Senior Systems Administrator/ IT Engineer

Velaura•Santa Clara, CA

2d•$145,000 - $200,000

About The Position

Velaura AI is seeking an experienced Senior Systems Administrator / IT Engineer to help administer, secure, and continuously improve our enterprise infrastructure while also providing Tier 2/3 desktop engineering support for our end-user computing environment. This is a hands-on infrastructure engineering role with primary responsibility for enterprise systems administration, Linux servers, virtualization, cloud infrastructure, networking, identity management, enterprise storage, backup, endpoint management, automation, and cybersecurity. Desktop engineering and advanced end-user support are important secondary responsibilities, and successful candidates must have strong experience in both areas. This role will work closely with the existing Systems Administrator and other members of the IT organization to support, maintain, and continuously improve Velaura's enterprise infrastructure. As a senior member of the team, this individual will share responsibility for the design, implementation, security, reliability, and evolution of the company's IT environment while helping establish operational best practices and scalable processes as the organization grows. The ideal candidate enjoys working across the full technology stack—from servers, cloud platforms, storage, and networking to endpoint engineering and cybersecurity—and thrives in a fast-paced startup environment where ownership, collaboration, sound judgment, and continuous improvement are highly valued.

Requirements

Minimum 10 years of progressively responsible experience in Systems Administration, Infrastructure Engineering, or Enterprise IT, including significant hands-on desktop engineering and Tier 2/3 end-user support.
Proven experience designing, deploying, administering, securing, and supporting enterprise infrastructure.
Strong hands-on experience administering Linux (RHEL and Ubuntu), Windows, and macOS operating systems.
Experience administering: Google Workspace; AWS and/or Google Cloud Platform; VMware vCenter, Proxmox, or similar virtualization platforms; Cisco Meraki or comparable enterprise networking solutions; Iru, Kandji, Jamf, Microsoft Intune, or similar endpoint management platforms; Duo Security or comparable SSO and MFA platforms
Strong understanding of TCP/IP networking, DNS, DHCP, VPNs, VLANs, Wi-Fi, routing, firewalls, SSL/TLS certificates, and secure remote access.
Experience supporting enterprise storage, backup, disaster recovery, and business continuity technologies.
Experience administering endpoint security, EDR, patch management, operating system hardening, vulnerability remediation, encryption, and endpoint compliance.
Working knowledge of Bash and Python scripting for systems administration and automation.
Strong understanding of cybersecurity principles, including: Zero Trust, Least Privilege, Defense in Depth, Identity and Access Management, Secure Configuration Management, Vulnerability Management, Incident Response, Data Protection
Strong troubleshooting, analytical, and problem-solving skills across infrastructure, cloud, networking, storage, desktop, identity, and security environments.
Excellent written and verbal communication skills, with the ability to create clear technical documentation and effectively communicate with both technical and non-technical users.
Ability to independently prioritize work, manage multiple projects, collaborate effectively with teammates, and operate successfully in a fast-paced startup environment.
Demonstrated commitment to delivering reliable infrastructure and outstanding end-user support.

Nice To Haves

Experience administering NetApp storage systems and Rubrik backup platforms.
Experience with SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, or similar enterprise security technologies.
Experience managing Google Workspace security, email security, phishing investigations, and secure collaboration technologies.
Microsoft 365
Familiarity with Infrastructure-as-Code and configuration management tools such as Terraform, Ansible, or similar technologies.
Experience with SIEM platforms, centralized logging, vulnerability scanners, security monitoring, or security operations workflows.
Knowledge of SOC 2, ISO 27001, CIS Controls, NIST Cybersecurity Framework, or similar security and compliance standards.
Experience managing FileVault, BitLocker, certificate services, privileged access management, endpoint compliance, and device encryption.
Experience with monitoring, alerting, capacity planning, and infrastructure performance management.
Previous experience in a startup, semiconductor, AI, cloud infrastructure, or other high-growth technology environment.
Professional certifications such as RHCSA/RHCE, AWS Certified Solutions Architect, Google Cloud Professional, Microsoft, Cisco, Security+, CISSP, or equivalent certifications are desirable.

Responsibilities

Design, administer, maintain, and continuously improve enterprise infrastructure supporting engineering and business operations.
Administer and maintain Linux servers, including RHEL and Ubuntu, with responsibility for installation, configuration, patching, monitoring, troubleshooting, performance tuning, and lifecycle management.
Manage VMware vCenter, Proxmox, AWS, and Google Cloud Platform infrastructure, including compute, storage, networking, virtualization, access controls, availability, and capacity planning.
Administer Google Workspace, Microsoft 365, identity management, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) using Duo Security or comparable platforms.
Administer Cisco Meraki wireless infrastructure, VPN services, DNS, DHCP, PAN firewalls, network segmentation, SSL/TLS certificates, and enterprise networking services.
Support NetApp enterprise storage, Rubrik backup infrastructure, disaster recovery, data protection, and business continuity operations.
Develop and maintain Bash and Python automation scripts to improve operational efficiency and reduce repetitive administrative tasks.
Monitor infrastructure performance, availability, capacity, reliability, and security across on-premises and cloud environments.
Participate in infrastructure upgrades, technology evaluations, cloud initiatives, and system implementations.
Create and maintain architecture diagrams, configuration standards, operating procedures, inventories, and technical documentation.
Collaborate with Engineering, Security, and Operations teams to ensure infrastructure meets business, performance, availability, and security requirements.
Implement and maintain secure configurations across Linux, Windows, macOS, cloud, networking, identity, storage, and endpoint platforms.
Administer and monitor Endpoint Detection and Response (EDR) platforms such as SentinelOne or comparable enterprise security solutions.
Perform vulnerability remediation, operating system hardening, patch management, endpoint compliance, and security configuration reviews.
Enforce least-privilege access, secure account provisioning, privileged access controls, Multi-Factor Authentication, and identity lifecycle management.
Investigate security alerts, phishing incidents, endpoint threats, suspicious activity, and potential security compromises.
Assist with incident response activities, including triage, containment, remediation, recovery, documentation, and post-incident analysis.
Support email security, VPN security, wireless security, cloud security, endpoint protection, certificate management, and secure remote access initiatives.
Assist with security audits, evidence collection, policy development, and compliance initiatives supporting SOC 2, ISO 27001, CIS Controls, NIST Cybersecurity Framework, and similar standards.
Participate in backup validation, disaster recovery testing, business continuity planning, and security preparedness activities.
Recommend and implement improvements that strengthen security through automation, monitoring, standardization, and operational best practices.
Provide Tier 2/3 technical support for Windows and macOS endpoints, including Apple and Dell systems.
Manage employee onboarding and offboarding, device provisioning, imaging, software deployment, hardware lifecycle management, and endpoint configuration.
Administer Iru MDM or comparable endpoint management platforms for macOS and Windows devices.
Configure and support endpoint encryption, security controls, operating system updates, software deployment, and compliance requirements.
Troubleshoot operating systems, applications, networking, VPN, conferencing platforms, printers, peripherals, authentication, and hardware issues.
Develop and maintain desktop deployment standards, support procedures, knowledge base articles, and user documentation.
Deliver responsive, professional, and customer-focused IT support while balancing infrastructure priorities.