Note: The job is a remote job and is open to candidates in USA. Empyreal Logistics is hiring an IT Systems Administrator to administer and support its hybrid, cloud-first infrastructure. The role manages identity and access, productivity platforms, public cloud resources, endpoints, security operations, patching, monitoring, and IT service requests while maintaining secure, reliable, audit-ready systems.

Responsibilities

• Administer user, group, and guest accounts in the cloud identity provider following least-privilege standards
• Support multi-factor authentication (MFA), self-service password reset, and conditional access policies; troubleshoot sign-in and access issues
• Configure single sign-on (SAML/OIDC) and SCIM provisioning for SaaS applications under the direction of senior staff
• Execute joiner/mover/leaver processes, including timely access removal at separation and the company's post-separation account retention schedule, with Legal Hold exceptions
• Assist with periodic access reviews and gather audit evidence
• Administer the cloud email, file storage, document collaboration, and team messaging platforms: mailboxes, shared resources, distribution lists, sharing settings, and user support
• Assign and reclaim licenses
• Monitor vendor service health and communicate user-impacting issues
• Apply retention policies and sensitivity labels as defined by senior staff
• Assist with eDiscovery and Legal Hold requests from Legal and HR, following documented chain-of-custody procedures
• Run audit log searches in support of investigations and compliance reviews
• Deploy and maintain cloud virtual machines, storage, and networking using approved standards and templates
• Monitor cloud backup jobs and perform test restores on a scheduled basis
• Track certificate and secret expirations and complete renewals
• Report cloud resource usage and cost anomalies to senior staff
• Enroll, provision, and manage company computers and mobile devices through unified endpoint management (UEM/MDM) platforms
• Deploy applications and configuration profiles; maintain device compliance and full-disk encryption
• Perform remote lock/wipe for lost, stolen, or retired devices
• Set up, configure, and troubleshoot Windows and macOS workstations, laptops, mobile devices, and peripherals
• Administer endpoint protection (EDR) for workstations and servers: deploy agents, apply policies, and triage and remediate alerts
• Maintain firewall rules, VPN access, and web filtering according to approved change requests
• Review identity threat detection and response (ITDR) and AI security control alerts and remediate or escalate findings
• Onboard log sources to the SIEM and triage alerts with the IT Security Analyst
• Administer the email security platform: quarantine review and release, allow/block lists, and phishing report handling
• Perform daily information security checks and document results
• Support the IT Security Analyst during incident response by collecting evidence and implementing containment steps
• Run and schedule vulnerability scans; review findings and remediate assigned vulnerabilities within defined SLAs
• Manage OS and third-party application patching on Windows, macOS, and Linux through the automated patch management platform; resolve failed deployments
• Verify remediation through rescanning and record evidence for SOC 2 audits
• Provision and deprovision users on the enterprise AI platform and manage seat assignments
• Support staff with approved AI tools and escalate data-handling or policy questions
• Respond to alerts from the infrastructure monitoring platform; deploy monitoring agents and maintain dashboards
• Work IT tickets in the IT service management (ITSM) platform: triage, prioritize, and resolve requests and incidents within defined service levels; document resolutions and escalate as needed
• Participate in on-call rotation as scheduled
• Participate in the team's hybrid agile process, including daily stand-ups, sprint planning, and retrospectives
• Administer Windows and Linux servers (on-premises and cloud) and virtualization: builds, updates, and troubleshooting
• Maintain wireless access points and managed switches: SSIDs, VLANs, port configuration, and firmware updates
• Support load balancing systems for company applications
• Monitor backup jobs, perform restores, and participate in disaster recovery tests
• Troubleshoot and resolve hardware, software, network, and system problems, escalating complex issues to senior staff
• Follow the change management process, including documentation and rollback plans
• Conduct testing across enterprise platforms to confirm system stability before and after changes
• Maintain a proactive rather than reactive approach to systems, network, and application management
• Maintain runbooks, network diagrams, and system documentation
• Write and maintain scripts to automate routine administration tasks
• Interact with external IT resources, including clients, vendors, and third parties, as needed
• Perform special projects and other duties as assigned

Skills

• 5-7 years of professional systems administration experience after college (or equivalent), in a cloud or hybrid environment
• Hands-on experience administering a cloud identity provider and cloud productivity suite, including MFA and access management
• Experience with unified endpoint management / mobile device management (UEM/MDM)
• Experience with endpoint protection (EDR), firewalls, and email security platforms
• Exposure to SIEM, vulnerability scanning, and automated patch management platforms
• Experience with public cloud (IaaS) virtual machines, storage, and networking
• Experience with IT service management (ITSM) / ticketing platforms
• Working knowledge of Windows and Linux servers, virtualization, and networking (LAN/WAN, VPN, wireless, firewalls, switches, VLANs)
• Knowledge of network security concepts, including IDS/IPS and WAF
• Knowledge of application transport and network infrastructure protocols
• Proficient in setting up, configuring, and troubleshooting Windows PCs and servers
• Scripting experience (e.g., PowerShell, Bash, or Python)
• Ability to produce clear documentation and network diagrams
• Ability to explain technical information clearly to non-technical staff, vendors, and clients
• Self-starter who works well independently and on a team; dependable, flexible, and able to learn new technology quickly
• Bachelor's degree in a technology-related field, or equivalent experience
• 5-7 years administering production systems in a cross-platform environment
• Linux administration experience a plus
• Container and container-orchestration experience preferred: deploying and troubleshooting workloads, cluster upgrades, and networking
• Familiarity with SOC 2 or similar compliance frameworks a plus
• Industry certifications preferred in one or more of: cloud administration, endpoint management, networking, security (e.g., CompTIA A+, Network+, or Security+), container orchestration, or Linux administration

Benefits

• Remote work

Company Overview