Systems Administrator

Zanskar•Salt Lake City, UT

1d•Hybrid

About The Position

Geothermal energy is the most abundant renewable energy source in the world. There is 2,300 times more energy in geothermal heat in the ground than in oil, gas, coal, and methane combined. However, historically itâ€™s been hard to find and expensive to develop. At Zanskar, weâ€™re using better technology to find and develop new geothermal resources in order to make geothermal a cheap and vital contributor to a carbon-free electrical grid. The IT team keeps our geoscientists, engineers, and operations staff equipped, connected, and secure so they can focus on finding and developing the next generation of geothermal resources. As we grow, the Systems Administrator will take hands-on ownership of the systems our people depend on every day â€” their devices, accounts, network, and cloud tools â€” and help us scale that foundation reliably and securely.

Requirements

Fluency with MDM software for managing a cross-platform (macOS and Windows) device fleet, including enrollment and zero-touch provisioning, configuration profiles, full-disk encryption with key escrow, and silent app deployment.
Comfort administering a cloud identity provider / SSO, including MFA, SAML and SCIM integrations, and joiner/mover/leaver lifecycle workflows.
Ability to stand up and troubleshoot the building blocks of a modern office and remote network, including next-generation firewalls, VLAN segmentation, enterprise wireless, managed PoE switching, and VPN or zero-trust network access for remote and contractor connectivity.
Ability to read logs and packet captures.
Experience administering public cloud (IaaS) resources and a cloud productivity & collaboration suite at an organizational level, including managing users, groups, sharing and permissions, and service configuration.
Understanding of how virtual desktops and SaaS apps fit into a secure, well-governed environment.
Proficiency in a scripting language (e.g., PowerShell, Bash, or Python) for automating routine administration and packaging/deploying software at scale.
Comfort with version control and infrastructure-as-code concepts.
Comfort putting modern AI tools to work and wiring them into business processes.
Good judgment about where automation helps and where a human is needed.
Security-mindedness, with a habit of thinking about backup and recovery, vendor risk, and attack surface.
Ability to keep up with how real incidents actually happen.
Thrive with autonomy and ability to research options, make recommendations, and execute.

Responsibilities

Take day-to-day ownership of endpoint management across macOS and Windows fleet, standardizing enrollment, configuration, and patching through our MDM platform.
Administer user identity and access through our single sign-on / identity provider, including provisioning accounts, enforcing multi-factor authentication, and reasoning about least-privilege access across dozens of SaaS applications.
Triage and resolve issues related to office network and security stack, including firewall policy and VLAN segmentation, enterprise Wi-Fi, managed switching, and zero-trust remote-access.
Propose improvements to the office network and security stack before they become problems.
Partner with the Head of IT on larger initiatives such as provisioning cloud and virtual-desktop resources for technical teams, ensuring critical company data is backed up and recoverable, and hardening the company's security posture.
Own ambiguous problems end to end.