Staff Systems Administrator

You will own on-premises and cloud infrastructure, identity platforms, networks, endpoints, backups, and disaster recovery. You will implement security controls and segmented-environment boundaries, manage endpoint and identity lifecycles, maintain audit evidence and documentation, automate operations, lead infrastructure improvements, and provide advanced technical support.

Responsibilities

• Own and operate on-premises and cloud infrastructure
• Administer Azure or AWS environments
• Define infrastructure roadmaps and drive resilience improvements
• Maintain architecture, inventory, recovery, configuration, and ownership documentation
• Plan and execute infrastructure changes
• Operate services within segmented entity environments
• Implement network segmentation, firewall policies, secure remote access, and access boundaries
• Translate legal, security, privacy, and compliance obligations into technical controls
• Establish secure configuration baselines
• Own patching and vulnerability-remediation workflows
• Administer endpoint protections and least-privilege controls
• Harden identity and administrative access
• Maintain security logging, monitoring, backups, and telemetry
• Maintain audit evidence and support audits and security reviews
• Participate in incident response and corrective actions
• Manage Windows, macOS, and Linux endpoints
• Administer identity platforms
• Lead onboarding and offboarding
• Provide advanced troubleshooting and escalation support
• Manage IT assets, software licenses, vendors, procurement, warranties, and secure disposal
• Use scripting and automation to improve operations and reporting

Requirements

• 12 or more years of systems administration, infrastructure engineering, enterprise IT operations, or related experience
• Experience independently owning production IT infrastructure and end-user environments in a regulated or security-sensitive organization
• Hands-on expertise with Windows, macOS, Linux, server administration, virtualization, Azure or AWS, and identity platforms
• Experience with endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, endpoint detection and response, and least-privilege controls
• Experience supporting security or compliance programs and audit evidence
• Networking knowledge including TCP/IP, DNS, DHCP, VLANs, routing, VPNs, network segmentation, firewall policy, and secure remote access
• Experience with Intune, Jamf, or equivalent endpoint-management platforms
• Experience with monitoring, backup, disaster recovery, and business continuity
• Documentation, prioritization, risk communication, and stakeholder-management skills
• Ability to support after-hours maintenance or incident response

Benefits

• Bonus
• Benefits
• Equity
• Temporary benefits package after 60 days of employment
• International premium
• Hardship differential
• Cost of living differential
• Living quarters allowance
• Foreign service transfer allowance
• International benefits
• Visa assistance
• Relocation assistance