Senior Systems Administrator

Astro Mechanica CORP.; San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

401(k) program with stock options

Flexible time-off including PTO/holid

Job summary

Astro Mechanica CORP. is seeking an experienced IT security and systems administrator to secure, optimize, and manage our Microsoft 365 GCC High environment, identity platforms, and cross‑platform servers in a startup aerospace setting.

You will design and enforce security controls, automate recurring tasks, and lead migrations while collaborating with help desk and engineering teams. In‑office five days a week in the SF Bay Area, with a strong emphasis on compliance and operational excellence.

Qualifications

• 5+ years of experience as systems administrator or engineer.
• Hands-on experience administering Microsoft 365 GCC and GCC High.
• 3+ years administering Microsoft Intune and Jamf MDM platforms.
• Strong Windows and macOS administration experience; Linux experience is a huge plus.
• Experience with identity platforms such as Okta and Entra ID, including SSO and MFA.
• Experience designing and managing Ubiquiti and Cisco networks.
• Experience administering a CMMC 2.0 compliant environment.
• Working knowledge of CMMC 2.0, NIST SP 800‑171 and ITAR/EAR compliance requirements.
• Experience with AWS GovCloud or Azure Government is a strong plus.
• Scripting and automation skills in PowerShell, Bash or Python.
• Clear communication skills, and an enjoyment of working with others across the company.
• 2+ years of experience working in a startup environment.
• Ability to work full‑time in office, Monday through Friday.
• Must be a U.S. citizen.

Responsibilities

• Administer and secure Microsoft 365 GCC High tenant (Exchange, SharePoint, OneDrive, Teams, Entra ID).
• Manage identity and access through Okta (SSO, MFA, conditional access, automation).
• Build and maintain device policies in Intune and Jamf: profiles, compliance, patching, encryption, app deployment.
• Design, deploy and maintain Ubiquiti and Cisco network infrastructure (switching, wireless, firewalls, VPN).
• Manage Windows, macOS and Linux servers on‑prem and in AWS GovCloud or Azure Government.
• Implement and monitor CMMC 2.0 controls, SSP, POA&M, collect assessment evidence.
• Ensure systems storing controlled data meet ITAR and EAR requirements.
• Own backups, DR, logging and monitoring; work with SIEM to respond to security events.
• Automate routine tasks with PowerShell, Bash or Python.
• Lead migrations and rollouts of new tools; plan, test, communicate with users.
• Serve as escalation point for help desk; mentor technicians on complex issues.
• Write and maintain system documentation, runbooks, and configuration standards.

Skills

5+ years experience in systems admin

Tools

Microsoft 365 GCC High

Intune

Jamf

Okta

Entra ID

PowerShell

Bash

Python

Ubiquiti networks

Cisco networks

Job description

ABOUT US:

Astro Mechanica is a vertically integrated aerospace company developing a scalable technology platform to power critical infrastructure, mission operations, and the future of flight. We apply aerospace engineering and quality standards across our products, delivering high performance, reliability, and efficiency for the most demanding operating environments. Astro Mechanica is backed by leading venture and strategic investors, including Andreessen Horowitz (a16z), Giant Step Capital, United Airlines Ventures, and Voyager Ventures.

WHO WE ARE:

We’re a team of passionate engineers dedicated to advancing aerospace. We’re generalists with specialist depth, united by a flat structure and a shared obsession with building things that work well. We move fast, stay pragmatic, and let engineering excellence speak louder than hierarchy.

WHO YOU ARE:

You’re the engineer who keeps our systems secure, reliable and running smoothly behind the scenes. You design things properly the first time, automate anything you do twice, and document everything so others can follow. You’re at home in Microsoft 365, identity platforms, MDM, servers and networks, and you can move between Windows, macOS and Linux without missing a beat. You’ve worked in regulated environments, and you understand that CMMC, ITAR and EAR requirements have to be built into every system from the start. You’re also a strong collaborator: you work closely with the help desk, explain your decisions clearly, and enjoy helping engineers get what they need while keeping our environment compliant.

WHAT YOU’LL DO:

• Administer and secure our Microsoft 365 GCC High tenant, including Exchange, SharePoint, OneDrive, Teams and Entra ID

• Manage identity and access through Okta, including SSO, MFA, conditional access and user lifecycle automation

• Build and maintain device policies in Microsoft Intune and Jamf: configuration profiles, compliance, patching, encryption and app deployment

• Design, deploy and maintain our Ubiquiti and Cisco network infrastructure, including switching, wireless, firewalls and VPN

• Manage Windows, macOS and Linux servers and services, both on-premises and in AWS GovCloud or Azure Government

• Implement and monitor CMMC 2.0 controls, maintain the System Security Plan (SSP) and POA&M, and collect evidence for assessments

• Ensure systems that store or process controlled technical data meet ITAR and EAR requirements

• Own backups, disaster recovery, logging and monitoring, and work with our SIEM to investigate and respond to security events

• Automate routine work with PowerShell, Bash or Python

• Lead migrations and rollouts of new tools, from planning and testing through user communication

• Serve as the escalation point for the help desk, and mentor technicians on complex issues

• Write and maintain system documentation, runbooks, and configuration standards

WHAT WE’RE LOOKING FOR:

• 5+ years of experience as a systems administrator or systems engineer

• Hands‑on experience administering Microsoft 365 GCC and GCC High

• 3+ years administering Microsoft Intune and Jamf MDM platforms

• Strong Windows and macOS administration experience; Linux experience is a huge plus

• Experience with identity platforms such as Okta and Entra ID, including SSO and MFA

• Experience designing and managing Ubiquiti and Cisco networks

• Experience administering a CMMC 2.0 compliant environment

• Working knowledge of CMMC 2.0, NIST SP 800‑171 and ITAR/EAR compliance requirements

• Experience with AWS GovCloud or Azure Government is a strong plus

• Scripting and automation skills in PowerShell, Bash or Python

• Clear communication skills, and an enjoyment of working with others across the company

• 2+ years of experience working in a startup environment

• Ability to work full‑time in office, Monday through Friday

• Must be a U.S. citizen

PERKS & BENEFITS:

• Comprehensive medical, dental, and vision insurance, including Flexible Spending Accounts (FSA)

• 401(k) program and transparent stock option plan

• Self‑managed and flexible time‑off policy, including PTO, paid holidays, and sick time

ADDITIONAL INFORMATION:

At Astro Mechanica, we highly value in‑office work to foster collaboration and strengthen our company culture. We consider working in the office five days a week an essential part of the employee's role.

Astro Mechanica is an equal opportunity employer. We proudly recruit and hire a diverse workforce and are committed to creating an inclusive environment for all employees.