System Administrator

MD-Staff - Applied Statistics & Management Inc.; Temecula (CA); On-site; USD 62,000 - 83,000; Full time

Benefits offered by this job

PTO after probation

Medical insurance

Dental coverage

Vision coverage

Dependent coverage options

FSA

DCFSA

401(k) match

Weekly team lunches

All-Hands collaboration days

Company parties

Modern tech stack

Job summary

MD-Staff - Applied Statistics & Management Inc. in Temecula, CA seeks a System Administrator to maintain and scale a SaaS hosting environment spanning Windows Server, VMware, Azure, and networking.

You will own security policies and SOC 2/HIPAA compliance, while guiding clients on security posture. You will manage access, patching, hardening, and incident response, with on-call rotations and off-hours maintenance to minimize disruption.

Qualifications

• 5+ years of system administration or infrastructure engineering experience.
• Strong fundamentals in operating systems, file systems, networking, firewalls and security configurations.
• Experience configuring Windows Server and IIS with automation.
• Experience deploying resources in Azure.
• Experience managing Active Directory, Group Policy, and Microsoft Entra ID.
• VMware vSphere and vSAN configuration and management.
• Experience patching Windows and other devices at scale.
• PowerShell automation proficiency.
• Familiarity with HIPAA, SOC 2, HITRUST, or FedRAMP compliance and audits.
• Strong written and verbal communication skills.

Responsibilities

• Manage, document, and scale our infrastructure across Windows Server, VMware, and Azure.
• Handle access control in Entra ID and AD for appropriate permissions.
• Own patch management and automate it across systems and devices.
• Maintain system hardening aligned with best practices and vulnerabilities.
• Troubleshoot monitoring alerts and user-reported issues to resolution.
• Support security and compliance audits and client communications.
• Perform maintenance during off-hours to minimize disruption.
• Respond to high-severity alerts impacting security or availability.

Skills

Windows Server

Azure

Active Directory

PowerShell

Networking

IIS

VMware vSphere

Group Policy

Microsoft Entra ID

Tools

Terraform

Palo Alto Panorama

NGINX

Azure Front Door

Azure Application Gateway

VPNs

Job description

Description

Pay: $45.00-$60.00/hr

Please note: This role requires in-office work in Temecula, CA, 3-4 days per week, and is not eligible for visa sponsorship or relocation assistance.

About ASM

At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we've grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack.

About The Role

As a System Administrator, you'll work closely with Development and Management to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You'll take ownership of key systems, help shape the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance, and work with clients to help them understand our security posture.

What You’ll Do

• Manage, maintain, and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and Palo Alto Networks firewalls
• Manage user and group access in Microsoft Entra ID and Active Directory to ensure appropriate access
• Own patch management for Windows Servers, VMware, and network devices, and continue automating it
• Maintain and improve system hardening standards based on industry best practices and known vulnerabilities
• Troubleshoot issues identified by our monitoring systems or reported by users, and see them through to resolution
• Support security and compliance audits and assessments, and help clients understand our security posture
• Perform maintenance during off-hours windows to minimize service disruption
• Respond to high-severity after-hours alerts that affect security or availability

Schedule and on-call

During onboarding, you may be in the office up to 5 days per week.

The role includes occasional evening and weekend maintenance work and participation in our 24/7 on-call rotation, which may include on-call shifts up to several times per week. Time spent handling after-hours calls is paid at standard overtime rates.

Who Thrives Here

You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You thrive on complex problems that don’t have obvious solutions, and you understand how systems work under the hood well enough to find root causes rather than just fix symptoms. You’re meticulous without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects.

Requirements

Required

• 5+ years of experience in system administration or infrastructure engineering
• A strong understanding of computing fundamentals, including operating systems, file systems, and networking, as well as firewalls and security configurations
• Experience configuring and managing Windows Server and IIS environments using automation
• Experience administering and deploying resources in Azure
• Experience managing Active Directory, Group Policy, and Microsoft Entra ID
• VMware vSphere and vSAN configuration and management
• Experience managing Windows updates and patching at scale
• Proficiency automating tasks with PowerShell
• Experience working within compliance frameworks such as HIPAA, SOC 2, HITRUST, or FedRAMP, including supporting audits and assessments
• Strong written and verbal communication skills, including explaining technical topics to non-technical audiences

Nice to have

• Experience with Palo Alto Networks firewalls and Panorama
• Experience with reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door
• Experience setting up and managing site-to-site VPNs
• Infrastructure as code with Terraform
• Microsoft certifications in relevant technologies (e.g., AZ-104, AZ-500), or equivalent experience
• CISSP or equivalent security experience
• SQL Server administration experience

Benefits

• Compensation: In accordance with California pay transparency requirements, the anticipated hourly pay range for this position is $45.00 to $60.00 per hour. Actual compensation will be determined based on factors such as experience, skills, and qualifications
• A competitive PTO structure (non-accrual, granted immediately after the probationary period)
• 100% medical, dental, and vision coverage for all employees
  • Several medical coverage options to choose from (free and at cost)
  • Potential partial coverage for dependents (based on the plan chosen)
• Several supplemental benefit options (hospital confinement, accident insurance, disability, cancer insurance, etc.)
• FSA (Flexible Spending Account)
• DCFSA (Dependent Care Flexible Spending Account)
• 401(k) with employer match
• Weekly catered company lunches (Wednesdays)
• Company "All-In" collaboration days
• Summer and holiday parties
• A modern, regularly updated technology stack