Systems Administrator

Expedite Technology Solutions, LTD; Atlanta (GA); On-site; USD 90,000 - 130,000; Full time

Job summary

Talentify in Atlanta, GA is seeking an experienced IT Infrastructure Administrator to manage virtualization, network security, and web hosting operations.

You will upgrade Proxmox VE clusters, optimize VM capacity, maintain firewall rules, and handle Cloudflare DNS and certificates across dealer sites. The role also covers Windows Server, Active Directory, IIS sites, and PCI DSS compliance.

Qualifications

• Hands-on experience upgrading Proxmox VE clusters and performing health checks.
• Strong Windows Server and IIS administration skills.
• Experience with firewall and network device management (pfSense, HAProxy, switches).
• Familiarity with Cloudflare, DNS management and SSL/TLS certificates.
• Understanding PCI DSS and vulnerability management processes.
• Ability to write runbooks and support change management.

Responsibilities

• Plan and execute Proxmox VE upgrades across the cluster with health checks and rollback planning.
• Manage VM capacity, storage and performance, including disk-space remediation.
• Diagnose hardware faults with colocation providers and support decommission of on-premises hardware.
• Maintain datacenter asset records and support office hardware.
• Upgrade pfSense firewall clusters and HAProxy load balancers with minimal customer impact.
• Maintain network switches and perform PCI DSS firewall rule reviews.
• Manage IIS sites for OEM programs, including bindings and dealer onboarding.
• Investigate dealer site outages and certificate errors, restore service quickly.
• Manage Cloudflare DNS, WAF rules, and SSL certificates across sites.
• Support DNS records management for new dealer sites and domain migrations.
• Remediate vulnerabilities and support PCI/ISO audits with documentation.
• Administer Active Directory and Windows Server, including patching and hardening.
• Handle access requests following least-privilege principles.
• Plan and execute decommissioning of retired servers as workloads move to AWS.
• Write and maintain runbooks for all systems.

Skills

Proxmox VE management

HAProxy administration

pfSense firewall management

IIS site administration

Cloudflare DNS/SSL management

Windows Server administration

Active Directory/Group Policy

PCI DSS compliance awareness

Vulnerability management

Cloud/AWS integration planning

Tools

Proxmox VE

pfSense

HAProxy

IIS

Cloudflare

DNS (Constellix/Cloudflare)

Active Directory

Windows Server

AWS

PCI DSS auditing

Job description

Key Responsibilities

Virtualization and infrastructure

• Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.
• Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.
• Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.
• Maintain datacenter asset records and support the eventual decommission of on-premises hardware.
• Manage physical servers in the office location and support stabilization

Firewalls, load balancing and network

• Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.
• Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.
• Upgrade and maintain network switches.
• Perform the recurring firewall rule review required under PCI DSS.
• Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.
• Support VPN operations and troubleshoot VPN authentication issues.

Web hosting (IIS) and dealer site operations

• Administer IIS on Windows Server across production, demo and non-production environments.
• Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.
• Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.
• Investigate dealer site outages and certificate errors, and restore service quickly.
• Refresh image and content caches and support content-delivery issues.

Cloudflare, DNS and certificates

• Troubleshoot and configure Cloudflare: custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.
• Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.
• Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.
• Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.
• Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.

Security, vulnerability and compliance operations

• Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.
• Track and retire end-of-life software across the estate: runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.
• Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.
• Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).
• Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.
• Follow change management for all production changes and maintain accurate records.

Access and Windows administration

• Administer Active Directory, Group Policy and Windows Server, including patching and hardening.
• Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.
• Resolve RDP, login and server-access issues for internal teams.
• Support SFTP/FTP services used for OEM and dealer data feeds.

Transition and handoff

• Write and maintain runbooks for every system you own, so no knowledge is held by a single person.
• Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.
• Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.