IT Systems Administrator

Solairus Aviation•Petaluma, CA

19d•Hybrid

About The Position

The IT Network and Infrastructure Security Specialist is responsible for administering, securing, and maintaining the organization’s network, server, and Microsoft cloud infrastructure. The role supports secure configuration, monitoring, resilience, and availability across enterprise systems, including network equipment, identity platforms, physical and virtual servers, and cloud environments. The position works with IT, infrastructure, and security teams to protect systems and support security initiatives. It follows a hybrid schedule: four days per week in the office and one day working from home.

Requirements

At least 7 years of systems administration experience, including at least 3 years in a senior or lead role.
Strong hands-on experience administering Microsoft 365, Entra ID, and Intune in a cloud-first environment.
Working experience with Azure IaaS, including virtual machines, virtual networks, storage, backup, and RBAC.
Experience with SSO, federation through Okta or a similar platform, and conditional access design.
Strong PowerShell scripting skills for automation and bulk administration.
Experience managing endpoints through an RMM platform, administering mobile devices through an enterprise MDM platform, and maintaining a structured patch management program.
Hands-on experience administering enterprise backup and recovery platforms such as Druva or Veeam, including restore testing and disaster recovery planning.
Working knowledge of EDR tools, firewalls, and email security, with the ability to support incident response.
Strong technical documentation skills, including creating clear SOPs and change records.
Ability to communicate calmly, professionally, and discreetly with executives and high-profile clients.
Willingness to participate in an on-call rotation and respond after hours as needed.

Nice To Haves

Microsoft certifications such as MS-102, AZ-104, or SC-300.
Okta Certified Administrator certification or an equivalent identity platform certification.
VMware/Omnissa Workspace ONE certification or an equivalent MDM credential.
Veeam Certified Engineer (VMCE) certification or an equivalent backup and recovery certification.
A security certification such as CompTIA Security+ or SSCP.
Hands-on experience with Workspace ONE MDM, Druva, Veeam, CrowdStrike Falcon, Delinea Secret Server, or NinjaOne.
Exposure to Microsoft Purview, Microsoft Sentinel, or Azure Front Door/Web Application Firewall (WAF).
Experience in aviation, financial services, or another regulated industry with strict privacy requirements.
Familiarity with ITIL practices, change advisory processes, and audit evidence collection.

Responsibilities

Manage, maintain, and troubleshoot network infrastructure, including switches, routers, firewalls, VPN appliances, and wireless systems.
Administer Windows and Linux servers, VMware or Hyper-V virtualization platforms, and enterprise storage solutions.
Monitor and maintain network performance, availability, and uptime.
Implement secure configurations, patching, hardening standards, and baseline system builds.
Manage and monitor security tools, including Okta identity management, MDM, NinjaOne RMM, firewalls, IDS/IPS, vulnerability scanners, and identity security platforms.
Support SIEM and EDR administration and security analysis.
Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
Perform and validate vulnerability scans, harden systems, and remediate infrastructure weaknesses.
Implement network segmentation, zero-trust controls, and secure access principles.
Participate in incident response, including investigation, triage, containment, remediation, eradication, and recovery.
Conduct root-cause analysis, document incidents, and improve response processes and controls.
Collaborate with third-party SOC/MDR partners on detection and mitigation activities.
Support risk assessments and track remediation of risks and vulnerabilities across infrastructure assets.
Assist with security policy enforcement, compliance audits, and regulatory alignment with NIST, CIS, SOC 2, GDPR, and CCPA.
Contribute to security roadmaps and improvement plans.
Collaborate with IT, cloud, infrastructure, and business units on secure system design and implementation.
Report on infrastructure health, security posture, patch status, and risk findings.
Support security awareness initiatives and promote appropriate security practices.
Administer Okta identity and privileged account management, including lifecycle management, MFA enforcement, role-based access, and privileged identity controls.