Senior Systems Administrator

Who You Are

• You’re the engineer who keeps our systems secure, reliable and running smoothly behind the scenes.
• You design things properly the first time, automate anything you do twice, and document everything so others can follow.
• You’re at home in Microsoft 365, identity platforms, MDM, servers and networks, and you can move between Windows, macOS and Linux without missing a beat.

You’ve worked in regulated environments, and you understand that CMMC, ITAR and EAR requirements have to be built into every system from the start. You’re also a strong collaborator: you work closely with the help desk, explain your decisions clearly, and enjoy helping engineers get what they need while keeping our environment compliant.

What You’ll Do

• Administer and secure our Microsoft 365 GCC High tenant, including Exchange, SharePoint, OneDrive, Teams and Entra ID
• Manage identity and access through Okta, including SSO, MFA, conditional access and user lifecycle automation
• Build and maintain device policies in Microsoft Intune and Jamf: configuration profiles, compliance, patching, encryption and app deployment
• Design, deploy and maintain our Ubiquiti and Cisco network infrastructure, including switching, wireless, firewalls and VPN
• Manage Windows, macOS and Linux servers and services, both on-premises and in AWS GovCloud or Azure Government
• Implement and monitor CMMC 2.0 controls, maintain the System Security Plan (SSP) and POA&M, and collect evidence for assessments
• Ensure systems that store or process controlled technical data meet ITAR and EAR requirements
• Own backups, disaster recovery, logging and monitoring, and work with our SIEM to investigate and respond to security events
• Automate routine work with PowerShell, Bash or Python
• Lead migrations and rollouts of new tools, from planning and testing through user communication
• Serve as the escalation point for the help desk, and mentor technicians on complex issues
• Write and maintain system documentation, runbooks, and configuration standards

What We’re Looking for

• 5+ years of experience as a systems administrator or systems engineer
• Hands-on experience administering Microsoft 365 GCC and GCC High
• 3+ years administering Microsoft Intune and Jamf MDM platforms
• Strong Windows and macOS administration experience; Linux experience is a huge plus
• Experience with identity platforms such as Okta and Entra ID, including SSO and MFA
• Experience designing and managing Ubiquiti and Cisco networks
• Experience administering a CMMC 2.0 compliant environment
• Working knowledge of CMMC 2.0, NIST SP 800-171 and ITAR/EAR compliance requirements
• Experience with AWS GovCloud or Azure Government is a strong plus
• Scripting and automation skills in PowerShell, Bash or Python
• Clear communication skills, and an enjoyment of working with others across the company
• 2+ years of experience working in a startup environment
• Ability to work full-time in office, Monday through Friday
• Must be a U.S. citizen

Perks & Benefits

• Comprehensive medical, dental, and vision insurance, including Flexible Spending Accounts (FSA)
• 401(k) program and transparent stock option plan
• Self-managed and flexible time-off policy, including PTO, paid holidays, and sick time
• Flexible work environment

Additional Information

At Astro Mechanica, we highly value in-office work to foster collaboration and strengthen our company culture. We consider working in the office five days a week an essential part of the employee's role.