Staff Systems Administrator (R5995)

The role

You will own and operate on-premises and cloud infrastructure, identity services, networks, and endpoints for a dedicated, security-sensitive entity. You will keep systems secure, compliant, and audit-ready, and support engineering and business teams with minimal oversight.

What you will do

• Own and operate on-premises and cloud infrastructure, including servers, storage, backup, identity, network services, and enterprise applications.
• Administer Azure and/or AWS environments for availability, performance, secure configuration, and disaster recovery.
• Implement and maintain network segmentation, firewall policies, and secure remote access for a segmented entity environment.
• Establish secure configuration baselines and own patching and vulnerability remediation.
• Administer endpoint protections such as encryption, EDR/XDR, and least-privilege controls.
• Harden identity and administrative access, including MFA, privileged-access separation, and access reviews.
• Collect and maintain audit-ready evidence and support internal and external audits.
• Participate in incident response, containment, recovery, and root-cause analysis.
• Administer Active Directory and Entra ID or equivalent identity platforms.
• Manage Windows, macOS, and Linux endpoints through Intune, Jamf, or equivalent tooling, including onboarding and offboarding.

Required qualifications

• 8+ years of experience in systems administration, infrastructure engineering, enterprise IT operations, or a closely related discipline.
• Demonstrated success independently owning production IT infrastructure in a complex, regulated, segmented, or security-sensitive organization.
• Strong hands-on expertise with Windows, macOS, and Linux; server administration and virtualization; Azure and/or AWS; and Active Directory and Entra ID or equivalent.
• Practical experience with system and endpoint hardening, patch management, vulnerability remediation, encryption, EDR, and least-privilege controls.
• Experience supporting security or compliance programs and producing evidence for audits, assessments, or regulatory requirements.
• Strong networking knowledge, including TCP/IP, DNS, DHCP, VLANs, routing, VPNs, segmentation, firewall policy, and secure remote access.
• Experience with endpoint management platforms such as Intune, Jamf, or equivalent.
• Experience implementing and testing monitoring, backup, disaster recovery, and business-continuity capabilities.
• Excellent documentation, prioritization, risk communication, and stakeholder-management skills.
• Ability to support time-sensitive operational needs and participate in planned after-hours maintenance or incident response when required.

Nice to have

• Experience supporting a firewalled, ring-fenced, subsidiary, joint-venture, sovereign, or separately governed entity environment.
• Experience supporting engineering, R&D, aerospace, defense, manufacturing, or other mission-critical technical teams.
• Working knowledge of frameworks such as CIS Controls, NIST, ISO 27001, SOC 2, or Cyber Essentials.
• Experience with security tooling such as SIEM, vulnerability management, privileged-access management, or DLP.
• Experience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems.
• Scripting and automation experience using PowerShell, Bash, Python, APIs, or infrastructure as code.
• Familiarity with GitHub, Azure DevOps, and CI/CD environments.
• Relevant certifications such as Microsoft, AWS, VMware, Cisco, CompTIA Security+, CISSP, CISM, GIAC, or ITIL.

Benefits

• Comprehensive total rewards package aligned to your country office location.
• Full details on compensation and benefits are available from your talent acquisition partner.

Before you apply

• Shield AI operates in a security-sensitive, segmented environment; the posting does not state citizenship, clearance, or visa rules.
• Participation in planned after-hours maintenance or incident response may be required.

About the company

Shield AI is a venture-backed defense-tech company that builds intelligent systems to protect service members and civilians. Its products include Hivemind autonomy software, V-BAT and X-BAT aircraft, and Aechelon simulation technologies.