System Administrator

People here stay because the work is meaningful, the culture is strong, and the problems are worth solving.

Location:

This role is remote, but will require going into our local facility occasionally for equipment support.

Our Technology Stack

Identity & Cloud:

Google Workspace, AWS (IAM, EC2, S3, CloudWatch), SSO / SAML / SCIM

Management & Security:

NinjaOne, Arctic Wolf, Meraki (LAN/WAN, firewalls, VPN)

Data & Apps:

Snowflake, Looker, ClickUp, Shopify, REST APIs

Automation:

Python, PowerShell, Bash

What you will be doing:

• Identity & Access Management
• Own identity systems across Google Workspace, SSO, SAML, SCIM, and RBAC.
• Manage the full user lifecycle including onboarding, access changes, and offboarding.
• Design and enforce security policies including least-privilege, conditional access, and MFA.
• Translate business access requirements from non-technical stakeholders into secure, scalable configurations.
• Endpoint Engineering
• Own Windows and macOS endpoint management using NinjaOne as the central platform.
• Enforce device compliance standards, hardening policies, and full lifecycle management from procurement through decommissioning.
• Automate provisioning, patching, and software deployment through scripting and zero-touch enrollment.
• Improve device visibility, health monitoring, and automated remediation workflows.
• Design and maintain secure BYOD policies and conditional access controls.
• Automation & Scripting
• Build automation using Python, PowerShell, and Bash to reduce manual work and standardize IT operations.
• Design and maintain IT workflows, automations, permissions, and reporting across systems.
• Identify and implement AI tools that reduce manual IT effort — from ticket triage and workflow generation to predictive monitoring.
• Support internal teams in adopting AI tools effectively, safely, and at scale.
• Create and maintain runbooks, standards, and step-by-step guides the team can use without asking for help.
• Cloud Infrastructure & Integrations
• Support AWS services including IAM, EC2, S3, CloudWatch, networking, and access governance.
• Manage SaaS integrations, API configurations, data flows, and system automations across internal tooling.
• Support system releases through testing, documentation, and change management to minimize disruption.
• Evaluate new tools and architecture changes to support scale, reliability, and operational quality.
• Security & Compliance
• Partner with Arctic Wolf on alert triage, threat investigations, and security response workflows.
• Apply security standards across firewalls, encryption, endpoints, and access controls.
• Support SOC 2 and ISO 27001 readiness through strong governance and documentation practices.
• Maintain audit-ready records of system changes, permissions, and configurations.
• Technical Escalation & Continuous Improvement
• Advanced Escalation: Serve as the tier-3 escalation point for complex identity, cloud, endpoint, and integration issues.
• Project Execution: Manage and support IT upgrades, system rollouts, and cross-functional technology projects.
• Proactive Optimization: Identify tooling and process gaps early, recommending practical, high-value improvements.
• Cross-Functional Communication: Translate complex technical findings and recommendations into clear language for non-technical partners.

Requirements:

• Background: 5+ years in IT support, with dedicated time in a Systems Administrator or IT Engineering role (preferably in a high-growth environment).
• Education: Degree in Tech/Information Systems or equivalent practical experience.
• Compliance: Familiarity with framework readiness (SOC 2, ISO 27001).
• Certifications (Preferred): AWS SysOps Administrator or Google Workspace Administrator.
• Identity & Cloud: Deep expertise in IAM (SSO, SAML, SCIM, RBAC), Google Workspace, and cloud-first environment design.
• Automation & Scripting: Proficient in Python, PowerShell, and Bash; hands-on experience using AI tools to accelerate IT workflows.
• Endpoint & Systems: Enterprise management of Windows and macOS at scale using MDM platforms (NinjaOne, Intune, or Jamf).
• Networks & Integrations: Solid understanding of LAN/WAN, firewalls, VPNs, REST APIs, and cross-platform data flows.
• Core Competencies: Strong debugging under pressure, systems thinking, and ability to translate non-technical business needs into technical designs.
• Physical Requirements
• Must be willing to travel up to 10% yearly
• Prolonged periods of sitting at a desk and working on a computer
• Must be able to occasionally lift, push or pull 25 pounds, occasional bending and reaching
• Must be able to pass a background check and drug screen