System Administrator

About the role

People here stay because the work is meaningful, the culture is strong, and the problems are worth solving. Location: This role is remote, but will require going into our local facility occasionally for equipment support. Technology Stack: Identity & Cloud: Google Workspace, AWS (IAM, EC2, S3, CloudWatch), SSO / SAML / SCIM Management & Security: NinjaOne, Arctic Wolf, Meraki (LAN/WAN, firewalls, VPN) Data & Apps: Snowflake, Looker, ClickUp, Shopify, REST APIs Automation: Python, PowerShell, Bash

Responsibilities

• Identity & Access Management: Own identity systems across Google Workspace, SSO, SAML, SCIM, and RBAC. Manage the full user lifecycle including onboarding, access changes, and offboarding. Design and enforce security policies including least-privilege, conditional access, and MFA. Translate business access requirements from non-technical stakeholders into secure, scalable configurations.
• Endpoint Engineering: Own Windows and macOS endpoint management using NinjaOne as the central platform. Enforce device compliance standards, hardening policies, and full lifecycle management from procurement through decommissioning. Automate provisioning, patching, and software deployment through scripting and zero-touch enrollment. Improve device visibility, health monitoring, and automated remediation workflows. Design and maintain secure BYOD policies and conditional access controls.
• Automation & Scripting: Build automation using Python, PowerShell, and Bash