Youll take ownership of critical systems, implement automation, integrate security and AI tooling, and collaborate with global teams to maintain a modern, scalable, and secure infrastructure.
The day-to-day:
Identity & Access: Administer Okta, Entra ID/Azure AD, and Active Directory-including dynamic, static, and rule‑based groups, Conditional Access, SCIM integrations, provisioning/deprovisioning, and full Joiner-Mover-Leaver lifecycle.
AWS Operations: Manage IT infrastructure and services on AWS-including IAM, VPC architecture (segmentation, routing tables, ingress/egress controls, security groups), EC2 lifecycle (AMIs, autoscaling), S3 (policies, lifecycle, encryption), Route 53(zones and delegations), hybrid connectivity (IPSec Site‑to‑Site VPN), monitoring/alerts, backup strategies, replication, and resilience.
Linux / Endpoint Management: Provide advanced support for Linux, Windows, and macOS systems-performing CLI operations, troubleshooting across multiple distros (Ubuntu/Debian/CentOS/RHEL), service configuration, patch management, and scripting for automation.
Domains & DNS: Manage multiple domains across different registrars, including name server configurations, domain delegation, DNS hygiene, and ensuring reliable routing and availability.
Certificates: Administer SSL/TLS certificates, certificate authorities, renewal processes, and maintain code‑signing certificatesfor secure application and automation signing.
Networking & Security: Operate and troubleshoot IPSec Site‑to‑Site VPNs, BGP routing, VLAN segmentation, Fortinet firewalls, Zscaler security policies, and PAC file routing logic.
Resilience: Own Backups, Disaster Recovery (DR), and Business Continuity (BCP) processes-including documentation, periodic testing, and recovery validation.
Integration & Automation: Manage API keys, secure token handling, and AI MCP connections to integrate third‑party AI services, security systems, and automation tools into IT workflows.
3-4 years of experience as a System Administrator in enterprise, cloud‑based, or multi‑site environments.
Strong expertise with AWS services (IAM, VPC, routing, ingress/egress, EC2 lifecycle, S3, Route 53, and security controls).
Solid identity and security knowledge: Okta, Entra ID, Active Directory, Zscaler, RADIUS/NPS, and multi‑tenant Microsoft 365 (including Teams + SBC/Direct Routing).
Proven experience handling Backups/DR/BCP, DNS/domain management, SSL/TLS, and certificate lifecycle management.
Strong troubleshooting skills across identity, networking, cloud platforms, Linux/Windows/macOS, security controls, and endpoints.
