IT Systems Administrator

Solairus Aviation•Petaluma, CA

20d•$85,000 - $93,000•Hybrid

About The Position

The IT Network and Infrastructure Security Specialist is responsible for administering, securing, and maintaining the resilience of the organization’s network, server, and Microsoft cloud infrastructure. The role supports secure configuration, monitoring, and maintenance of enterprise IT systems, including firewalls, switches, wireless networks, identity platforms, physical and virtual servers, and cloud environments. The specialist works closely with IT, infrastructure, and security teams to protect systems from threats, maintain availability, and support security initiatives. The position follows a hybrid schedule, with four days per week in the office and one day working from home.

Requirements

At least 7 years of systems administration experience, including at least 3 years in a senior or lead role.
Hands-on experience administering Microsoft 365, Entra ID, and Intune in a cloud-first environment.
Working experience with Azure IaaS, including virtual machines, virtual networks, storage, backup, and role-based access control.
Experience with single sign-on, federation through Okta or a similar platform, and conditional access design.
Strong PowerShell scripting skills for automation and bulk administration.
Experience managing endpoints through an RMM platform, administering mobile devices through an enterprise MDM platform such as Workspace ONE, and maintaining a structured patch management program.
Hands-on experience administering enterprise backup and recovery platforms such as Druva or Veeam, including restore testing and disaster recovery planning.
Working knowledge of EDR tools, firewalls, and email security, with the ability to support incident response.
Strong technical documentation skills, including creating clear SOPs and change records.
Ability to communicate calmly, professionally, and discreetly with executives and high-profile clients.
Willingness to participate in an on-call rotation and respond after hours as needed.

Nice To Haves

Microsoft certifications such as MS-102, AZ-104, or SC-300.
Okta Certified Administrator or an equivalent identity platform certification.
VMware/Omnissa Workspace ONE certification or an equivalent MDM credential.
Veeam Certified Engineer (VMCE) or an equivalent backup and recovery certification.
A security certification such as CompTIA Security+ or SSCP.
Hands-on experience with Workspace ONE MDM, Druva, Veeam, CrowdStrike Falcon, Delinea Secret Server, or NinjaOne.
Exposure to Microsoft Purview, Microsoft Sentinel, or Azure Front Door/Web Application Firewall.
Experience in aviation, financial services, or another regulated industry with strict privacy requirements.
Familiarity with ITIL practices, change advisory processes, and audit evidence collection.

Responsibilities

Manage, maintain, and troubleshoot network infrastructure, including switches, routers, firewalls, VPN appliances, and wireless systems.
Administer Windows and Linux servers, VMware or Hyper-V virtualization platforms, and enterprise storage solutions.
Monitor and maintain network performance, availability, and uptime.
Implement and maintain secure configurations, patching, hardening standards, and baseline system builds.
Manage and monitor security tools, including Okta identity management, MDM, NinjaOne RMM, firewalls, IDS/IPS, vulnerability scanners, and identity security platforms.
Assist Security Analysis with SIEM and EDR administration support.
Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
Implement network segmentation, zero-trust controls, and secure access principles.
Participate in incident response, supporting containment, remediation, and recovery.
Investigate security alerts, perform triage, and support containment, eradication, and recovery activities.
Conduct root-cause analysis and strengthen security controls to reduce recurrence.
Maintain incident documentation and reporting, and improve response processes.
Collaborate with third-party security partners, including SOC/MDR providers, on detection and mitigation.
Support risk assessments across network, server, cloud, and identity systems.
Document, track, and support remediation of infrastructure risks and vulnerabilities.
Assist with IT and security policy enforcement, compliance audits, and regulatory alignment with NIST, CIS, SOC 2, GDPR, and CCPA.
Participate in developing and maintaining security roadmaps and improvement plans.
Work with IT, cloud, infrastructure, and business units on secure system design and implementation.
Report on infrastructure health, security posture, patch status, and risk findings.
Support security awareness initiatives and promote proper security practices.
Administer Okta identity and privileged account management, including lifecycle management, MFA enforcement, role-based access, and privileged identity controls.