System Administrator/Systems Engineer

Greetings!!! 
Welcome to TechProjects! We specialize in IT System integration to help with some of the biggest names in the public sectors around New York state. Our company provides exceptional IT solutions for our clients, while also offering top-notch career opportunities for our employees.   At our firm, we work with a diverse range of clients, from cutting-edge startups to established industry leaders.   If you're a tech professional looking for a challenging and rewarding career, we'd love to hear from you. Our company offers competitive salaries, comprehensive benefits packages, and a range of professional development opportunities. Whether you're a seasoned veteran or just starting out in your career, we have a role that's perfect for you.   Thank you for considering our company as your potential employer. We look forward to hearing from you and discussing the exciting opportunities that await you at our firm.
 
 Job Title: System Administrator/Systems engineer 
Location: San Francisco, CA (Hybrid   3 days onsite) 
Duration: Long term 

Description:

• This is a senior, hands-on role. You will run and improve the systems the company depends on every day: Windows server and directory infrastructure, the macOS and Windows endpoint fleet, virtualization, backup and recovery, and the monitoring that tells us when any of it is unhappy. You will be a point of escalation for the support team and a technical anchor for the engineers around you.

• You will have real influence over how these systems are built, but the job is to operate and improve them well, not to spend your quarters writing strategy documents. If you would rather be in the console than in the deck, this is the role.

 What You ll Do 
Run and secure Windows server and directory infrastructure

• Administer and improve Windows Server environments on premise and in the cloud: Active Directory, Group Policy, DNS, DHCP, certificate services, and RADINPS.

• Automate the security and integrity of Windows systems through GPO, PowerShell, and MDM tooling.

• Keep configuration and patching current and consistent, aligned to published best practices, security frameworks, and vendor guidance.

• Maintain secure access to resources through disciplined directory and group management, working with IAM where directory services and SSO meet.

Manage the endpoint fleet

• Administer macOS and Windows endpoints through MDM: policy configuration, enrollment, provisioning, patching, OS upgrades, and application delivery.

• Write and maintain automation in PowerShell, Bash, or Python that removes manual work from fleet operations   with the logging and rollback paths that make fleet-wide changes safe.

• Keep endpoint security tooling deployed and healthy across the fleet, and close coverage gaps at the source rather than one device at a time.

• Maintain accurate asset inventory across MDM, security, identity, and procurement systems.

Own resilience and availability

• Maintain backup and recovery strategies for Windows systems, and prove they work through regular restore testing rather than assuming they do.

• Administer and optimize on-premise and cloud-based desktop virtualization, including scientific and vendor-locked workloads that resist standard management.

• Build and tune logging, availability monitoring, and alerting so problems surface before users report them.

• Perform preventative maintenance and follow change control on the systems you own.

Support the science

• Support instrument-attached systems, lab workstations, and scientific software that was never designed for managed environments.

• Work directly with scientists and lab operations to understand constraints before proposing changes, and plan around uptime requirements that do not tolerate a maintenance window.

Deliver projects and support the team

• Investigate and resolve technical problems of increasing complexity, identifying and prioritizing effectively under pressure.

• Act as a point of escalation for key systems and infrastructure when the support team needs depth they do not have.

• Gather stakeholder requirements, propose solutions grounded in your research and experience, communicate plans and progress, validate that requirements were met, and deliver on time.

• Develop procedures and documentation, and provide technical assistance and mentorship to the support team.

 Required Skills

• 5+ years of increasing responsibility administering and engineering Windows server and endpoint environments in a mixed on-premise and cloud setting.

• Deep hands-on expertise with Windows Server, Active Directory, and Group Policy   you have built and repaired these environments, not only clicked through them.

• Strong MDM experience managing macOS and Windows fleets at scale.

• Real scripting ability for automation: PowerShell, plus Bash or Python.

• Direct experience designing and maintaining Windows backup and recovery strategies you were personally accountable for.

• Demonstrated ownership of endpoint security posture: patch management, secure baselines, and configuration management.

• A track record of delivering complex IT projects that touched teams outside your own.

 Preferred

• Experience in a laboratory, manufacturing, clinical, or other environment with instrument-attached or uptime-critical systems.

• Familiarity with our stack or close equivalents: Addigy, Automox, CrowdStrike, Okta, Workspace ONE, Axonius, Google Workspace, Atlassian.

• Configuration management or infrastructure-as-code experience.

• Exposure to compliance and audit expectations in a regulated or pre-regulated life sciences setting.

 
How you work

• You are curious, and you enjoy the class of problems where the documented answer does not exist yet.

• You build trust across departments and levels, and you handle sensitive access and information with the discretion it requires.

• You document what you know so it stops living only in your head.

• You enjoy building things and want to help develop an IT program, not inherit a finished one.