IT Systems Administrator

DK Law - Injury, Accident, and More; Costa Mesa (CA); On-site; USD 72,000 - 88,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid time off

On-site gym

Career development

Job summary

DK Law in Costa Mesa, CA seeks a Systems Administrator to own identity management, endpoints, remote access, and core SaaS systems while building automation workflows to reduce repetitive tasks and boost efficiency.

This hands-on role supports a fast-growing firm, requiring automation-first mindset and a track record of deploying secure, scalable infrastructure. You will work in-house with the recruiting team and contribute to modernizing our IT stack.

Qualifications

• 5+ years of Windows and macOS systems administration.
• Demonstrated experience building automation and improving IT operational processes.
• Hands-on experience with Okta, SSO, MFA, and identity lifecycle management.
• Experience with Rippling or a comparable HRIS/MDM platform.
• Working knowledge of Jamf, Intune, or similar endpoint management technologies.
• Working knowledge of AWS, including IAM, S3, and VPC.
• Experience administering Fortinet or enterprise firewall technologies.
• Proficiency in at least one scripting language such as PowerShell, Bash, or Python.
• Familiarity with Infrastructure as Code technologies such as Terraform or CloudFormation.
• Proven experience consolidating, migrating, or modernizing RMM, EDR/AV, backup, endpoint, or SaaS platforms.
• Strong troubleshooting skills across networking, VoIP, VPN, endpoint security, identity, and SaaS environments.
• Excellent documentation skills with strong attention to configuration, versioning, and change management.
• Experience supporting technology environments through organizational growth and scale.
• Ability to work evenings and weekends when business needs require.
• Exposure to RingCentral EX, AWS Connect, Litify/Salesforce, SentinelOne, or Vanta is highly preferred.
• Apple Business Manager and Automated Device Enrollment experience is preferred.
• Certifications such as CompTIA Security+, Microsoft, Jamf 200/300, or AWS Certified Solutions Architect – Associate are a plus.
• Strong customer‑service mindset and ability to communicate effectively with end users.
• Self‑starter who is comfortable taking ownership and operating in a fast‑moving environment.
• Automation‑first mentality with a natural instinct to identify processes that can be standardized, scripted, or eliminated.

Responsibilities

• Audit and maintain hardware, SaaS tenants, firewall rules, backup jobs, administrative accounts, licensing, monitoring, and patching.
• Document systems, configurations, processes, and infrastructure through clear runbooks and diagrams.
• Harden and maintain Okta, including SSO, MFA, and SCIM integrations, along with Google Workspace and Microsoft 365.
• Build and maintain Rippling-driven joiner, mover, and leaver workflows to automate account creation, licensing, access changes, and deprovisioning.
• Modernize endpoint management by supporting migration from NinjaRMM/Splashtop to a Rippling-based MDM and remote-assistance environment.
• Manage Windows and macOS endpoints, including encryption, EDR/AV, OS patching, application deployment, and security baselines.
• Administer Fortinet firewalls, HP/Aruba switching, DHCP/DNS, and SGN/Todyl VPN environments.
• Monitor and troubleshoot network performance and QoS supporting RingCentral and AWS Connect.
• Coordinate number ports, call-flow changes, and technical troubleshooting with the Telephony team.
• Maintain and improve backup and disaster recovery strategies, including cloud-native backup solutions, 3-2-1 backup policies, and semi-annual restore testing.
• Support the consolidation and migration of Dropbox shares into approved platforms such as OneDrive, S3, or Litify.
• Deploy and maintain endpoint detection, log forwarding, vulnerability scanning, and CIS security benchmarks.
• Partner with Security on SOC 2 readiness and evidence collection.
• Develop PowerShell, Bash, Python, Terraform, GitHub Actions, or similar automation to streamline device enrollment, software deployment, system administration, and repetitive workflows.
• Provide hands‑on Help Desk support and troubleshoot escalated hardware, software, network, endpoint, access, and SaaS issues as needed.
• Partner with Engineering to coordinate infrastructure changes with CI/CD releases and planned change windows.
• Communicate technical issues, risks, changes, and resolutions clearly to both technical and non‑technical stakeholders.
• Maintain accurate technical documentation and contribute to ongoing knowledge transfer across the IT organization.
• Participate in evening or weekend work when necessary for maintenance, migrations, deployments, or critical system issues.
• Role may include other relevant duties as assigned.

Job description

At DK Law, we don’t just represent our clients. We stand with them—all the way. We’re modern injury and accident attorneys who go all the way for every client, from every background. At the heart of our work is a simple but powerful belief: every client’s experience matters, and we honor it as if it were our own. From the very first call to the final resolution, we approach every case with the mindset that it’s going the distance.

That same mindset fuels our workplace culture. We’re a team of purpose-driven professionals who care deeply, move fast, and never lose sight of the human side of what we do. If you're passionate about making an impact, growing with a team that values excellence and empathy, and being part of something bigger, we’d love to meet you.

The Role

DK Law is seeking an experienced Systems Administrator to take ownership of identity management, endpoints, remote access, backups, and core SaaS systems while designing automation workflows that eliminate repetitive tasks and improve operational efficiency.

You will play a key role in helping DK Law continue its transition from a legacy patchwork of tools into a modern, secure, scalable, and unified technology environment.

This is a hands-on role for someone who thrives in a fast-paced environment, enjoys solving complex technical problems, and is equally comfortable maintaining critical infrastructure and building systems from the ground up. The ideal candidate brings an automation-first mindset and understands how to scale technology alongside a rapidly growing organization.

We’re excited to grow our team and are handling all hiring in-house. All updates, contact, or communication should come straight from our internal recruiting team.

Compensation:

Starting at $80,000 annually. The final salary offered will be based on the candidate’s relevant experience, qualifications, skills, and alignment with the position’s requirements.

What You Will Do

• Audit and maintain hardware, SaaS tenants, firewall rules, backup jobs, administrative accounts, licensing, monitoring, and patching.
• Document systems, configurations, processes, and infrastructure through clear runbooks and diagrams.
• Harden and maintain Okta, including SSO, MFA, and SCIM integrations, along with Google Workspace and Microsoft 365.
• Build and maintain Rippling-driven joiner, mover, and leaver workflows to automate account creation, licensing, access changes, and deprovisioning.
• Modernize endpoint management by supporting migration from NinjaRMM/Splashtop to a Rippling-based MDM and remote-assistance environment.
• Manage Windows and macOS endpoints, including encryption, EDR/AV, OS patching, application deployment, and security baselines.
• Administer Fortinet firewalls, HP/Aruba switching, DHCP/DNS, and SGN/Todyl VPN environments.
• Monitor and troubleshoot network performance and QoS supporting RingCentral and AWS Connect.
• Coordinate number ports, call-flow changes, and technical troubleshooting with the Telephony team.
• Maintain and improve backup and disaster recovery strategies, including cloud-native backup solutions, 3-2-1 backup policies, and semi-annual restore testing.
• Support the consolidation and migration of Dropbox shares into approved platforms such as OneDrive, S3, or Litify.
• Deploy and maintain endpoint detection, log forwarding, vulnerability scanning, and CIS security benchmarks.
• Partner with Security on SOC 2 readiness and evidence collection.
• Develop PowerShell, Bash, Python, Terraform, GitHub Actions, or similar automation to streamline device enrollment, software deployment, system administration, and repetitive workflows.
• Provide hands‑on Help Desk support and troubleshoot escalated hardware, software, network, endpoint, access, and SaaS issues as needed.
• Partner with Engineering to coordinate infrastructure changes with CI/CD releases and planned change windows.
• Communicate technical issues, risks, changes, and resolutions clearly to both technical and non‑technical stakeholders.
• Maintain accurate technical documentation and contribute to ongoing knowledge transfer across the IT organization.
• Participate in evening or weekend work when necessary for maintenance, migrations, deployments, or critical system issues.
• Role may include other relevant duties as assigned.

What We’re Looking For

• 5+ years of experience in Windows and macOS systems administration.
• Demonstrated experience building automation and improving IT operational processes.
• Hands‑on experience with Okta, SSO, MFA, and identity lifecycle management.
• Experience with Rippling or a comparable HRIS/MDM platform.
• Working knowledge of Jamf, Intune, or similar endpoint management technologies.
• Working knowledge of AWS, including IAM, S3, and VPC.
• Experience administering Fortinet or comparable enterprise firewall technologies.
• Proficiency in at least one scripting language such as PowerShell, Bash, or Python.
• Familiarity with Infrastructure as Code technologies such as Terraform or CloudFormation.
• Proven experience consolidating, migrating, or modernizing RMM, EDR/AV, backup, endpoint, or SaaS platforms.
• Strong troubleshooting skills across networking, VoIP, VPN, endpoint security, identity, and SaaS environments.
• Excellent documentation skills with strong attention to configuration, versioning, and change management.
• Experience supporting technology environments through organizational growth and scale.
• Ability to work evenings and weekends when business or infrastructure needs require.
• Exposure to RingCentral EX, AWS Connect, Litify/Salesforce, SentinelOne, or Vanta is highly preferred.
• Apple Business Manager and Automated Device Enrollment experience is preferred.
• Certifications such as CompTIA Security+, Microsoft, Jamf 200/300, or AWS Certified Solutions Architect – Associate are a plus.
• Strong customer‑service mindset and ability to communicate effectively with end users.
• Self‑starter who is comfortable taking ownership and operating in a fast‑moving environment.
• Automation‑first mentality with a natural instinct to identify processes that can be standardized, scripted, or eliminated.

Why DK Law?

This is a full-time, in‑office opportunity at our Costa Mesa HQ, and we’re proud to offer top‑tier benefits and a work culture that supports your growth:

• Firm‑paid medical, dental, vision, and life insurance after 60 days
• 401(k) with 3% company match after 1 year
• 2 weeks of PTO after 90 days
• Access to our state‑of‑the‑art on‑site gym
• Career pathing and development opportunities
• A passionate, driven team that actually enjoys working together

Schedule:

• Monday – Friday
• 8-hour shift
• 100% in-office

Evening and weekend availability may occasionally be required to support scheduled maintenance, migrations, deployments, or critical infrastructure needs.

Equal Opportunity Employer Statement:

The Company is an equal opportunity employer and considers all qualified applicants without regard to any characteristic protected under applicable federal, state, and/or local law or ordinance, including, without limitation, race, color, religion, creed, sex, gender, gender identity, gender expression, pregnancy, childbirth, breastfeeding or related medical conditions, marital status, registered domestic partner status, family‑care status, veteran status, military status, age, national origin or ancestry, physical or mental disability, medical condition, genetic information, or sexual orientation.