the maintenance of Google Workspace - Advise on IT setup and best practices - Problem-solve solutions as they arise regarding team collaboration and system use - Ongoing IT needs Position Details - 1099 independent contractor - Approximately 2 hours per week (with occasional flexibility as needed) - 100% remote (work from home) - Preferred start date: ASAP About Craig Group Craig Group is an operator-led go-to-market strategy and execution partner for private equity and PE-backed lower- to middle-market portfolio companies. We are technology-enabled and AI-supported, built to accelerate organic growth within the realities of a hold period. We work with management teams and operating partners to identify the highest-value segments, clarify ICP and messaging, and build a repeatable revenue engine across marketing, sales, and customer expansion, then implement the plan, so results show up in pipeline quality, win rate, deal size, recurring revenue, profitability, and EBITDA.

We are seeking an experienced MSP engineer or technical consultant to support the integration of newly acquired managed service providers into our operating environment. This is a project-based contract role with engagements typically lasting 60 to 90 days. Successful candidates may be invited to participate in future acquisition integration projects on an ongoing basis. About the Role Your primary responsibility will be to review, validate, and standardize technical documentation from acquired MSPs and client environments. You will work closely with our internal Integration and Service Operations teams to bring documentation, asset records, network diagrams, vendor information, and operational procedures into alignment with our standards. This role is ideal for a former MSP Systems Administrator, Senior Engineer, Service Manager, or Technical Consultant who enjoys discovery, documentation, and process improvement. Responsibilities • Review existing MSP documentation for completeness and accuracy • Conduct interviews with technical staff and key stakeholders to gather missing information • Audit Microsoft 365, Azure, networking, security, backup, and endpoint management environments • Update and standardize documentation according to established SOPs and templates • Create or update network diagrams, asset inventories, vendor records, credential records, and support procedures • Identify documentation gaps, technical debt, and operational risks • Produce final documentation packages and handoff materials for operational teams • Participate in integration meetings and status updates as needed Required Experience • 2+ years working within a Managed Service Provider (MSP) • Strong understanding of Microsoft 365 and Azure environments • Experience documenting networks, systems, and operational procedures • Ability to work independently with minimal supervision • Strong written communication and organizational skills Preferred Experience • ITGlue, Liongard, ConnectWise Manage, Autotask, Datto RMM and similar platforms • MSP acquisition or integration experience • Network infrastructure documentation • Cybersecurity, data backup, and compliance documentation • Multi-site client environments Engagement Details • Contract / project-based • Typical engagements range from 60 to 90 days • Flexible hours • Remote work • U.S.-based preferred, but highly qualified international candidates will be considered • Potential for recurring opportunities throughout the year Please provide: - Summary of your MSP experience - Documentation platforms you have used (IT Glue, Hudu, etc.) - Examples of documentation projects you have completed - Experience supporting MSP mergers, acquisitions, or large clients

We need an expert to configure and integrate OneDesk on-prem with our existing systems. The work includes setting up the on-prem environment, connecting it to our current infrastructure, and ensuring smooth operation after deployment. You should be able to handle configuration tasks, troubleshoot issues, and support the transition from our current setup. Experience with similar on-prem deployments and integration projects is important. This is a part-time engagement for a small project with a clear scope. Specific items include: -Email & OAuth2 configuration with Google Workspace -domain setup & TLS certificate configuration -Automate TLS certificate renewals -EC2 linux instance hardening -AWS S3 integration -Postgres database backup and restoration testing -Troubleshooting linux performance issues

About Us We're a multi-site behavioral health services company operating clinics in California and Georgia, with approximately 60 employees across five locations. We issue company-owned laptops and iPads to clinical and administrative staff. Our environment: Google Workspace Business Plus for email, identity, and file storage. Our fleet is roughly 3 Windows laptops, 20 MacBooks, and 8 iPads. Because we operate in healthcare, our devices may touch protected health information (PHI), so HIPAA-appropriate safeguards are a requirement, not a nice-to-have. The Problem We are paying for Google Workspace Business Plus, which includes advanced endpoint management — and none of it is configured. There is no enrollment process, no enforced passcodes or disk encryption, no app control, no remote wipe capability, and no reliable visibility into who has which device or what's installed on it. Devices are handed out and tracked informally. We want this built out properly, once, using what we already own wherever possible, with documentation clear enough that our operations and HR staff can maintain it in-house afterward. Scope of Work 1. Assessment and gap analysis Inventory our existing devices and audit our current Google Admin console endpoint management configuration Tell us specifically what Business Plus covers for each device type — Windows, macOS, iPadOS — and what it does not Verify all device-using staff hold Business Plus licenses, since endpoint policies are licensed per user Recommend what, if anything, we need to buy on top of Google to close the remaining gaps, with cost per device or per user. We expect the honest answer may involve a dedicated Apple MDM and an endpoint protection product; make the case either way Confirm Business Associate Agreement coverage for anything you recommend, and verify our Google Workspace BAA has been accepted in our Admin console 2. Google Workspace build-out Configure Google Admin console endpoint management: organizational units by role and location, device approval workflow, and context-aware access where appropriate Enable advanced mobile management and configure the Apple push certificate for our iPads Configure Windows device management and BitLocker policy Set up Apple Business Manager so our iPads can be supervised and future purchases enroll automatically Stand up any supplemental MDM or security tooling identified in step 1, with identity anchored to our Google accounts — we do not want a second directory to maintain 3. Security baseline Enforce disk encryption on laptops (BitLocker on Windows, FileVault on Mac) and confirm encryption is actually active on each machine, not merely configured in a console Enforce device passcodes and screen-lock timeouts across all device types Configure remote lock and full remote wipe Deploy endpoint protection / antivirus Application allow/block controls and restrictions on personal cloud storage or unapproved apps OS patch and update enforcement 4. Application deployment Package and push our standard app set to the correct device groups (list provided after hire; includes clinical data collection and productivity applications) 5. Enrollment of the existing fleet Enroll our currently deployed devices Identify which devices require a wipe and reset to enroll properly, and propose a sequencing plan that minimizes disruption to clinic operations across two time zones 6. Monitoring and reporting Compliance dashboard and alerting for out-of-policy devices Asset inventory report we can reconcile against our HR records 7. Policy, documentation, and handoff Written device use / acceptable use policy suitable for inclusion in our employee handbook Device assignment and return acknowledgment form Standard operating procedures for: issuing a new device, onboarding a new hire, offboarding a departing employee including remote wipe, and responding to a lost or stolen device Live training session (recorded) for our operations and HR staff so we can administer this going forward without ongoing contractor support Deliverables Fully configured endpoint management environment with all existing devices enrolled and reporting compliant Documented security baseline and configuration profiles Written device policy plus assignment and return forms Admin SOP runbook Recorded training session and 30 days of post-launch support for questions Required Experience Hands-on MDM/UEM deployments for small to mid-size organizations — tell us how many and on which platforms Direct, current experience configuring Google Workspace endpoint management on Business Plus, including its real limitations Integrating a third-party MDM with Google Workspace as the identity provider Both Apple (macOS/iPadOS) and Windows management Apple Business Manager and Automated Device Enrollment Windows encryption and update enforcement in a Google-identity environment, not Microsoft 365 Experience with HIPAA-regulated or otherwise compliance-sensitive environments Clear written communication — we need documentation a non-technical operations manager can actually follow Nice to Have Prior work with healthcare, behavioral health, or multi-site clinical organizations Familiarity with BambooHR for reconciling device assignment against employee records Multi-state operations experience Engagement Details Type: Fixed-price with milestones preferred; open to hourly for the right candidate Timeline: Kickoff within two weeks, initial rollout complete within [4–6] weeks Availability: Some work must align with U.S. Pacific and Eastern business hours to coordinate with clinic staff Please Include in Your Proposal What can we accomplish using only what Business Plus already includes, and where will we genuinely need to add tooling? What are the top three things Google Workspace endpoint management cannot do that we should be aware of? How would you handle our MacBooks specifically? Two or three comparable projects you've completed, with device counts and platforms Any additional per-device or per-user monthly cost your approach would introduce Your fixed-price quote and proposed milestones Your experience with HIPAA safeguards as they apply to endpoint devices Start your proposal with the word "ENROLLED" so we know you read the full posting.

We are seeking an IT support specialist to assist with MS 365, HIPAA compliance, and computer software management in a healthcare environment. The role involves working on Macs and ensuring seamless IT operations. The ideal candidate will have experience in technical support and customer service, with a focus on healthcare IT solutions. Must be fully-proficient and certified in MS 365, one-drive, Sharepoint and all aspects of connectivity between server, in-house computers and mobile phones

Need a Microsoft Infrastructure & Migration Engineer to lead identity and email modernization projects for our enterprise clients. In this role, you will be responsible for designing and executing cloud migration strategies—specifically migrating legacy local Active Directory and personal/standalone account environments to modern Microsoft Entra ID (formerly Azure AD), as well as transitioning legacy email systems and Outlook environments to Microsoft 365 (M365)

We are a financial services company looking for an IT specialist to help us make sure we have archiving set up in our Microsoft Business 365 Standard ecosystem. We have to have this for compliance with SEC 17a-4 and want to ensure our Teams, Email, and our VoIP phone system are journaled to the archiving. Overall would appreciate any insight to general security of our SharePoint system too. If replying to this post, please don't just paste a generic cover letter - I'll ignore your response. Leave me your first embarrassing email address handle (not the @domain, for security and Upwork compliance) to prove you read this and some fun! Thanks.

We are seeking a system administrator to assist with management our Windows environment. We are a digital agency and commercial printing business. We have 5 developers on staff and two are strong in network administration, but we do seek to reduce their time on our internal systems management, as well as the support of any teammates for desktop related matters. The ideal candidate would have strong experience in Windows Server and desktop. We have been with another Upwork consultant for approximately 7 years and they are no longer able to maintain our account. Our primary need to address at this time is the minimal changes to internal on-premise systems, and the user devices. Admittedly, we have very little 'help desk' support needed, but it is the more important aspect of this contract. This is a specific outline: 2 Office Locations. - 2 Servers, 1 Server each on-premise office location, (last install date was 2022 - so potentially replacing hardware in the next year) Server setup - - Each server setup as follows: Hyper V with local system vm, storage unit vm, active directory vm - Ubiquity / Unifi Device VPN - into each office location; setup for authentication based on AD (one seems to be failing) - Wifi devices driven by Unifi / Ubiquiti controller running on AD vms. - Unifi DreamPro Routers - Unifi Switches Switches Cloud Environment (11:11 Labs) - 4 Virtual Windows Servers in iLand - 1 Operations management system server (Enfocus) - 2 Terminal Server for approx 6 users, with application server - 1 MIS application server (Tharstern) 2 Linux based Infrastructure Boxes (our team manages the Linux based servers, they are mentioned here as any issues provisioning new users or updates to applications sometimes are best to utilize an outside resource). - NextCloud Server running in iLand - OpenVPN Server running in iLand Approximate Desktops: All using Avast for Antivirus All tied to active directory 15 Mac users 15 PC users Change Management... changing PCs approx every 3-4 years; macs every 4-5 years Standard User level services, not much for help desk issues. Mostly new device change outs or permission updates on AD. All users are on Okta for password and access control - this is provisioned from AD. Current project needs: - We set an agenda for the projects for the year - it may be clean-up of a network setup to consolidate switches, or a change to create a stronger backup routine, etc. Here are some on the horizon: - - Agency has large number of video files it creates daily. We have 2 DAS systems that are utilized and rotated, we want to review this and see if there are better alternatives and implement/automation and verification of the backups. - - Cleanup of some use of AD for SSO - ensure we use it where it can be on some applications. - - Implementation of a new operations server at TAG company - needs some AD folder permissioning and user permissioning work performed. We have monitoring system for servers and desktops. As a digital agency we manage over 35 servers in our data center location. Thus, we are strong on change management, process, monitoring systems, backup and redundancy. Our in-house minor technical needs and desktop are the ones we prefer to outsource, while leveraging the existing systems and technology we have for one-stop view of uptime/etc. Traditionally, over the last few years, we've had approx 3-4 hours per month of desktop and network assistance for changes or improvements. And, then 2x a year a larger program that may be 20-30 hours.

Summary Role Level: IC4 Senior Security Administrator I (US Contract) Reports to: Manager of Engineering Services Salary: $50/h Job Description he Security Administrator role supports BEMO managed service customers and internal teams by assisting in the implementation, management, and monitoring of security and compliance solutions across Microsoft 365 and hybrid environments. This role is focused on a security-centric customer base, and we are specifically seeking candidates with experience working in GCC High tenants. In this role, you will also have the opportunity to lead compliance frameworks, including SOC 2, ISO, and CMMC, by maintaining security and compliance requirements across regulated environments. The Security Administrator II IC4 will demonstrate the ability lead practices within the following areas: • Microsoft 365 Security Administration • Azure • GRC Platforms • AI tools • Customer Service • Managed Services • Team Communication • Data Gathering and Analysis At BEMO, the Security Administrator IC4 competencies require: • In- depth specialist knowledge in your area of expertise. • Skilled problem solver and critical thinker when faced with unfamiliar challenges. • Makes informed, data-driven decisions. • Clear and open communicator across teams and departments. • Builds highly effective working relationships across the organization. • Continuously seeks expertise from peers and external sources. Responsibilities & Primary Goals • Monitoring and Maintenance o Proactively secure Microsoft 365 and Azure environments o Monitor all security systems and provide advice on strategy and implementation for the customer base o Conduct security risk and vulnerability assessments on security package customers o Enforce data governance o Patch and vulnerability-managed life cycle o Implement updates programmatically on different security packages offered by BEMO o Send out customer communications on security improvements and maintenance • Automation and Implementation of Managed Service Solutions o Create and document repeatable processes through automation across our managed service maintenance activities o Manage internal projects, provide technical guidance o Must be comfortable performing multiple initiatives simultaneously in a fast-paced environment o Leverage AI and automation technologies to optimize processes, improve response times, and enhance overall managed service delivery • Cross-Group Collaboration and Support o Support the Customer Success team with customer-specific data for security scores and value realization efforts o Provide T1-T2 Team members support for tickets and issues relevant to managed service customers' security and compliance o Working with the BEMO IT Manager to align security policies and processes o Work collaboratively with delivery engineers, operations team members, customer success managers, support engineers, and our BEMO customers o Manage support queue during designated times • Managed Security o Triage: Working with our SOC team and Microsoft Sentinel, you will help filter the noise to prioritize incidents and alerts that matter to alleviate alert fatigue. o Investigate: Investigate and analyze the most critical incidents, and document progress and findings. You will be analyzing logs within M365 tools and Sentinel. o Respond: Contain and mitigate incidents faster with managed response and proactive remediation. o Prevent: Provide detailed recommendations and best practices to go beyond detection and response to prevent future attacks. Requirements • Educational degree or diploma in Computer Science, Engineering, or the equivalent in proven experience • 5 + years of experience administrating, managing, and implementing Microsoft Azure and Microsoft 365 as an implementation, security, or support engineer. • Experience analyzing M365 usage data to identify issues and usage patterns • Strong critical thinking, analysis, and problem-solving skills • Strong competency in core professional skills, especially attention to detail, responsiveness, follow-through, and flexibility, with a high degree of emotional intelligence and tact • Ability to work independently and collaboratively with other internal teams when needed • Proven customer service experience with clear and consistent writing, presentation, and communication skills • Azure Cloud experience Specialized Knowledge or Skills Preferred • A Bachelor of Science or Engineering in Computer Science or a related field preferred • Microsoft certifications are required (AZ-500, SC-300, SC-400, etc.)