Senior Systems Administrator

Astro Mechanica • San Francisco, CA

3d • $140,000 - $170,000 • Onsite

About The Position

Astro Mechanica is hiring a Senior Systems Administrator to keep its systems secure, reliable, and operational in support of its aerospace engineering work. The role administers the company's cloud productivity, identity, endpoint management, server, and network infrastructure, and builds security and compliance requirements into systems handling controlled technical data.

The administrator will implement and monitor CMMC 2.0 controls, maintain security documentation and assessment evidence, and help ensure compliance with ITAR and EAR requirements. The role also owns backups, disaster recovery, logging, monitoring, and security-event response; automates routine work; leads technology rollouts and migrations; supports help-desk escalation and technician mentoring; and maintains system documentation and configuration standards.

This is an in-office position, Monday through Friday. Astro Mechanica describes itself as a vertically integrated aerospace company developing technology for critical infrastructure, mission operations, and the future of flight.

Requirements

• At least 5 years of experience as a systems administrator or systems engineer.
• Hands-on experience administering Microsoft 365 GCC and GCC High.
• At least 3 years administering Microsoft Intune and Jamf MDM platforms.
• Strong Windows and macOS administration experience.
• Experience with identity platforms such as Okta and Entra ID, including SSO and MFA.
• Experience designing and managing Ubiquiti and Cisco networks.
• Experience administering a CMMC 2.0-compliant environment.
• Working knowledge of CMMC 2.0, NIST SP 800-171, and ITAR/EAR compliance requirements.
• Scripting and automation skills in PowerShell, Bash, or Python.
• Clear communication skills and an enjoyment of working with others across the company.
• At least 2 years of experience working in a startup environment.
• Ability to work full-time in the office, Monday through Friday.
• Must be a U.S. citizen.

Nice To Haves

• Linux administration experience.
• Experience with AWS GovCloud or Azure Government.

Responsibilities

• Administer and secure the Microsoft 365 GCC High tenant, including Exchange, SharePoint, OneDrive, Teams, and Entra ID.
• Manage identity and access through Okta, including SSO, MFA, conditional access, and user lifecycle automation.
• Build and maintain device policies in Microsoft Intune and Jamf, including configuration profiles, compliance, patching, encryption, and application deployment.
• Design, deploy, and maintain Ubiquiti and Cisco network infrastructure, including switching, wireless, firewalls, and VPN.
• Manage Windows, macOS, and Linux servers and services on-premises and in AWS GovCloud or Azure Government.
• Implement and monitor CMMC 2.0 controls, maintain the System Security Plan (SSP) and POA&M, and collect assessment evidence.
• Ensure systems that store or process controlled technical data meet ITAR and EAR requirements.
• Own backups, disaster recovery, logging, and monitoring, and work with the SIEM to investigate and respond to security events.
• Automate routine work using PowerShell, Bash, or Python.
• Lead migrations and rollouts of new tools, from planning and testing through user communication.
• Serve as the help desk's escalation point and mentor technicians on complex issues.
• Write and maintain system documentation, runbooks, and configuration standards.

Benefits

• Comprehensive medical, dental, and vision insurance, including Flexible Spending Accounts (FSA).
• 401(k) program.
• Transparent stock option plan.
• Self-managed and flexible time-off policy, including PTO, paid holidays, and sick time.
• Flexible work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed