IT Systems Administrator

Empyreal Logistics; Englewood (CO); Hybrid; USD 98,000 - 128,000; Full time

Job summary

Empyreal Logistics is seeking an experienced IT Systems Administrator to support our hybrid, cloud-first environment. The role collaborates with the CTO, Senior Systems Administrator, and IT Security Analyst to manage identity and access, cloud productivity tools, endpoints, security tooling, and IT service requests.

You will monitor systems, automate routine tasks, ensure audit readiness, and maintain documentation.

Qualifications

• 5-7 years of professional systems administration experience.
• Experience with cloud identity providers and MFA
• Experience with UEM/MDM, EDR, and security tooling
• Familiarity with SIEM, vulnerability scanning, and patch management
• Strong documentation and troubleshooting skills

Responsibilities

• Administer cloud identity, MFA, and access policies.
• Manage cloud productivity platforms and email, file storage, and collaboration tools.
• Maintain endpoints, MS Windows/macOS workstations, and device policy compliance.
• Monitor security tools, run vulnerability scans, and apply patches within SLAs.
• Triage IT tickets and participate in on-call rotation.

Skills

Cloud administration

Identity & Access Management

Endpoint management

SIEM / vulnerability scanning

ITSM / ticketing

Scripting (PowerShell/Bash/Python)

Education

Bachelor's degree in technology or equivalent

Tools

Cloud identity provider

SAML/OIDC

SCIM provisioning

EDR / endpoint protection

ITSM platforms

PowerShell/Bash/Python scripting

Job description

Position Summary

IT Systems Administrator

The IT Systems Administrator will be reporting to the Chief Technology Officer

Position Summary:

The Systems Administrator administers and supports Empyreal Logistics' hybrid, cloud-first infrastructure, including cloud, virtual, server, network, load balancing, and security systems. Working with the Senior Systems Administrator and the IT Security Analyst, the role handles day-to-day administration of identity and access, cloud productivity platforms, public cloud resources, endpoints and mobile devices, security tools, vulnerability scanning and patching, systems monitoring, and IT service requests. The role resolves system-level issues, escalates complex problems, keeps systems secure and audit-ready, and automates routine tasks. It requires strong relationships with management and staff, solid troubleshooting and documentation skills, and a focus on reliable, high-quality service to internal users and clients.

Major responsibilities are as follows:

Identity & Access Management

• Administer user, group, and guest accounts in the cloud identity provider following least-privilege standards.
• Support multi-factor authentication (MFA), self-service password reset, and conditional access policies; troubleshoot sign-in and access issues.
• Configure single sign-on (SAML/OIDC) and SCIM provisioning for SaaS applications under the direction of senior staff.
• Execute joiner/mover/leaver processes, including timely access removal at separation and the company's post-separation account retention schedule, with Legal Hold exceptions.
• Assist with periodic access reviews and gather audit evidence.

Productivity & Collaboration Platform Administration

• Administer the cloud email, file storage, document collaboration, and team messaging platforms: mailboxes, shared resources, distribution lists, sharing settings, and user support.
• Assign and reclaim licenses.
• Monitor vendor service health and communicate user-impacting issues.

Data Governance & Compliance

• Apply retention policies and sensitivity labels as defined by senior staff.
• Assist with eDiscovery and Legal Hold requests from Legal and HR, following documented chain-of-custody procedures.
• Run audit log searches in support of investigations and compliance reviews.

Public Cloud (IaaS) Administration

• Deploy and maintain cloud virtual machines, storage, and networking using approved standards and templates.
• Monitor cloud backup jobs and perform test restores on a scheduled basis.
• Track certificate and secret expirations and complete renewals.
• Report cloud resource usage and cost anomalies to senior staff.

Endpoint & Mobile Device Management

• Enroll, provision, and manage company computers and mobile devices through unified endpoint management (UEM/MDM) platforms.
• Deploy applications and configuration profiles; maintain device compliance and full-disk encryption.
• Perform remote lock/wipe for lost, stolen, or retired devices.
• Set up, configure, and troubleshoot Windows and macOS workstations, laptops, mobile devices, and peripherals.

Security Operations

• Administer endpoint protection (EDR) for workstations and servers: deploy agents, apply policies, and triage and remediate alerts.
• Maintain firewall rules, VPN access, and web filtering according to approved change requests.
• Review identity threat detection and response (ITDR) and AI security control alerts and remediate or upscale findings.
• Onboard log sources to the SIEM and triage alerts with the IT Security Analyst.
• Administer the email security platform: quarantine review and release, allow/block lists, and phishing report handling.
• Perform daily information security checks and document results.
• Support the IT Security Analyst during incident response by collecting evidence and implementing containment steps.

Vulnerability & Patch Management

• Run and schedule vulnerability scans; review findings and remediate assigned vulnerabilities within defined SLAs.
• Manage OS and third-part application patching on Windows, macOS, and Linux through the automated patch management platform; resolve failed deployments.
• Verify remediation through rescanning and record evidence for SOC 2 audits.

AI Platform Administration

• Provision and deprovision users on the enterprise AI platform and manage seat assignments.
• Support staff with approved AI tools and elevate data-handling or policy questions.

Monitoring, Operations & IT Service Management

• Respond to alerts from the infrastructure monitoring platform; deploy monitoring agents and maintain dashboards.
• Work IT tickets in the IT service management (ITSM) platform: triage, prioritize, and resolve requests and incidents within defined service levels; document resolutions and upscale as needed.
• Participate in on-call rotation as scheduled.
• Participate in the team's hybrid agile process, including daily stand-ups, sprint planning, and retrospectives.

Infrastructure, Network, Backup & DR

• Administer Windows and Linux servers (on-premises and cloud) and virtualization: builds, updates, and troubleshooting.
• Maintain wireless access points and managed switches: SSIDs, VLANs, port configuration, and firmware updates.
• Support load balancing systems for company applications.
• Monitor backup jobs, perform restores, and participate in disaster recovery tests.
• Troubleshoot and resolve hardware, software, network, and system problems, escalating complex issues to senior staff.
• Follow the change management process, including documentation and rollback plans.
• Conduct testing across enterprise platforms to confirm system stability before and after changes.
• Maintain a proactive rather than reactive approach to systems, network, and application management.

Documentation & Automation

• Maintain runbooks, network diagrams, and system documentation.
• Write and maintain scripts to automate routine administration tasks.
• Interact with external IT resources, including clients, vendors, and third parties, as needed.
• Perform special projects and other duties as assigned.

Requirements:

• 5-7 years of professional systems administration experience after college (or equivalent), in a cloud or hybrid environment.
• Hands-on experience administering a cloud identity provider and cloud productivity suite, including MFA and access management.
• Experience with unified endpoint management / mobile device management (UEM/MDM).
• Experience with endpoint protection (EDR), firewalls, and email security platforms.
• Exposure to SIEM, vulnerability scanning, and automated patch management platforms.
• Experience with public cloud (IaaS) virtual machines, storage, and networking.
• Experience with IT service management (ITSM) / ticketing platforms.
• Working knowledge of Windows and Linux servers, virtualization, and networking (LAN/WAN, VPN, wireless, firewalls, switches, VLANs).
• Knowledge of network security concepts, including IDS/IPS and WAF.
• Knowledge of application transport and network infrastructure protocols.
• Proficient in setting up, configuring, and troubleshooting Windows PCs and servers.
• Scripting experience (e.g., PowerShell, Bash, or Python).
• Linux administration experience a plus.
• Container and container-orchestration experience preferred: deploying and troubleshooting workloads, cluster upgrades, and networking.
• Familiarity with SOC 2 or similar compliance frameworks a plus.
• Ability to produce clear documentation and network diagrams.
• Ability to explain technical information clearly to non-technical staff, vendors, and clients.
• Self-starter who works well independently and on a team; dependable, flexible, and able to learn new technology quickly.

Education and Certification:

• Bachelor's degree in a technology-related field, or equivalent experience.
• Industry certifications preferred in one or more of: cloud administration, endpoint management, networking, security (e.g., CompTIA A+, Network+, or Security+), container orchestration, or Linux administration.
• 5-7 years administering production systems in a cross-platform environment.

Physical Requirements:

• Sitting for prolonged periods.
• Must be able to lift up to 50 pounds, as needed.
• Moving about to accomplish tasks.
• Reaching overhead, and at or below shoulder level.
• Repeating motions, which includes the wrist, hands, and/or fingers.
• Near and far visual acuity.

Empyreal Logistics Culture:

• Acts in a manner that portrays Empyreal's vision, values, and WOW culture.
• Establishes respect for everyone, fosters an environment that builds and sustains productive relationships.
• Addresses conflict respectfully and constructively.
• Works in partnership within and across workgroups.
• Represents Empyreal as a transportation and customer service professional.
• Places value not only on what work gets done, but also how it gets done.

Empyreal Logistics participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.