System Administrator

About the role

People here stay because the work is meaningful, the culture is strong, and the problems are worth solving. This role is remote, but will require going into our local facility occasionally for equipment support.

Technology Stack

• Identity & Cloud: Google Workspace, AWS (IAM, EC2, S3, CloudWatch), SSO / SAML / SCIM
• Management & Security: NinjaOne, Arctic Wolf, Meraki (LAN/WAN, firewalls, VPN)
• Data & Apps: Snowflake, Looker, ClickUp, Shopify, REST APIs
• Automation: Python, PowerShell, Bash

Responsibilities

• Identity & Access Management:
  • Own identity systems across Google Workspace, SSO, SAML, SCIM, and RBAC.
  • Manage the full user lifecycle including onboarding, access changes, and offboarding.
  • Design and enforce security policies including least-privilege, conditional access, and MFA.
  • Translate business access requirements from non-technical stakeholders into secure, scalable configurations.
• Endpoint Engineering:
  • Own Windows and macOS endpoint management using NinjaOne as the central platform.
  • Enforce device compliance standards, hardening policies, and full lifecycle management from procurement through decommissioning.
  • Automate provisioning, patching, and software deployment through scripting and zero-touch enrollment.
  • Improve device visibility, health monitoring, and automated remediation workflows.
  • Design and maintain secure BYOD policies and conditional access controls.
• Automation & Scripting:
  • Build automation using Python, PowerShell, and Bash to reduce manual work and standardize IT operations.
  • Design and maintain IT workflows, automations, permissions, and reporting across systems.
  • Identify and implement AI tools that reduce manual IT effort — from ticket triage and workflow generation to predictive monitoring.
  • Support internal teams in adopting AI tools effectively, safely, and at scale.
  • Create and maintain runbooks, standards, and step-by-step guides the team can use without asking for help.
• Cloud Infrastructure & Integrations:
  • Support AWS services including IAM, EC2, S3, CloudWatch, networking, and access governance.
  • Manage SaaS integrations, API configurations, data flows, and system automations across internal tooling.
  • Support system releases through testing, documentation, and change management to minimize disruption.
  • Evaluate new tools and architecture changes to support scale, reliability, and operational quality.
• Security & Compliance:
  • Partner with Arctic Wolf on alert triage, threat investigations, and security response workflows.
  • Apply security standards across firewalls, encryption, endpoints, and access controls.
  • Support SOC 2 and ISO 27001 readiness through strong governance and documentation practices.
  • Maintain audit-ready records of system changes, permissions, and configurations.
• Technical Escalation & Continuous Improvement:
  • Advanced Escalation: Serve as the tier-3 escalation point for complex identity, cloud, endpoint, and integration issues.
  • Project Execution: Manage and support IT upgrades, system rollouts, and cross-functional technology projects.
  • Proactive Optimization: Identify tooling and process gaps early, recommending practical, high-value improvements.
  • Cross-Functional Communication: Translate complex technical findings and recommendations into clear language for non-technical partners.

Requirements

• Background: 5+ years in IT support, with dedicated time in a Systems Administrator or IT Engineering role (preferably in a high-growth environment).
• Education: Degree in Tech/Information Systems or equivalent practical experience.
• Compliance: Familiarity with framework readiness (SOC 2, ISO 27001).
• Certifications (Preferred): AWS SysOps Administrator or Google Workspace Administrator.
• Identity & Cloud: Deep expertise in IAM (SSO, SAML, SCIM, RBAC), Google Workspace, and cloud-first environment design.
• Automation & Scripting: Proficient in Python, PowerShell, and Bash; hands-on experience using AI tools to accelerate IT workflows.
• Endpoint & Systems: Enterprise management of Windows and macOS at scale using MDM platforms (NinjaOne, Intune, or Jamf).
• Networks & Integrations: Solid understanding of LAN/WAN, firewalls, VPNs, REST APIs, and cross-platform data flows.
• Core Competencies: Strong debugging under pressure, systems thinking, and ability to translate non-technical business needs into technical designs.

Physical Requirements

• Must be willing to travel up to 10% yearly
• Prolonged periods of sitting at a desk and working on a computer
• Must be able to occasionally lift, push or pull 25 pounds, occasional bending and reaching
• Must be able to pass a background check and drug screen

Pay

Salary Range: $100,000 - $110,000/yr, as well as bonus eligibility

Benefits

• Medical, Dental, Vision Insurance
• Company paid Life
• Voluntary life, short- and long-term disability
• 401k
• Excellent time off options
• Caring family
• The work that you do matters

This response is AI-generated, for reference only.