System Administrator

This is us

Kaltura’s (NYSE:KLTR) mission is to power any video experience for any organization – live, on-demand, or real-time. We not only want to make using video simpler, but we also want to better people’s lives through video. Founded in 2006, Kaltura is now a global leader in the video market with millions of people using our products daily to teach, learn, watch, connect, and collaborate. Among our customers, you’ll find more than 1000 global, well-known organizations.

15+ years since starting the company, we continue to foster a diverse and collaborative work environment where everyone gets a say. Our team is currently 700+ people, and we’re still growing. We have offices in New York, London, Singapore, and Tel Aviv, but our technology is all in the cloud.

Kaltura has a fast-paced environment where initiative is always encouraged. Together with our hybrid work model and flexible state of mind, you get the right conditions for creative juices to flow freely. Thanks to our long line of products, cultivation of rich collaborative culture and care for each Kalturian, you’ll never run out of room to grow and evolve.

If you don't meet 100% of the requirements below - that's okay, nobody's perfect! We believe in hiring people, not just a list of skills. We encourage you to apply if you think this is a role that would make you excited about coming to work every day.

Requirements:

The role:

We’re seeking a hands‑on System Administrator to support, maintain, secure, and improve our global IT environment. You will manage identity platforms, cloud services, networking, security solutions, automation, and endpoints—ensuring reliability, strong security posture, and smooth operations across the company.

You’ll take ownership of critical systems, implement automation, integrate security and AI tooling, and collaborate with global teams to maintain a modern, scalable, and secure infrastructure.

The day-to-day:

Identity & Access: Administer Okta, Entra ID/Azure AD, and Active Directory—including dynamic, static, and rule‑based groups, Conditional Access, SCIM integrations, provisioning/deprovisioning, and full Joiner–Mover–Leaver lifecycle.
AWS Operations: Manage IT infrastructure and services on AWS—including IAM, VPC architecture (segmentation, routing tables, ingress/egress controls, security groups), EC2 lifecycle (AMIs, autoscaling), S3 (policies, lifecycle, encryption), Route 53(zones and delegations), hybrid connectivity (IPSec Site‑to‑Site VPN), monitoring/alerts, backup strategies, replication, and resilience.
Linux / Endpoint Management: Provide advanced support for Linux, Windows, and macOS systems—performing CLI operations, troubleshooting across multiple distros (Ubuntu/Debian/CentOS/RHEL), service configuration, patch management, and scripting for automation.
Domains & DNS: Manage multiple domains across different registrars, including name server configurations, domain delegation, DNS hygiene, and ensuring reliable routing and availability.
Certificates: Administer SSL/TLS certificates, certificate authorities, renewal processes, and maintain code‑signing certificatesfor secure application and automation signing.
Networking & Security: Operate and troubleshoot IPSec Site‑to‑Site VPNs, BGP routing, VLAN segmentation, Fortinet firewalls, Zscaler security policies, and PAC file routing logic.
Resilience: Own Backups, Disaster Recovery (DR), and Business Continuity (BCP) processes—including documentation, periodic testing, and recovery validation.
Integration & Automation: Manage API keys, secure token handling, and AI MCP connections to integrate third‑party AI services, security systems, and automation tools into IT workflows.

Ideally, we’re looking for:

3–4 years of experience as a System Administrator in enterprise, cloud‑based, or multi‑site environments.
Strong expertise with AWS services (IAM, VPC, routing, ingress/egress, EC2 lifecycle, S3, Route 53, and security controls).
Solid identity and security knowledge: Okta, Entra ID, Active Directory, Zscaler, RADIUS/NPS, and multi‑tenant Microsoft 365 (including Teams + SBC/Direct Routing).
Proven experience handling Backups/DR/BCP, DNS/domain management, SSL/TLS, and certificate lifecycle management.
Strong troubleshooting skills across identity, networking, cloud platforms, Linux/Windows/macOS, security controls, and endpoints.

These would also be nice:

Experience integrating or automating security workflows (SIEM/EDR/SOAR, identity governance) using APIs and scripting.
Ability to produce high‑quality documentation: runbooks, knowledge articles, process documentation, architecture diagrams.
Familiarity with Terraform/IaC or other automation frameworks for cloud or infrastructure deployment.

The perks:

Hybrid, flexible work environment
Extended private health (including mental) insurance
Personal and professional development programs
Occasional Cross company long weekends