System Administrator

About the role

People here stay because the work is meaningful, the culture is strong, and the problems are worth solving.

Technology Stack

• Identity & Cloud: Google Workspace, AWS (IAM, EC2, S3, CloudWatch), SSO / SAML / SCIM
• Management & Security: NinjaOne, Arctic Wolf, Meraki (LAN/WAN, firewalls, VPN)
• Data & Apps: Snowflake, Looker, ClickUp, Shopify, REST APIs
• Automation: Python, PowerShell, Bash

Responsibilities

• Identity & Access Management
  • Own identity systems across Google Workspace, SSO, SAML, SCIM, and RBAC.
  • Manage the full user lifecycle including onboarding, access changes, and offboarding.
  • Design and enforce security policies including least-privilege, conditional access, and MFA.
  • Translate business access requirements from non-technical stakeholders into secure, scalable configurations.
• Endpoint Engineering
  • Own Windows and macOS endpoint management using NinjaOne as the central platform.
  • Enforce device compliance standards, hardening policies, and full lifecycle management from procurement through decommissioning.
  • Automate provisioning, patching, and software deployment through scripting and zero-touch enrollment.
  • Improve device visibility, health monitoring, and automated remediation workflows.
  • Design and maintain secure BYOD policies and conditional access controls.
• Automation & Scripting
  • Build automation using Python, PowerShell, and Bash to reduce manual work and standardize IT operations.
  • Design and maintain IT workflows, automations, permissions, and reporting across systems.
  • Identify and implement AI tools that reduce manual IT effort — from ticket triage and workflow generation to predictive monitoring.
  • Support internal teams in adopting AI tools effectively, safely, and at scale.
  • Create and maintain runbooks, standards, and step-by-step guides the team can use without asking for help.
• Cloud Infrastructure & Integrations
  • Support AWS services including IAM, EC2, S3, CloudWatch, networking, and access governance.
  • Manage SaaS integrations, API configurations, data flows, and system automations across internal tooling.
  • Support system releases through testing, documentation, and change management to minimize disruption.
  • Evaluate new tools and architecture changes to support scale, reliability, and operational quality.
• Security & Compliance
  • Partner with Arctic Wolf on alert triage, threat investigations, and security response workflows.
  • Apply security standards across firewalls, encryption, endpoints, and access controls.
  • Support SOC 2 and ISO 27001 readiness through strong governance and documentation practices.
  • Maintain audit-ready records of system changes, permissions, and configurations.
• Technical Escalation & Continuous Improvement
  • Advanced Escalation: Serve as the tier-3 escalation point for complex identity, cloud, endpoint, and integration issues.
  • Project Execution: Manage and support IT upgrades, system rollouts, and cross-functional technology projects.
  • Proactive Optimization: Identify tooling and process gaps early, recommending practical, high-value improvements.
  • Cross-Functional Communication: Translate complex technical findings and recommendations into clear language for non-technical partners.

Requirements

• Background: 5+ years in IT support, with dedicated time in a Systems Administrator or IT Engineering role (preferably in a high-growth environment).
• Education: Degree in Tech/Information Systems or equivalent practical experience.
• Compliance: Familiarity with framework readiness (SOC 2, ISO 27001).
• Certifications (Preferred): AWS SysOps Administrator or Google Workspace Administrator.
• Identity & Cloud: Deep expertise in IAM (SSO, SAML, SCIM, RBAC), Google Workspace, and cloud-first environment design.
• Automation & Scripting: Proficient in Python, PowerShell, and Bash; hands-on experience using AI tools to accelerate IT workflows.
• Endpoint & Systems: Enterprise management of Windows and macOS at scale using MDM platforms (NinjaOne, Intune, or Jamf).
• Networks & Integrations: Solid understanding of LAN/WAN, firewalls, VPNs, REST APIs, and cross-platform data flows.
• Core Competencies: Strong debugging under pressure, systems thinking, and ability to translate non-technical business needs into technical designs.

Physical Requirements

• Must be willing to travel up to 10% yearly
• Prolonged periods of sitting at a desk and working on a computer
• Must be able to occasionally lift, push or pull 25 pounds, occasional bending and reaching
• Must be able to pass a background check and drug screen

Pay & Benefits

• Salary Range: $100,000 - $110,000/yr, as well as bonus eligibility
• Medical, Dental, Vision Insurance
• Company paid Life
• Voluntary life, short- and long-term disability
• 401k
• Excellent time off options
• Caring family
• The work that you do matters

This response is AI-generated, for reference only.