System Administrator

Were seeking a hands‑on System Administrator to support, maintain, secure, and improve our global IT environment. You will manage identity platforms, cloud services, networking, security solutions, automation, and endpoints-ensuring reliability, strong security posture, and smooth operations across the company.
Youll take ownership of critical systems, implement automation, integrate security and AI tooling, and collaborate with global teams to maintain a modern, scalable, and secure infrastructure.
The day-to-day:
Identity & Access: Administer Okta, Entra ID/Azure AD, and Active Directory-including dynamic, static, and rule‑based groups, Conditional Access, SCIM integrations, provisioning/deprovisioning, and full Joiner-Mover-Leaver lifecycle.
AWS Operations: Manage IT infrastructure and services on AWS-including IAM, VPC architecture (segmentation, routing tables, ingress/egress controls, security groups), EC2 lifecycle (AMIs, autoscaling), S3 (policies, lifecycle, encryption), Route 53(zones and delegations), hybrid connectivity (IPSec Site‑to‑Site VPN), monitoring/alerts, backup strategies, replication, and resilience.
Linux / Endpoint Management: Provide advanced support for Linux, Windows, and macOS systems-performing CLI operations, troubleshooting across multiple distros (Ubuntu/Debian/CentOS/RHEL), service configuration, patch management, and scripting for automation.
Domains & DNS: Manage multiple domains across different registrars, including name server configurations, domain delegation, DNS hygiene, and ensuring reliable routing and availability.
Certificates: Administer SSL/TLS certificates, certificate authorities, renewal processes, and maintain code‑signing certificatesfor secure application and automation signing.
Networking & Security: Operate and troubleshoot IPSec Site‑to‑Site VPNs, BGP routing, VLAN segmentation, Fortinet firewalls, Zscaler security policies, and PAC file routing logic.
Resilience: Own Backups, Disaster Recovery (DR), and Business Continuity (BCP) processes-including documentation, periodic testing, and recovery validation.
Integration & Automation: Manage API keys, secure token handling, and AI MCP connections to integrate third‑party AI services, security systems, and automation tools into IT workflows.