Sr. Systems Administrator
nLIGHT, Inc. · Longmont, CO · 4 mo ago
Information Technology$80k–$120k/yrFull-time
Responsibilities
- Manage Windows and Linux servers; maintain Hyper-V/VMware environments.
- Build, maintain, and secure Windows and Linux images, understanding key Linux variances (distros, package managers, service frameworks, SELinux/AppArmor, kernel modules).
- Support LAN/WAN networking, VPN, VLANs, DNS/DHCP, and general connectivity.
- Participate in maintenance windows and on-call rotations.
- Apply CIS/STIG hardening across Windows & Linux server and endpoint images.
- Lead OS patch cycles and vulnerability review, performing threat analysis using CVE feeds, vendor advisories, and exploit intelligence.
- Ensure alignment with CMMC, DFARS 252.204-7012, NIST 800-171, and internal security controls.
- Support audit preparation through proper documentation (configs, change records, test results).
- Administer Active Directory, Azure AD, Group Policy, and Microsoft 365 services.
- Enforce least-privilege, manage privileged accounts, and support access reviews.
- Manage service accounts, licensing, and lifecycle tasks (onboarding/offboarding).
- Serve as Tier 2/3 escalation for complex incidents and root-cause investigations.
- Maintain standard Windows/Linux endpoint images and patch baselines.
- Produce and maintain documentation (runbooks, SOPs, diagrams).
- Provide advanced support for Windows endpoints, A/V systems, VPN, and executive users.
Requirements
- 5+ years System Administration experience across Windows Server, AD, M365, and core networking.
- Hands-on experience with Hyper-V and/or VMware.
- Practical Linux administration experience including building, securing, and maintaining OS images across different distributions.
- Experience performing patch management and threat analysis (CVE evaluation, prioritization, and remediation planning).
- Strong troubleshooting, documentation skills, and customer-service mindset.
- PowerShell scripting; automation/orchestration tools (Ansible, Packer, etc.).
- Exposure to identity governance, DUO, Keeper, or endpoint management platforms.
- Familiarity with GCC High, FortiGate, Dynamics 365, or manufacturing/cleanroom environments.
Qualifications
- Commitment to Excellence.
- Attention to Detail.
- Pride in Workmanship.
Skills
- PowerShell scripting.
- Automation/orchestration tools (Ansible, Packer, etc.).
- Identity governance.
- DUO, Keeper, or endpoint management platforms.
- Exposure to GCC High, FortiGate, Dynamics 365, or manufacturing/cleanroom environments.
Benefits
- 4 weeks of Paid Time Off per year.
- 11 paid Holidays.
- Employee Stock Purchase Plan.
- Tuition Assistance Program.
- Health (ACA Gold Plan), Vision and Dental Care paid by employer.
- 100% for Employee and 75% for Dependents Paid Family Leave, Short and Long Term Disability paid by employer.
- 100% Competitive 401k with company match and immediate vesting.
Pay
- $80,000-$120,000 depending on experience.
Schedule
- Onsite position in Longmont, CO.