Systems Administrator

Expedite Talent Solutions; Atlanta (GA); Vor Ort; USD 90.000 - 130.000; Vollzeit

Zusammenfassung

Expedite Talent Solutions is seeking an IT Infrastructure Administrator to join our Atlanta-area team. This role covers virtualization, networking, web hosting, Cloudflare and security operations to ensure reliable, compliant services for OEM and dealer platforms.

You will upgrade Proxmox, manage firewall clusters, maintain IIS sites, handle Cloudflare DNS and certificates, and support PCI DSS/ISO audits. Local on-site management and collaboration with AWS modernization will be required.

Aufgaben

• Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.
• Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.
• Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.
• Maintain datacenter asset records and support the eventual decommission of on-premises hardware.
• Manage physical servers in the office location and support stabilization
• Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.
• Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.
• Upgrade and maintain network switches.
• Perform the recurring firewall rule review required under PCI DSS.
• Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.
• Support VPN operations and troubleshoot VPN authentication issues.
• Administer IIS on Windows Server across production, demo and non-production environments.
• Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.
• Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.
• Investigate dealer site outages and certificate errors, and restore service quickly.
• Refresh image and content caches and support content-delivery issues.
• Troubleshoot and configure Cloudflare: custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.
• Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.
• Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.
• Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.
• Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.
• Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.
• Track and retire end-of-life software across the estate: runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.
• Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.
• Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).
• Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.
• Follow change management for all production changes and maintain accurate records.
• Administer Active Directory, Group Policy and Windows Server, including patching and hardening.
• Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.
• Resolve RDP, login and server-access issues for internal teams.
• Support SFTP/FTP services used for OEM and dealer data feeds.
• Write and maintain runbooks for every system you own, so no knowledge is held by a single person.
• Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.
• Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.

Jobbeschreibung

JOB TITLE: [Job Title]

JOB TYPE: [Contract / Contract-to-Hire / Direct Hire / Full-Time / Part-Time]

LOCATION: [City, State ZIP]

WORK ARRANGEMENT: [Remote / Hybrid / Onsite]

CONTRACT DURATION: [Duration, if applicable]

COMPENSATION: [Pay Rate / Salary Range, as applicable]

Key Responsibilities

Virtualization and infrastructure

• Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.
• Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.
• Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.
• Maintain datacenter asset records and support the eventual decommission of on-premises hardware.
• Manage physical servers in the office location and support stabilization

Firewalls, load balancing and network

• Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.
• Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.
• Upgrade and maintain network switches.
• Perform the recurring firewall rule review required under PCI DSS.
• Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.
• Support VPN operations and troubleshoot VPN authentication issues.

Web hosting (IIS) and dealer site operations

• Administer IIS on Windows Server across production, demo and non-production environments.
• Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.
• Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.
• Investigate dealer site outages and certificate errors, and restore service quickly.
• Refresh image and content caches and support content-delivery issues.

Cloudflare, DNS and certificates

• Troubleshoot and configure Cloudflare: custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.
• Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.
• Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.
• Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.
• Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.

Security, vulnerability and compliance operations

• Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.
• Track and retire end-of-life software across the estate: runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.
• Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.
• Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).
• Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.
• Follow change management for all production changes and maintain accurate records.

Access and Windows administration

• Administer Active Directory, Group Policy and Windows Server, including patching and hardening.
• Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.
• Resolve RDP, login and server-access issues for internal teams.
• Support SFTP/FTP services used for OEM and dealer data feeds.

Transition and handoff

• Write and maintain runbooks for every system you own, so no knowledge is held by a single person.
• Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.
• Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.

EQUAL EMPLOYMENT OPPORTUNITY

Expedite Talent Solutions, LLC. provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws. We especially invite women, minorities, veterans, and individuals with disabilities to apply.