IT Systems Administrator

Constellis•Virtual, VA

About The Position

The IT Systems Administrator is a hands-on position which will own and operate the tools, endpoints, and infrastructure that keep our people, our network, and our field deployments running securely and reliably. You'll be the dedicated LEXSO-side counterpart to our parent company's IT function, building and administering the systems specific to our environment while coordinating with Constellis IT on shared services. This is a builder role: you'll stand up new tooling, tighten existing processes, and keep clear, current documentation and records as the company scales.

Requirements

4+ years in a hands-on IT systems administrator, systems engineer, or infrastructure role
Direct experience deploying and managing Apple's MDM platform for a Mac-based fleet
Working knowledge of endpoint hardening, disk encryption, endpoint protection/EDR, firewall configuration, and patch management
Experience administering identity and access management, including MFA enforcement and account lifecycle processes
Comfort with basic network infrastructure including switches, firewalls, VPN, troubleshooting connectivity issues
Experience administering Google Workspace, or demonstrated ability to learn it quickly
Experience writing and maintaining IT policies, procedures, and technical documentation
Strong written and verbal communication and the ability to explain technical tradeoffs to non-technical stakeholders
Self-directed and comfortable owning a workstream independently in a small, fast moving team

Nice To Haves

Experience with Jamf, Kandji, Mosyle, or Intune is a plus
Experience supporting IT for a government contractor or other regulated environment
Experience with centralized logging/SIEM tooling and basic log review practices
Experience supporting field or on-site deployments, not just a remote environment
Prior experience as the sole or founding IT hire at a small or growing company

Responsibilities

Own the full lifecycle of company laptops and devices including provisioning, configuration, inventory, and retirement
Deploy and administer a mobile device management (MDM) platform across the Mac fleet
Enforce disk encryption, endpoint protection, firewall settings, and patch compliance
Maintain an accurate, current asset inventory across all issued hardware
Administer user account lifecycle across core systems including onboarding, role changes, and offboarding
Enforce multi-factor authentication and access control standards across company systems
Manage least-privilege access reviews and local admin rights on endpoints
Support on-premises server stack installation, configuration, and troubleshooting at customer sites, on an as-needed basis
Provide network infrastructure support with switches, firewalls, VPN, connectivity for field and office environments, as other issues as they arise
Partner with Field Ops and delivery engineering on installation and integration issues in the field when needed
Stand up and monitor centralized logging and alerting across endpoints and infrastructure
Manage patch and vulnerability remediation cadence, with regular status reporting
Own backup procedures and removable media handling practices
Write and maintain clear IT policies, procedures, and system documentation
Produce accurate, current records and evidence on request to support internal reviews and customer or partner due diligence
Serve as the primary point of contact between LEXSO and Constellis IT for shared services and tooling decisions
Evaluate and recommend new tools as the company's needs grow
Communicate clearly with leadership on project status, risks, and tradeoffs