System Administrator

ASM; Temecula (CA); On-site; USD 62,000 - 83,000; Full time

Benefits offered by this job

Competitive PTO structure

Excellent medical/dental/vision

401(k) with employer match

Weekly catered lunches

Company events

Modern tech stack

Job summary

ASM in Temecula, CA is seeking a System Administrator to maintain and scale a modern SaaS hosting environment across Windows Server, VMware, and Azure. You will own patching, hardening, and security posture while supporting SOC 2 and HIPAA compliance.

You will work with Dev and Mgmt to implement policy, procedures, and documentation, handling after-hours maintenance and on-call rotations as needed.

Qualifications

• 5+ years of experience in system administration or infrastructure engineering.
• Strong understanding of operating systems, networking, firewalls and security configurations.
• Experience configuring Windows Server and IIS with automation.
• Experience deploying resources in Azure.
• Experience with Active Directory, Group Policy, and Entra ID.
• VMware vSphere/vSAN configuration and management.
• Experience with Windows patching at scale and PowerShell automation.
• Familiarity with HIPAA/SOC 2/FedRAMP or similar compliance efforts.
• Clear written and verbal communication for non-technical audiences.

Responsibilities

• Manage, document, and scale the infrastructure across Windows servers, VMware, Azure, and network devices.
• Control access via Microsoft Entra ID and Active Directory and enforce least-privilege principles.
• Own patch management across Windows, VMware, and network gear; automate where possible.
• Maintain and improve system hardening per industry best practices.
• Troubleshoot issues from monitoring and user reports to resolution.
• Support audits and assessments for HIPAA/SOC 2 compliance and client security posture.
• Occasional off-hours maintenance to minimize disruption.
• Respond to high-severity after-hours alerts affecting security or availability.

Skills

System administration

Infrastructure engineering

PowerShell

Networking basics

Windows Server / IIS automation

Azure resource management

Active Directory / Entra ID

VMware vSphere / vSAN

Security/compliance

Communication skills

Tools

Palo Alto firewalls

NGINX / Azure Front Door

Terraform

Job description

DESCRIPTION

Pay: $45.00–$60.00/hr

Please note: This role requires in-office work in Temecula, CA, 3–4 days per week, and is not eligible for visa sponsorship or relocation assistance.

About ASM

At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we’ve grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack.

About the role

As a System Administrator, you’ll work closely with Development and Management to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You’ll take ownership of key systems, help shape the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance, and work with clients to help them understand our security posture.

What you’ll do

• Manage, maintain, and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and Palo Alto Networks firewalls
• Manage user and group access in Microsoft Entra ID and Active Directory to ensure appropriate access
• Own patch management for Windows Servers, VMware, and network devices, and continue automating it
• Maintain and improve system hardening standards based on industry best practices and known vulnerabilities
• Troubleshoot issues identified by our monitoring systems or reported by users, and see them through to resolution
• Support security and compliance audits and assessments, and help clients understand our security posture
• Perform maintenance during off‑hours windows to minimize service disruption
• Respond to high‑severity after‑hours alerts that affect security or availability

Schedule and on-call

During onboarding, you may be in the office up to 5 days per week.

The role includes occasional evening and weekend maintenance work and participation in our 24/7 on‑call rotation, which may include on‑call shifts up to several times per week. Time spent handling after‑hours calls is paid at standard overtime rates.

Who thrives here

You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You thrive on complex problems that don’t have obvious solutions, and you understand how systems work under the hood well enough to find root causes rather than just fix symptoms. You’re meticulous without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects.

Required

• 5+ years of experience in system administration or infrastructure engineering
• A strong understanding of computing fundamentals, including operating systems, file systems, and networking, as well as firewalls and security configurations
• Experience configuring and managing Windows Server and IIS environments using automation
• Experience administering and deploying resources in Azure
• Experience managing Active Directory, Group Policy, and Microsoft Entra ID
• VMware vSphere and vSAN configuration and management
• Experience managing Windows updates and patching at scale
• Proficiency automating tasks with PowerShell
• Experience working within compliance frameworks such as HIPAA, SOC 2, HITRUST, or FedRAMP, including supporting audits and assessments
• Strong written and verbal communication skills, including explaining technical topics to non‑technical audiences

Nice to have

• Experience with Palo Alto Networks firewalls and Panorama
• Experience with reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door
• Experience setting up and managing site‑to‑site VPNs
• Infrastructure as code with Terraform
• Microsoft certifications in relevant technologies (e.g., AZ‑104, AZ‑500), or equivalent experience
• CISSP or equivalent security experience
• SQL Server administration experience

• Compensation: In accordance with California pay transparency requirements, the anticipated hourly pay range for this position is $45.00 to $60.00 per hour. Actual compensation will be determined based on factors such as experience, skills, and qualifications.
• A competitive PTO structure (non-accrual, granted immediately after the probationary period)
• 100% medical, dental, and vision coverage for all employees
  • Several medical coverage options to choose from (free and at cost)
  • Potential partial coverage for dependents (based on the plan chosen)
• Several supplemental benefit options (hospital confinement, accident insurance, disability, cancer insurance, etc.)
• FSA (Flexible Spending Account)
• DCFSA (Dependent Care Flexible Spending Account)
• 401(k) with employer match
• Weekly catered company lunches (Wednesdays)
• Company "All-In" collaboration days
• Summer and holiday parties
• A modern, regularly updated technology stack