Senior IT Systems Engineer

Freeform • Los Angeles, CA

4d • Onsite

About The Position

Freeform builds AI-native manufacturing systems that unify software, hardware, and physics to produce industrial-scale parts. The Senior IT Systems Engineer builds and operates the systems connecting Freeform’s people, factory, and data, including identity and endpoints, servers and storage, cloud and Kubernetes, networking, and security. The role supports a rapidly scaling company across headcount, locations, and new technologies, and calls for broad technical skills, a hands-on approach, and a willingness to build custom solutions when standard tools are insufficient.

The position is based at Freeform’s vertically integrated facility in Hawthorne, California, where technology development, R&D, and production operate together. It requires full-time onsite presence five days per week, with very limited exceptions. The engineer serves as a senior escalation point, documents systems and procedures, mentors junior IT staff, and participates in an on-call rotation and planned after-hours maintenance windows.

Requirements

• At least 7 years in systems administration or infrastructure engineering, including at least 3 years in a senior or lead role, owning a mixed Windows, Linux, cloud, and network environment.
• Experience administering and troubleshooting hybrid Microsoft 365, Intune, and Azure, including on-premises Active Directory synced to Entra ID, hybrid join, co-existence, and migration.
• Production experience with Windows Server DNS, DHCP, and RADIUS/NPS.
• Experience with Ubuntu and Red Hat, including systemd, storage, networking, hardening, and command-line troubleshooting.
• Experience with vSphere, Hyper-V, or OpenShift, plus SAN storage over iSCSI and NFS; hands-on experience with Pure Storage and HPE 3PAR.
• Experience with AWS (EKS, S3, IAM), Azure, or GCP.
• Experience with Kubernetes on-premises and in the cloud.
• Layer 2/3 networking experience, including VLANs, ACLs, segmentation, MLAG, and LACP.
• Experience administering Defender XDR, Sentinel, and pfSense.
• PowerShell and Bash scripting experience.
• Clear written communication with technical and non-technical audiences.

Nice To Haves

• Experience with HashiCorp Vault and Argo CD.
• Experience with Ansible.
• Python scripting experience.
• Experience administering Siemens Teamcenter.
• Experience administering Microsoft SQL Server.
• Hands-on experience deploying physical security systems such as DVR/NVR, CCTV, and access control.
• Practical use of AI tools for scripting, troubleshooting, and documentation, with sound judgment on data handling.
• Degree in computer information systems, computer science, or computer engineering.

Responsibilities

• Run Microsoft 365, Entra ID, and Azure in a hybrid environment with on-premises Active Directory, including Entra Connect, conditional access, RBAC, and licensing.
• Manage the device fleet in Intune, including enrollment, compliance, app deployment, Autopilot, and patching.
• Build and maintain Windows Server services, including AD DS, DNS, DHCP, Group Policy, and RADIUS/NPS, as well as hardened Ubuntu and Red Hat servers.
• Run virtualization and SAN storage, including Pure Storage and HPE 3PAR over iSCSI and NFS, covering provisioning, replication, and capacity planning.
• Run and manage AWS infrastructure, including EKS, S3, IAM, and VPC networking, with ownership of access control, monitoring, and cost.
• Administer Kubernetes on-premises and in EKS, including cluster builds and upgrades, networking and ingress, storage, RBAC, and workload troubleshooting.
• Design and maintain Layer 2/3 networks and own segmentation across user, server, management, OT, and guest zones.
• Operate Defender XDR, Sentinel, and pfSense firewalls; tune detections, investigate incidents, drive vulnerability remediation, and maintain least-privilege access.
• Design and build custom solutions when off-the-shelf tools are insufficient, and automate repetitive work.
• Serve as the senior escalation point for infrastructure incidents and lead root-cause analysis.
• Document systems in runbooks and diagrams, and mentor junior IT staff.
• Participate in the on-call rotation and planned after-hours maintenance windows.

Benefits

• Significant stock option packages.
• 100% employer-paid medical, dental, and vision insurance, with premium PPO and HMO options.
• Life insurance.
• Traditional and Roth 401(k).
• Paid vacation, sick leave, and company holidays.
• Paid parental leave and extended transition back to work for the birthing parent.
• Free daily catered lunch and dinner, and a fully stocked kitchenette.
• Casual dress, flexible work hours, and regular catered team-building events.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed