IT Systems Engineer

About the position

The IT Systems Engineer is a key technical contributor responsible for maintaining the performance, security, and reliability of Linguava’s cloud and on-premises technology infrastructure. This role supports the Director of Information Technology in designing and implementing scalable technology solutions, including SaaS platforms and cloud services. The engineer will manage and optimize Google Cloud Platform and Google Workspace environments, administer core network and server infrastructure, and support endpoint management across macOS and iOS devices. Additionally, this position plays a key role in cybersecurity operations, helping implement controls aligned with the CIS Critical Security Controls and ISO 27001 standards.

Responsibilities

• Administer and support infrastructure within a public cloud environment (primarily Google Cloud Platform), including virtual machines, storage buckets, databases, and cloud networking.
• Create and maintain Identity and Access Management (IAM) policies for secure access control.
• Monitor resource utilization and optimize cloud performance and cost-efficiency.
• Deploy and maintain virtual private cloud (VPC) networks, firewall rules, and interconnectivity between systems.
• Assist in migrating on-premise systems and services to cloud-based platforms.
• Serve as an administrator for Google Workspace, overseeing Gmail, Calendar, Drive, Meet, Groups, and other services.
• Configure and manage organizational units (OUs), groups, roles, and user policies.
• Implement advanced security configurations including 2-step verification, data loss prevention (DLP), and context-aware access.
• Monitor and troubleshoot Google Workspace-related issues using the Admin Console and audit logs.
• Manage email routing, SPF/DKIM/DMARC records, and drive file sharing policies to ensure security and compliance.
• Support integration of third-party tools and SaaS platforms with Google Workspace (e.g., SSO, SCIM, API access).
• Provide tier-3 escalation for Google Workspace support requests and feature implementation.
• Provide general systems administration for Linux and Windows servers, including patching, monitoring, and troubleshooting.
• Maintain system backups, ensure data integrity, and participate in disaster recovery planning.
• Support Microsoft SQL Server and other relational databases, including monitoring performance, executing backups, and assisting with optimization tasks.
• Manage Apple macOS and iOS devices using a mobile device management (MDM) platform (e.g., Kandji, Jamf, or Intune).
• Enforce security policies on all managed devices, including encryption, screen locks, and software update compliance.
• Assist in onboarding and offboarding processes related to IT provisioning, access, and hardware management.
• Assist in maintaining device inventory and ensure lifecycle tracking for all endpoints.
• Support and maintain enterprise network devices, including switches, firewalls, wireless access points, and VPN infrastructure.
• Troubleshoot LAN/WAN issues, manage VLANs, and ensure high availability for network services.
• Administer core network services such as DHCP, DNS, and NAT configurations.
• Manage internet domain registrations and ensure proper DNS configuration for internal and external systems.
• Manage voice and data circuit connections in coordination with external telecommunications vendors.
• Monitor uptime and bandwidth utilization for internet and WAN circuits.
• Coordinate moves, adds, or changes with telecom providers to meet business needs.
• Configure and support VPN solutions and secure remote access methods.
• Manage firewall rules and endpoint configurations to ensure a secure remote work environment.
• Troubleshoot connectivity issues related to remote access and performance.
• Maintain structured cabling systems across office environments, including patch panels, racks, and wiring closets.
• Support the deployment of new hardware infrastructure, including network appliances and servers.
• Ensure labeling, documentation, and organization of physical network assets.
• Provide ongoing support for both cloud-based and on-premise VoIP systems, including configuration and troubleshooting.
• Assist with call routing design, number provisioning, voicemail setup, and user onboarding.
• Work with customer support teams to escalate and resolve service issues with providers.
• Support the configuration and maintenance of access control systems (e.g., badge readers, door controllers).
• Monitor and maintain video surveillance systems and secure storage of footage.
• Coordinate access provisioning and changes with HR as needed.
• Monitor system alerts and log data for signs of unauthorized access or malicious behavior.
• Assist with responding to security incidents, including identification, containment, remediation, and documentation.
• Perform periodic access reviews and update permissions according to role-based access policies.
• Run internal vulnerability scans and track remediation efforts in collaboration with system owners.
• Apply patches and firmware updates as part of regular maintenance routines.
• Help enforce endpoint protection measures (e.g., antivirus, EDR, disk encryption).
• Support MFA enrollment and maintenance across critical platforms.
• Document security controls and help prepare evidence for audits and compliance reporting.
• Contribute to the organization’s implementation of CIS Critical Security Controls and ISO 27001.
• Assist in maintaining asset inventories, risk registers, and security documentation.
• Participate in internal security reviews and help improve organizational security awareness.
• Participate in regular security audits and assessments.
• Collaborate with the Director of IT to evaluate, select, and implement SaaS platforms and other technical solutions that support business needs.
• Participate in planning sessions to help design scalable, secure, and cost-effective architectures for internal systems.
• Assist with proof-of-concept deployments and integration testing of new tools and platforms.
• Document system designs, architecture diagrams, and operational procedures for new technologies.
• Write and maintain scripts (e.g., PowerShell, Bash, Python) to automate routine system tasks and monitoring checks.
• Maintain detailed and up-to-date documentation for infrastructure, standard operating procedures, and technical configurations.
• Create and update runbooks for repeatable technical processes and incident response workflows.

Requirements

• 7+ years of experience in systems administration, network administration, cloud platform administration, or a similar role.
• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent additional experience and certifications).
• Advanced Google Cloud, AWS, or Microsoft Azure certification or equivalent demonstrated experience and expertise.
• Basic cybersecurity related certifications or equivalent demonstrated experience and skills.
• Ability to manage public cloud platforms (especially Google Cloud Platform) including configuring, monitoring and troubleshooting virtual machines, storage buckets, databases, and cloud networking.
• Ability to perform advanced Google Workspace configuration and administration tasks.
• Ability to perform common system administration tasks for both Linux and Windows servers.
• Ability to manage networking technologies including VLANs, DNS, DHCP, VPNs, and firewalls.
• Ability to provide advanced support for macOS and iOS devices using an MDM platform.
• Basic cybersecurity operations knowledge, including monitoring, vulnerability remediation, and access control.
• Working knowledge of ISO 27001, HIPAA, or SOC 2 compliance frameworks.
• Experience with SIEM platforms, vulnerability scanners, and other security tools.
• Experience supporting or implementing SaaS and enterprise collaboration platforms.
• Experience working in regulated environments such as healthcare or finance.
• Strong scripting and automation skills.
• Strong analytical and problem-solving skills.
• Excellent communications, interpersonal, and collaboration skills.
• Strong documentation and organizational skills.

Benefits

• Competitive salary, performance-based incentives, and comprehensive benefits.
• Opportunities for professional growth and leadership development.