Senior IT Systems Engineer

Freeform • Los Angeles, CA

2h • $160,000 - $215,000 • Onsite

About The Position

Freeform builds AI-native manufacturing systems that unify software, hardware, and physics to produce industrial-scale parts. The Senior IT Systems Engineer builds and operates the systems connecting Freeform’s people, factory, and data, including identity and endpoints, servers and storage, cloud and Kubernetes, networking, and security. The role involves building custom solutions where existing tools fall short and supporting a rapidly scaling company across headcount, locations, and new technology.

The position is based at Freeform’s vertically integrated facility in Hawthorne, where technology development, R&D, and production are located under one roof. It requires full-time onsite presence five days a week, with very limited exceptions. The role participates in an on-call rotation and planned after-hours maintenance windows.

Requirements

• At least 7 years of experience in systems administration or infrastructure engineering, including at least 3 years in a senior or lead role, owning a mixed Windows, Linux, cloud, and network environment.
• Experience administering and troubleshooting hybrid Microsoft 365, Intune, and Azure, including on-premises Active Directory synced to Entra ID, hybrid join, co-existence, and migration.
• Production experience with Windows Server DNS, DHCP, and RADIUS/NPS.
• Experience with Ubuntu and Red Hat, including systemd, storage, networking, hardening, and command-line troubleshooting.
• Experience with vSphere, Hyper-V, or OpenShift, and SAN storage over iSCSI and NFS; hands-on experience with Pure Storage and HPE 3PAR.
• Experience with AWS (EKS, S3, IAM), Azure, or GCP.
• Experience with Kubernetes on-premises and in the cloud.
• Layer 2/3 networking experience, including VLANs, ACLs, segmentation, MLAG, and LACP.
• Experience administering Defender XDR, Sentinel, and pfSense.
• PowerShell and Bash scripting experience.
• Clear written communication with technical and non-technical audiences.

Nice To Haves

• Experience with HashiCorp Vault and Argo CD.
• Experience with Ansible.
• Python scripting experience.
• Experience administering Siemens Teamcenter.
• Experience with Microsoft SQL Server administration.
• Hands-on experience deploying physical security systems such as DVR/NVR, CCTV, and access control.
• Practical use of AI tools for scripting, troubleshooting, and documentation, with sound judgment about data handling.
• A degree in computer information systems, computer science, or computer engineering.

Responsibilities

• Run Microsoft 365, Entra ID, and Azure in a hybrid environment with on-premises Active Directory, including Entra Connect, conditional access, RBAC, and licensing.
• Manage the device fleet in Intune, including enrollment, compliance, app deployment, Autopilot, and patching.
• Build and maintain Windows Server services, including AD DS, DNS, DHCP, Group Policy, and RADIUS/NPS, as well as hardened Ubuntu and Red Hat servers.
• Operate virtualization and SAN storage, including Pure Storage and HPE 3PAR over iSCSI and NFS, covering provisioning, replication, and capacity planning.
• Run and manage AWS infrastructure, including EKS, S3, IAM, and VPC networking, with ownership of access control, monitoring, and cost.
• Administer on-premises and EKS Kubernetes, including cluster builds and upgrades, networking and ingress, storage, RBAC, and workload troubleshooting.
• Design and maintain Layer 2/3 networking and segmentation across user, server, management, OT, and guest zones.
• Operate Defender XDR, Sentinel, and pfSense firewalls; tune detections, investigate incidents, drive vulnerability remediation, and support least-privilege access.
• Design and build custom solutions where off-the-shelf tools fall short, and automate repetitive work.
• Serve as the senior escalation point for infrastructure incidents and lead root-cause analysis.
• Document systems in runbooks and diagrams, and mentor junior IT staff.
• Participate in the on-call rotation and planned after-hours maintenance windows.

Benefits

• Significant stock option packages.
• 100% employer-paid medical, dental, and vision insurance, with premium PPO and HMO options.
• Life insurance.
• Traditional and Roth 401(k).
• Paid vacation, sick leave, and company holidays.
• Generous paid parental leave and extended transition back to work for the birthing parent.
• Free daily catered lunch and dinner, and a fully stocked kitchenette.
• Casual dress, flexible work hours, and regular catered team-building events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed