Staff Systems Administrator

Join Shield AI as a Staff Systems Administrator, where you will be the accountable technical owner for enterprise IT infrastructure and end-user computing within a dedicated, security-sensitive entity environment. You will design, implement, operate, secure, and continuously improve on-premises systems, cloud platforms, identity services, networks, and endpoints. This role combines deep infrastructure ownership with hands-on service delivery, and you will work closely with various teams to ensure compliance and security standards are met.

Responsibilities

• Design, implement, operate, secure, and continuously improve on-premises systems, cloud platforms, identity services, networks, and endpoints.
• Translate security and compliance requirements into durable technical controls, maintain audit-ready evidence, drive equipment and endpoint hardening.
• Own and operate on-premises and cloud infrastructure, including physical and virtual servers, storage, backup platforms, identity services, core network services, and enterprise applications.
• Practical experience implementing system and endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, endpoint detection and response, and least-privilege controls

Requirements

• 8 + years of experience in systems administration, infrastructure engineering, enterprise IT operations, or a closely related discipline
• Strong networking knowledge, including TCP/IP, DNS, DHCP, VLANs, routing, VPNs, network segmentation, firewall policy, and secure remote access
• Experience supporting security or compliance programs and producing evidence for audits, assessments, or customer and regulatory requirements
• Demonstrated success independently owning production IT infrastructure and end-user environments in a complex, regulated, segmented, or security-sensitive organization
• Experience with endpoint management platforms such as Intune, Jamf, or equivalent, including compliance policy and device lifecycle management
• Excellent documentation, prioritization, risk communication, and stakeholder-management skills, with the ability to drive outcomes under limited supervision
• Strong hands-on expertise with Windows, macOS, and Linux; server administration and virtualization; Azure and/or AWS; and Active Directory and Entra ID or equivalent identity platforms
• Ability to support time-sensitive operational needs and participate in planned after-hours maintenance or incident response when required
• Experience implementing and testing monitoring, backup, disaster recovery, and business-continuity capabilities
• Familiarity with GitHub, Azure DevOps, CI/CD environments, and secure engineering workflows
• Relevant certifications such as Microsoft, AWS, VMware, Cisco, CompTIA Security+, CISSP, CISM, GIAC, ITIL, or equivalent
• Scripting and automation experience using PowerShell, Bash, Python, APIs, infrastructure as code, or configuration-management tooling
• Experience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems
• Experience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data-loss prevention, certificate management, or network-access control
• Working knowledge of recognized security and compliance frameworks such as CIS Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards

Preferred

• Experience supporting engineering, R&D, aerospace, defense, manufacturing, or other mission-critical technical teams
• Experience supporting a firewalled, ring-fenced, subsidiary, joint-venture, sovereign, or otherwise separately governed entity environment