Junior System Administrator

asm; Temecula (CA); On-site; USD 48,000 - 62,000; Full time

Benefits offered by this job

Competitive PTO

Medical, dental, and vision coverage

FSA

DCFSA

401(k) with match

Weekly catered lunches

Company parties

Modern technology stack

Job summary

ASM in Temecula, CA is seeking an entry-level IT professional to grow into a systems engineer. You will support a SaaS hosting environment spanning Windows Server, VMware, Azure, and enterprise networking, while learning how a SOC 2 and HIPAA-compliant organization operates daily.

We’re looking for someone curious, careful, and eager to learn, with opportunities to work closely with senior staff and advance through hands-on exposure to security, identity management, and automation.

Qualifications

• 0–2 years of IT support or system administration experience.
• Solid computing fundamentals: operating systems, file systems, and networking.
• Familiarity with Windows Server, Active Directory, and Microsoft Entra ID.
• Some scripting experience (PowerShell).
• Strong attention to detail and documentation habit.
• Strong written and verbal communication skills.

Responsibilities

• Manage user and group access in Microsoft Entra ID and AD.
• Maintain infrastructure: Windows servers, VMware, Azure, Cisco switches, Palo Alto firewalls.
• Investigate issues from monitoring or user reports and escalate when needed.
• Support patch management for Windows, VMware, and network devices.
• Help maintain system hardening standards and SOC 2/HIPAA compliance documentation.
• Assist with audits and security assessments; help clients understand security posture.
• Join maintenance windows and 24/7 on-call rotation after onboarding.

Skills

IT support basics

Computing fundamentals

Windows Server / AD

PowerShell exposure

Documentation mindset

Communication skills

Tools

Azure

VMware vSphere

Group Policy

IIS

NGINX

Job description

No sponsorship offered for this position

No relocation benefits for this position

Pay: $35.00–$45.00/hr

Please note: This role requires in-office work in Temecula, CA, at least 4 days per week, and is not eligible for visa sponsorship or relocation assistance.

About ASM

At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we’ve grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack.

About the role

This is an entry-level role for someone early in their IT career who wants to grow into a well-rounded systems engineer. You’ll work alongside our senior team to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You’ll also learn how a SOC 2 and HIPAA-compliant organization operates day to day.

We don’t expect you to know everything on day one. We’re looking for someone curious, careful, and eager to learn, and we’ll help you get there.

What you’ll do

• Manage user and group access in Microsoft Entra ID (formerly Azure AD) and Active Directory to ensure appropriate access
• Help maintain and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and [Palo Alto] firewalls
• Investigate and troubleshoot issues flagged by our monitoring systems or reported by users, and escalated when needed
• Support patch management for Windows Servers, VMware, and network devices, and help us automate more of it
• Help maintain system hardening standards and the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance
• Assist with audits and security assessments, and occasionally help clients understand our security posture
• Take part in scheduled maintenance windows and, after onboarding, our on-call rotation

What you’ll learn

• Hands-on administration of a production, compliance-driven SaaS environment
• Identity and access management in Microsoft Entra ID, including Conditional Access, MFA, and hybrid identity with on-prem Active Directory
• Azure, VMware, and enterprise networking and firewall management
• Automation with PowerShell
• How SOC 2 and HIPAA audits work from the inside

Schedule and on‑call

During onboarding, you may be in the office up to 5 days per week.

The role includes occasional evening and weekend maintenance work. After you’ve completed onboarding, you’ll join our 24/7 on‑call rotation, which may include on‑call shifts up to several times per week. Time spent handling after‑hours calls is paid at standard overtime rates.

Who thrives here

You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You enjoy digging into problems that don’t have obvious answers. You’re careful without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects.

Required

• 0–2 years of experience in IT support, help desk, or system administration (internships, homelab projects, and coursework count)
• A solid grasp of computing fundamentals, including operating systems, file systems, and networking (TCP/IP, DNS, DHCP, VLANs)
• Familiarity with Windows Server, Active Directory, and Microsoft Entra ID
• Some exposure to PowerShell or another scripting language
• Strong attention to detail and a habit of documenting your work
• Strong written and verbal communication skills

Nice to have

• Experience with Azure, VMware vSphere/vSAN, or Group Policy
• Experience with Microsoft IIS web servers, reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door
• Certifications such as CompTIA A+, Network+, or Security+, or Microsoft AZ‑900, SC‑900, or AZ‑104
• Exposure to a compliance framework such as HIPAA, SOC 2, or HITRUST
• Basic SQL Server knowledge

• Compensation: In accordance with California pay transparency requirements, the anticipated hourly pay range for this position is $35.00 to $45.00 per hour. Actual compensation will be determined based on factors such as experience, skills, and qualifications.
• A competitive PTO structure (non-accrual, granted immediately after the probationary period)
• 100% medical, dental, and vision coverage for all employees
  • Several medical coverage options to choose from (free and at cost)
  • Potential partial coverage for dependents (based on the plan chosen)
• Several supplemental benefit options (hospital confinement, accident insurance, disability, cancer insurance, etc.)
• FSA (Flexible Spending Account)
• DCFSA (Dependent Care Flexible Spending Account)
• 401(k) with employer match
• Weekly catered company lunches (Wednesdays)
• Summer and holiday parties
• A modern, regularly updated technology stack