IT Systems Administrator

Solairus Aviation, Inc.; Petaluma (CA); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Solairus Aviation, Inc. is seeking an IT Network and Infrastructure Security Specialist to oversee the security and resilience of our network, servers, and Microsoft cloud infrastructure.

You will configure, monitor, and maintain enterprise IT systems, including firewalls, identity platforms, and virtualization environments. The role requires hands-on IT infrastructure experience and practical security administration expertise.

Qualifications

• 7+ years of systems administration experience, including at least 3 years in a senior or lead role.
• Strong hands-on experience with Microsoft 365, Entra ID, and Intune in a cloud-first environment.
• Experience with Azure IaaS: VMs, VNets, storage, backup, RBAC.
• Experience with SSO/federation via Okta or similar platform; conditional access design.
• PowerShell scripting for automation and bulk administration.
• Experience managing endpoints with an RMM platform and MDM (Workspace ONE).
• Backup and recovery with Druva or Veeam; restore testing and DR planning.
• Knowledge of EDR tools, firewalls, and email security; support incident response.
• Strong SOP/documentation skills; change records.
• Ability to communicate calmly with executives; willing to on-call after hours.

Responsibilities

• Network administration and troubleshooting of switches, routers, firewalls, VPNs, and wireless systems.
• Administer Windows and Linux servers, virtualization (VMware/Hyper-V), and storage.
• Ensure performance, uptime, and proactive maintenance with monitoring.
• Implement secure baselines, patching, and hardening standards.
• Manage security tools: Okta, MDM, NinjaOne, IDS/IPS, vulnerability scanners.
• Assist SIEM/EDR administration and incident response activities.
• Support risk assessments, audits, and regulatory compliance (NIST, CIS, SOC 2, GDPR, CCPA).
• Collaborate across IT, cloud, and business units for secure design and implementation.
• Document SOPs and change records; maintain incident reports.
• Participate in on-call rotations and coordinate with SOC/MDR partners.

Skills

PowerShell scripting

On-call readiness

Executive communication

Tools

Microsoft 365

Entra ID

Intune

Azure IaaS

VMware

Hyper-V

Okta

Workspace ONE

NinjaOne

Druva

Veeam

CrowdStrike

Secret Server

Purview/Sentinel

Job description

The IT Network and Infrastructure Security Specialist is responsible for the administration, security, and resilience of the organization’s network, server, and Microsoft cloud infrastructure. This role ensures secure configuration, monitoring, and maintenance of enterprise IT systems, including firewalls, switches, wireless networks, identity platforms, physical and virtual servers, and cloud environments.

The specialist works closely with IT, infrastructure, and security teams to safeguard systems against threats, maintain high availability, and support security initiatives across the organization. This position requires strong hands-on experience in IT infrastructure administration as well as practical security administration expertise.

This position follows a hybrid schedule, with four days per week in the office and one day working from home.

The IT Network and Infrastructure Security Specialist is responsible for the administration, security, and resilience of the organization’s network, server, and Microsoft cloud infrastructure. This role ensures secure configuration, monitoring, and maintenance of enterprise IT systems, including firewalls, switches, wireless networks, identity platforms, physical and virtual servers, and cloud environments.

The specialist works closely with IT, infrastructure, and security teams to safeguard systems against threats, maintain high availability, and support security initiatives across the organization. This position requires strong hands-on experience in IT infrastructure administration as well as practical security administration expertise.

This position follows a hybrid schedule, with four days per week in the office and one day working from home.

Network and Infrastructure Administration

• Manage, maintain, and troubleshoot network infrastructure, including switches, routers, firewalls, VPN appliances, and wireless systems.
• Administer Windows and Linux servers, virtualization platforms (VMware / Hyper-V), and enterprise storage solutions.
• Ensure network performance, availability, and uptime through proactive monitoring and maintenance.
• Implement and maintain secure configurations, patching, hardening standards, and baseline system builds.

Security Administration

• Manage and monitor security tools, including Identity Management (OKTA), Mobile Device Management (MDM), Remote Monitoring and Management (NinjaOne), firewalls, IDS/IPS, vulnerability scanners, and identity security platforms.
• Assist Security Analysis with SIEM and EDR administration support.
• Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
• Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
• Ensure network segmentation, zero-trust controls, and secure access principles are implemented across environments.

Incident Management and Response

• Participate in incident response activities, supporting containment, remediation, and recovery actions.
• Help investigate security alerts, perform triage, and support containment, eradication, and recovery activities.
• Conduct root-cause analysis and contribute to strengthening security controls to reduce recurrence.
• Maintain incident documentation, reporting, and continuous improvement of response processes.
• Collaborate with third-party security partners (SOC/MDR) on detection and mitigation activities.

Risk Management and Compliance

• Support risk assessments across network, server, cloud, and identity systems.
• Document, track, and support remediation of risks and vulnerabilities across infrastructure assets. Assist with IT and security policy enforcement, compliance audits, and regulatory alignment (NIST, CIS, SOC 2, GDPR, CCPA).
• Participate in building and maintaining security roadmaps and improvement plans.

Collaboration and Operational Support

• Work with IT, cloud, infrastructure, and business units to ensure secure design and implementation of systems.
• Provide reporting on infrastructure health, security posture, patch status, and risk findings.
• Support security awareness initiatives and ensure proper security practices are followed throughout the organization.

Identity and Privileged Account Management

• Administer identity and privileged account management using Okta, including lifecycle management, MFA enforcement, role-based access, and privileged identity controls.
• Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
• Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
• Ensure network segmentation, zero-trust controls, and secure access principles are implemented across environments.

Required Qualifications

• 7+ years of systems administration experience, including at least 3 years in a senior or lead role.
• Strong hands-on experience administering Microsoft 365, Entra ID, and Intune in a cloud-first environment.
• Working experience with Azure infrastructure as a service (IaaS), including virtual machines, virtual networks, storage, backup, and role-based access control (RBAC).
• Experience with single sign-on (SSO), federation through Okta or a similar platform, and conditional access design.
• Strong PowerShell scripting skills for automation and bulk administration.
• Experience managing endpoints through a remote monitoring and management (RMM) platform, administering mobile devices through an enterprise mobile device management (MDM) platform such as Workspace ONE, and maintaining a structured patch management program.
• Hands-on experience administering enterprise backup and recovery platforms such as Druva or Veeam, including restore testing and disaster recovery planning.
• Working knowledge of endpoint detection and response (EDR) tools, firewalls, and email security, with the ability to support incident response.
• Strong technical documentation skills, including the ability to create clear standard operating procedures (SOPs) and change records that others can follow.
• Ability to communicate calmly, professionally, and discreetly with executives and high-profile clients.
• Willingness to participate in an on-call rotation and respond after hours as needed.

Preferred Qualifications

• Microsoft certifications such as MS-102 (Microsoft 365 Administrator), AZ-104 (Azure Administrator), or SC-300 (Identity and Access Administrator).
• Okta Certified Administrator or an equivalent identity platform certification.
• VMware/Omnissa Workspace ONE certification or an equivalent MDM credential.
• Veeam Certified Engineer (VMCE) or an equivalent backup and recovery certification.
• A security certification such as CompTIA Security+ or SSCP.
• Hands-on experience with Workspace ONE MDM, Druva, Veeam, CrowdStrike Falcon, Delinea Secret Server, or NinjaOne.
• Exposure to Microsoft Purview, Microsoft Sentinel, or Azure Front Door/Web Application Firewall (WAF).
• Experience in aviation, financial services, or another regulated industry with strict privacy requirements.
• Familiarity with ITIL practices, change advisory processes, and audit evidence collection.