Senior Systems and Security Administrator

Kiss Beauty Group; Port Washington (NY); Hybrid; USD 91,000 - 172,000; Full time

Benefits offered by this job

Premium Medical Insurance Coverage

401(k) Savings Plan

PTO based on seniority

Paid Holidays

Annual Bonus Plan

Onsite Fitness Center

Job summary

Kiss Nail Products, Inc. is seeking a Senior Systems & Security Administrator to manage and secure a hybrid IT environment, spanning Windows Server, Linux/Ubuntu, AWS, Azure, and Odoo applications.

You will handle identity, access, patching, backups, monitoring, and incident response while applying least‑privilege security practices. You will provide Tier 2/3 support, collaborate with IT teams and vendors, and drive automation and documentation to improve reliability and security across

Qualifications

• Bachelor's degree in IT, computer science, cybersecurity, or related field, or equivalent practical experience.
• At least 8 years hands‑on enterprise IT operations experience.
• 4+ years AWS administration in an enterprise environment.
• 4+ years Active Directory and Microsoft Entra ID experience.
• 2+ years Exchange Online administration experience including mailboxes and licensing.
• Experience supporting hybrid AD with Entra ID.

Responsibilities

• Administer Windows Server environments (AD, DNS, DHCP, Group Policy, file services).
• Administer Linux/Ubuntu servers, including users, services, patching, monitoring.
• Perform server provisioning, upgrades, patching, backup validation, and documentation.
• Monitor availability, capacity, performance, and backups; address issues.
• Manage AWS environments (compute, networking, identity, security groups).
• Support Azure VMs, identity services, networking, monitoring, and security controls.
• Maintain least-privilege access and cloud security configurations.
• Support Odoo environments (Linux hosting, PostgreSQL, backups).
• Collaborate with developers/stakeholders on deployments and access requests.
• Participate in cloud migration, automation, and infrastructure improvements.

Skills

Troubleshooting

Security best practices

Technical documentation

Hybrid environment experience

Automation scripting

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

AWS

Active Directory

Microsoft Entra ID

Exchange Online

Azure

Odoo

Job description

Job Description Summary

The Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications.

Job Description Summary

The Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications.

This role manages system and cloud operations, identity and access, system maintenance, patching, monitoring, backup and recovery, vulnerability remediation, Tier 2/3 support, automation, and technical documentation. The administrator independently troubleshoots complex infrastructure issues and applies least-privilege and security best practices.

Job Description

Key Responsibilities

Systems and Infrastructure Administration

• Administer Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, file services, patching, and system lifecycle activities.
• Administer Linux and Ubuntu servers, including users and permissions, services, patching, performance monitoring, log analysis, and troubleshooting.
• Perform server provisioning, configuration, upgrades, patching, backup validation, recovery testing, and documentation.
• Monitor system availability, capacity, performance, and backup status, and proactively address issues.

Identity, Microsoft 365, and Messaging

• Administer Active Directory, Microsoft Entra ID, and Microsoft 365 identity services.
• Manage the full user lifecycle, including account provisioning, access changes, group membership, license assignment, and offboarding.
• Support hybrid identity environments, including directory synchronization and synchronization troubleshooting.
• Administer Exchange Online, including user and shared mailboxes, distribution and security groups, mailbox permissions, licensing, and mail flow.
• Manage Conditional Access, multifactor authentication, enterprise applications, single sign-on, role-based access, and privileged access.
• Conduct periodic reviews of user accounts, group memberships, licenses, and access permissions.

Cloud and Business Application Operations

• Administer AWS environments, including compute, networking, identity and access, security groups, DNS, load balancing, storage, monitoring, and database services.
• Support Azure virtual machines, identity services, networking, storage, monitoring, and security controls.
• Maintain least-privilege access, cloud identity controls, firewall rules, security configurations, and monitoring.
• Support Odoo environments, including Linux hosting, PostgreSQL connectivity, application availability, logs, backups, and troubleshooting.
• Collaborate with Odoo developers and business stakeholders on deployments, integrations, scheduled jobs, performance issues, and access requests.
• Participate in cloud migration, modernization, automation, and infrastructure improvement initiatives.

Security and Maintenance

• Maintain Windows, Linux/Ubuntu, cloud, and business application environments according to established security standards and operating procedures.
• Perform operating system, application, and security patching, coordinate maintenance windows, and validate system health after changes.
• Apply secure configuration standards and maintain appropriate administrative and least-privilege access.
• Review system, application, and cloud logs for operational issues, unauthorized access, or abnormal activity, and elevate findings when needed.
• Support vulnerability remediation through patching, configuration changes, and coordination with internal teams and vendors.
• Maintain system documentation, asset inventories, access and backup records, and technical procedures.

Support and Collaboration

• Provide Tier 2/3 support for infrastructure, cloud, identity, messaging, and Odoo platform issues.
• Collaborate with IT teams, business stakeholders, developers, vendors, and managed security service providers.
• Participate in scheduled maintenance and occasional after-hours or on-call support.
• Improve reliability, security, and operational efficiency through scripting and automation.

Qualifications

Required

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• At least 8 years of hands‑on experience in enterprise IT operations, systems administration, infrastructure operations, or a similar role.
• Strong hands‑on experience with enterprise Windows Server and Linux/Ubuntu environments.
• At least 4 years of hands‑on experience administering AWS environments in an enterprise setting.
• At least 4 years of hands‑on experience administering Active Directory and Microsoft Entra ID.
• At least 2 years of hands‑on Exchange Online administration experience, including mailboxes, shared mailboxes, groups, permissions, licensing, and mail flow.
• Experience supporting hybrid environments that connect on‑premises Active Directory with Microsoft Entra ID.
• Working knowledge of Azure administration and cloud security controls.
• Understanding of Odoo architecture and operations, including application services, PostgreSQL, Linux hosting, logs, backups, and common troubleshooting methods.
• Strong troubleshooting skills across servers, authentication, email, cloud services, and business applications.
• Ability to create clear technical documentation and communicate with both technical and non‑technical stakeholders.

Preferred

• Experience supporting Odoo in an enterprise environment, including deployments, PostgreSQL backup and restore, performance troubleshooting, integrations, and scheduled jobs.
• Experience with additional AWS services for load balancing, DNS, storage, monitoring, databases, containers, serverless computing, or web application security.
• Experience with endpoint management, endpoint detection and response, vulnerability management, security monitoring, or email security platforms.
• Experience with Exchange Online security, including anti‑phishing, anti‑spam, mail‑flow rules, and email authentication standards.
• Experience with automation and infrastructure‑as‑code tools such as PowerShell, Bash, Python, Ansible, or Terraform.
• Experience with backup, disaster recovery, business continuity planning, and restore testing.
• Relevant AWS, Microsoft, CompTIA, or information security certifications.
• Experience supporting SSL/TLS certificates, web infrastructure, and identity federation using

Benefits

• Premium Medical Insurance Coverage
• 401(k) Savings Plan
• Paid Time Off (PTO) based on seniority
• Paid Holidays

Additional Workplace Offerings (subject To Change Or Eligibility.)

• Annual Bonus Plan
• Onsite Employee Fitness Center with Indoor Racquetball Court and Yoga Room
• Summer Fridays
• Complimentary Gourmet Breakfast, Lunch, and Dinner
• Relocation Support for New Hires
• Work Anniversary Recognitions
• Congratulatory & Condolence Gifts
• Employee Referral Bonus Program
• License/Certification Reimbursements
• Corporate Employee Discounts
• Visa Sponsorships (100% paid by the company) i.e., New H-1B, H-1B Transfer, O-1, and Green Card
• Commuter Support (Shuttle Bus Program and EZPass Support)
• Vehicle Perks

Qualification(s)

Education(s):
Bachelor of Science (B.S): Computer and Information Science (Required)

Work Experience

Experience Range IV: 8 - 13 years of relevant experience or industry exposure in a related field

Skill(s)

AWS Administration

Language(s)

English

Certification(s)

Not Applicable

The anticipated compensation range is
91,000.00 - 172,000.00 USD Annual
Actual compensation will be determined based on various factors including qualifications, education, experience, and location. The pay range is subject to change at any time dependent on a variety of internal and external factors.

Kiss Nail Products, Inc., KDC GA Corp., Ivy Enterprises, Inc., AST Systems, LLC, Red Beauty, Inc., or Dae Do, Inc. (collectively, the “Company”) is an equal opportunity employer and is committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or any other characteristic protected by law.