Systems Administrator

Lahlouh•San Leandro, CA

6h•$110,000 - $140,000•Onsite

About The Position

Lahlouh’s business model is built on solving end to end supply chain problems not simply processing transactional print orders. Lahlouh is a partner that focuses on developing collaborative, comprehensive solutions that endeavor to meet all the communication needs of our clients’ dynamic and evolving marketplaces. Lahlouh's mission is to provide the highest quality, most cost-effective business communications solutions available. Core capabilities include: • Sheet-fed offset print • Fulfillment / Distribution logistics • Dynamic digital print • Packaging Design • Mailing • Marketing promotions • Full-service bindery and assembly • Promotions • Online Solutions • Large Format print Position: Systems Administrator Reports to: IT Director FLSA Status: Exempt Department: Information Technology Location: San Leandro, CA — Onsite Required Revised: July 2026 Position Overview Lahlouh is a national print, fulfillment, and marketing services company operating production environments in the San Francisco Bay Area and Blue Ash, OH. The Systems Administrator is a hands-on technical role responsible for maintaining and evolving on-premises and private cloud infrastructure across all sites. This individual is the primary technical resource for server, network, storage, and endpoint operations, and serves as the escalation point for infrastructure issues affecting production. The role operates within a lean IT team and requires the ability to work independently, manage competing priorities, and engage directly with vendors, teammates and executive stakeholders.

Requirements

5+ years of hands-on systems administration experience in a production or multi-site environment, or demonstrated equivalent depth in a complex environment.
Strong working knowledge of Windows Server, Active Directory, Group Policy, DNS, and DHCP.
Hands-on experience with VMware vSphere/ESXi virtualization.
Networking fundamentals: TCP/IP, VLANs, routing, switching, VPN (IPsec/SSL), and firewall administration.
Hands-on experience with SAN/NAS storage management; NetApp preferred.
Microsoft 365 administration: Exchange Online, Teams, Intune, and Entra ID.
Backup and recovery experience; Veeam preferred.
SSL/TLS certificate management across multiple domains.
DNS management across internal and external registrars.
Experience with firewalls, intrusion detection, authentication systems, and security monitoring tools.
Proven ability to work independently in a lean IT team with minimal supervision.
Strong documentation discipline — network diagrams, runbooks, and change records.
Excellent troubleshooting skills across the full stack: hardware, OS, network, and application layers.

Nice To Haves

Experience in a manufacturing, print, or logistics production environment.
Familiarity with print-specific systems (Prinect, PACE, VeraCore, or similar).
Experience supporting SOC 2 compliance, cybersecurity insurance reviews, or audit evidence collection.
Scripting or automation skills (PowerShell, Python, Bash).
Working knowledge of cloud technologies (AWS, Azure, or Google Cloud); AWS experience is a plus.
Experience with private cloud or hosted datacenter environments.
Experience with physical security systems including access control and IP camera infrastructure.
Light IT management or team lead experience — ability to coordinate contractor resources and participate in vendor meetings.
Strong written and verbal communication skills, particularly when engaging with vendors, users, leadership, or cross-functional teams.
Relevant certifications (Microsoft, VMware, CompTIA, Cisco) are a plus.

Responsibilities

Administer and maintain Windows Server environments, Active Directory, DNS, DHCP, and Group Policy across all sites.
Manage VMware vSphere/ESXi virtualization platform including provisioning, patching, capacity planning, and performance monitoring.
Maintain NetApp SAN/NAS storage systems; monitor capacity, perform upgrades, and manage backup integrity.
Oversee Veeam backup and replication jobs; validate recovery procedures and maintain runbooks.
Manage print-environment servers including Prinect, PACE, and associated production systems critical to manufacturing operations.
Administer Microsoft 365 environment including Exchange Online, Teams, Intune endpoint management, and Entra ID.
Manage and maintain end-user systems, imaging, software deployment, and hardware lifecycle across all sites.
Administer SSL/TLS certificate lifecycle across internal and external domains; coordinate renewals and replacements on schedule.
Manage privileged access and secrets management tooling; maintain and audit access controls for sensitive systems.
Manage and monitor network infrastructure across all sites in coordination with managed network provider.
Maintain site-to-site IPsec VPN tunnels connecting offices to private cloud datacenter and between locations; coordinate with network provider on tunnel reliability and failover.
Manage DNS across internal and external registrars; maintain proxy configurations and application dependencies.
Maintain virtual firewall infrastructure hosted in private cloud environment; administer rule sets, VPN configurations, and network segmentation.
Perform networking, wireless, and perimeter security assessments; troubleshoot and resolve connectivity issues across the full stack.
Manage IP addressing, VLANs, and cabling infrastructure across sites.
Maintain network monitoring, analysis, and alerting tools.
Maintain security posture in coordination with managed SOC and MDR providers; respond to alerts and support incident investigation.
Support SOC 2 Type II audit evidence collection including patch compliance, access controls, and configuration documentation.
Administer identity and access management including MFA, SSO, and privileged access controls.
Support cybersecurity insurance questionnaire responses and vendor risk assessments as needed.
Serve as primary technical resource for infrastructure projects including office expansions, network deployments, and hardware refreshes.
Coordinate with third-party vendors and managed service providers on service delivery, escalations, and project work.
Maintain asset inventory, licensing records, and warranty tracking for hardware and software.
Produce and maintain technical documentation including network diagrams, runbooks, and system configuration records.
Provide escalated technical support to end users and help desk staff across all sites.
Provide technical guidance and mentorship to junior IT staff and contractor resources.
Participate in IT planning discussions with the IT Director; contribute to technology roadmap and budget input.