Note: The job is a remote job and is open to candidates in USA. Empyreal Logistics is hiring an IT Systems Administrator to administer and support its hybrid, cloud-first infrastructure. The role manages identity and access, productivity platforms, public cloud resources, endpoints, security operations, patching, monitoring, and IT service requests while maintaining secure, reliable, audit-ready systems.
Responsibilities
- Administer user, group, and guest accounts in the cloud identity provider following least-privilege standards
- Support multi-factor authentication (MFA), self-service password reset, and conditional access policies; troubleshoot sign-in and access issues
- Configure single sign-on (SAML/OIDC) and SCIM provisioning for SaaS applications under the direction of senior staff
- Execute joiner/mover/leaver processes, including timely access removal at separation and the company's post-separation account retention schedule, with Legal Hold exceptions
- Assist with periodic access reviews and gather audit evidence
- Administer the cloud email, file storage, document collaboration, and team messaging platforms: mailboxes, shared resources, distribution lists, sharing settings, and user support
- Assign and reclaim licenses
- Monitor vendor service health and communicate user-impacting issues
- Apply retention policies and sensitivity labels as defined by senior staff
- Assist with eDiscovery and Legal Hold requests from Legal and HR, following documented chain-of-custody procedures
- Run audit log searches in support of investigations and compliance reviews
- Deploy and maintain cloud virtual machines, storage, and networking using approved standards and templates
- Monitor cloud backup jobs and perform test restores on a scheduled basis
- Track certificate and secret expirations and complete renewals
- Report cloud resource usage and cost anomalies to senior staff
- Enroll, provision, and manage company computers and mobile devices through unified endpoint management (UEM/MDM) platforms
- Deploy applications and configuration profiles; maintain device compliance and full-disk encryption
- Perform remote lock/wipe for lost, stolen, or retired devices
- Set up, configure, and troubleshoot Windows and macOS workstations, laptops, mobile devices, and peripherals
- Administer endpoint protection (EDR) for workstations and servers: deploy agents, apply policies, and triage and remediate alerts
- Maintain firewall rules, VPN access, and web filtering according to approved change requests
- Review identity threat detection and response (ITDR) and AI security control alerts and remediate or escalate findings
- Onboard log sources to the SIEM and triage alerts with the IT Security Analyst
- Administer the email security platform: quarantine review and release, allow/block lists, and phishing report handling
- Perform daily information security checks and document results
- Support the IT Security Analyst during incident response by collecting evidence and implementing containment steps
- Run and schedule vulnerability scans; review findings and remediate assigned vulnerabilities within defined SLAs
- Manage OS and third-party application patching on Windows, macOS, and Linux through the automated patch management platform; resolve failed deployments
- Verify remediation through rescanning and record evidence for SOC 2 audits
- Provision and deprovision users on the enterprise AI platform and manage seat assignments
- Support staff with approved AI tools and escalate data-handling or policy questions
- Respond to alerts from the infrastructure monitoring platform; deploy monitoring agents and maintain dashboards
- Work IT tickets in the IT service management (ITSM) platform: triage, prioritize, and resolve requests and incidents within defined service levels; document resolutions and escalate as needed
- Participate in on-call rotation as scheduled
- Participate in the team's hybrid agile process, including daily stand-ups, sprint planning, and retrospectives
- Administer Windows and Linux servers (on-premises and cloud) and virtualization: builds, updates, and troubleshooting
- Maintain wireless access points and managed switches: SSIDs, VLANs, port configuration, and firmware updates
- Support load balancing systems for company applications
- Monitor backup jobs, perform restores, and participate in disaster recovery tests
- Troubleshoot and resolve hardware, software, network, and system problems, escalating complex issues to senior staff
- Follow the change management process, including documentation and rollback plans
- Conduct testing across enterprise platforms to confirm system stability before and after changes
- Maintain a proactive rather than reactive approach to systems, network, and application management
- Maintain runbooks, network diagrams, and system documentation
- Write and maintain scripts to automate routine administration tasks
- Interact with external IT resources, including clients, vendors, and third parties, as needed
- Perform special projects and other duties as assigned
Skills
- 5-7 years of professional systems administration experience after college (or equivalent), in a cloud or hybrid environment
- Hands-on experience administering a cloud identity provider and cloud productivity suite, including MFA and access management
- Experience with unified endpoint management / mobile device management (UEM/MDM)
- Experience with endpoint protection (EDR), firewalls, and email security platforms
- Exposure to SIEM, vulnerability scanning, and automated patch management platforms
- Experience with public cloud (IaaS) virtual machines, storage, and networking
- Experience with IT service management (ITSM) / ticketing platforms
- Working knowledge of Windows and Linux servers, virtualization, and networking (LAN/WAN, VPN, wireless, firewalls, switches, VLANs)
- Knowledge of network security concepts, including IDS/IPS and WAF
- Knowledge of application transport and network infrastructure protocols
- Proficient in setting up, configuring, and troubleshooting Windows PCs and servers
- Scripting experience (e.g., PowerShell, Bash, or Python)
- Ability to produce clear documentation and network diagrams
- Ability to explain technical information clearly to non-technical staff, vendors, and clients
- Self-starter who works well independently and on a team; dependable, flexible, and able to learn new technology quickly
- Bachelor's degree in a technology-related field, or equivalent experience
- 5-7 years administering production systems in a cross-platform environment
- Linux administration experience a plus
- Container and container-orchestration experience preferred: deploying and troubleshooting workloads, cluster upgrades, and networking
- Familiarity with SOC 2 or similar compliance frameworks a plus
- Industry certifications preferred in one or more of: cloud administration, endpoint management, networking, security (e.g., CompTIA A+, Network+, or Security+), container orchestration, or Linux administration
Benefits
- Remote work
Company Overview