System Administrator, IT Services (Cloud, Network, & Security)

Cloud Administration

• Serve as a primary administrator for AmaWaterways’ Microsoft Azure and Amazon Web Services (AWS) environments, including provisioning and lifecycle management of virtual machines/EC2 instances, storage, and platform services.
• Administer cloud identity and access management — Microsoft Entra ID (Azure AD), Azure RBAC, AWS IAM users/roles/policies — applying least-privilege principles and managing federation and single sign-on.
• Configure and maintain cloud networking constructs (VNets/VPCs, subnets, route tables, network security groups, security groups, VPN/ExpressRoute/Direct Connect, and load balancers).
• Monitor cloud cost, utilization, and capacity; identify rightsizing and optimization opportunities; and support tagging, budgeting, and chargeback/showback reporting.
• Implement and maintain cloud backup, snapshot, and disaster-recovery configurations across Azure and AWS workloads, and perform periodic recovery testing.
• Support cloud governance and configuration baselines using native tooling (Azure Policy, Microsoft Defender for Cloud, AWS Config/Security Hub) and assist with infrastructure-as-code and automation where applicable.

Network Administration

• Administer Cisco network infrastructure — switches, routers, and wireless — including VLANs, trunking, port configuration, basic routing and switching, and firmware/IOS updates across the Calabasas headquarters and remote offices.
• Administer firewalls, VPN, and remote-access connectivity; manage site-to-site and client VPN tunnels and support secure connectivity between offices, data center/colo, and cloud.
• Manage core network services (DNS, DHCP, NTP) and Wi-Fi infrastructure, including SSID configuration, controller management, and wireless performance troubleshooting.
• Monitor network health, performance, and availability using monitoring/alerting tools; investigate and resolve connectivity, latency, and throughput issues, escalating to vendors/MSPs for changes that exceed the role’s scope.
• Maintain network documentation — topology diagrams, IP address management (IPAM), VLAN and firewall rule inventories — and keep configuration backups current.
• Support telephony and contact-center networking for 8x8 (QoS, SIP/RTP traffic, and call-quality troubleshooting) in partnership with the voice platform.

Security Administration

• Apply system-administration security practices across cloud, network, server, and endpoint layers — hardening configurations, enforcing least-privilege access, and maintaining secure baselines.
• Administer multi-factor authentication, Conditional Access, and identity-protection policies in Microsoft Entra ID; review privileged access and support access certifications/reviews.
• Operate and maintain endpoint and server protection (EDR/AV), disk encryption (BitLocker/FileVault), and patch/vulnerability remediation in accordance with the IT security and patch-management standards.
• Support email and collaboration security (anti-phishing, anti-spam, safe links/attachments) and assist with triage and remediation of phishing, impersonation, and account-compromise incidents.
• Monitor security alerts and logs across Microsoft Defender, cloud-native security tooling, and network devices; investigate, document, and escalate suspected incidents.
• Assist with vulnerability scanning, remediation tracking, and security configuration reviews; contribute to security audits, evidence gathering, and policy/standard compliance.
• Partner with leadership and any third-party security providers (MSP/MSSP) on incident response, threat containment, and continuous-improvement initiatives.

Infrastructure & End-User Support

• Administer and maintain the on-premises VMware vSphere environment (ESXi hosts, vCenter), including virtual machine provisioning, storage management, host patching, and performance troubleshooting.
• Administer the Citrix Cloud environment, including published applications and virtual desktops (Citrix DaaS / Virtual Apps and Desktops), delivery groups, machine catalogs, image updates, and end-user session troubleshooting.
• Administer Microsoft 365 services (Exchange Online, Microsoft Teams, SharePoint Online, OneDrive), including mailbox, distribution-list, license, and collaboration management.
• Administer Active Directory and on-premises identity services — users, groups, organizational units, Group Policy, DNS, and DHCP — including hybrid synchronization with Entra ID.
• Provision, patch, monitor, and maintain Windows Server and select Linux servers, both on-premises (VMware) and in Azure/AWS, including backup verification.
• Manage Windows and macOS endpoints using Microsoft Intune (or comparable MDM/UEM) — enrollment, compliance and configuration policies, software deployment, and remote remediation — and administer iOS/Android mobile devices.
• Provide Tier 2/Tier 3 support to AmaWaterways employees, working escalations and tickets through the ITSM ticketing system to resolution within agreed SLAs.
• Own IT onboarding and offboarding: account creation, license and access assignment, virtual desktop entitlements, equipment provisioning/imaging, and timely deprovisioning.
• Maintain accurate IT asset and licensing records (hardware, software, cloud) and manage decommissioning in accordance with data-sanitization policy.
• Coincide with vendors and managed service providers (Microsoft, AWS, Cisco, VMware/Broadcom, Citrix, 8x8, Dell, Lenovo, Apple, ISPs) for procurement, support cases, and field work.
• Document procedures, runbooks, and knowledge-base articles; keep documentation current as the environment evolves.
• Participate in IT projects (cloud migrations, network upgrades, security rollouts, virtualization/VDI initiatives, hardware refreshes, and telephony migrations) under the direction of the Manager, System Administration.
• Participate in an after-hours on-call rotation for critical IT incidents, as required.