Systems and Network Administrator

About Varda Low Earth orbit is open for business. Varda is accelerating the development of commercial space infrastructure, from in-orbit pharmaceutical processing to reliable and economical reentry capsules. Varda’s W-Series vehicles are built, designed, and operated by Varda in-house, including the pharmaceutical processing payloads, the capsules, the C-PICA heat shields, and the satellite buses. From life-saving pharmaceuticals to more powerful fiber optics, there is a world of products used on Earth today that can only be manufactured in space. Varda is accelerating innovation in the orbital economy by creating both the products and infrastructure needed so space can directly benefit life on Earth. Our mission is to expand the economic bounds of humankind. Our team is uniquely suited to accomplishing this goal, with leadership and staff comprised of veterans from SpaceX, Blue Origin, major pharmaceutical companies and Silicon Valley. Varda was founded in January 2021 by Will Bruey and Delian Asparouhov with significant backing from world class investors including Khosla Ventures, Lux Capital, Founders Fund, Caffeinated Capital, General Catalyst, and Also Capital. Varda is headquartered in El Segundo, California, where we have offices and a production facility where our vehicles, equipment, and materials are built, integrated, and tested. Varda also has offices in Washington, DC and Huntsville, AL. Join Varda, and work to create a bustling in-space ecosystem. About the Role Varda is looking for a Systems & Network Administrator who thrives at the intersection of cutting‑edge aerospace and enterprise‑grade infrastructure. You’ll be the architect and guardian of our on‑premise and multicloud network — the backbone that powers everything from engineering innovation to manufacturing operations. You’ll have real ownership over critical systems built on Cisco Meraki, Microsoft Azure, and AWS, managing endpoint fleets across macOS, Windows, and Linux via Jamf and Intune, and enforcing zero‑trust access through Zscaler. You’ll shape how we scale infrastructure across both cloud and physical environments, working alongside Engineering, Integration and Test, Manufacturing, and Business Operations teams doing things that have never been done before. If you want your work to matter and your decisions to leave a mark, this is that role. Full‑time, exempt position located in our El Segundo headquarters. Responsibilities Design, deploy, and maintain a Cisco Meraki environment spanning MX security appliances, MS switches, MR wireless access points, and MV cameras — and keep it performing flawlessly as we grow. Own network health end‑to‑end: proactively monitor throughput and availability via the Meraki Dashboard, and hunt down bottlenecks and security events before they become problems. Architect and manage VLANs, DHCP, DNS, firewall rules, site‑to‑site VPNs, and traffic‑shaping policies across both production and office environments. Build and maintain resilient cloud networking across Microsoft Azure (VNets, NSGs, ExpressRoute/VPN Gateways, Azure Firewall, Private Endpoints) and AWS (VPCs, Transit Gateway, Security Groups). Lead network expansions, office buildouts, and infrastructure refreshes — from whiteboard to production. Administer and harden Windows and Linux servers, owning patching, performance monitoring, and backup/recovery. Manage a diverse endpoint fleet across macOS, Windows, and Linux via Jamf Pro, Microsoft Intune, and supplemental Linux tooling — including configuration profiles, OS patching, compliance policies, and app deployment. Administer endpoint security tooling, including ThreatLocker and CrowdStrike, collaborating closely with IT Support on imaging, provisioning, and compliance enforcement. Manage physical security and AV systems, including Kisi access control and Envoy visitor management. Operate and optimize Zscaler ZPA and ZIA for zero‑trust network access — tuning policies, monitoring connector health, and resolving client issues. Own IT asset tracking, network documentation, cloud topology diagrams, and MDM runbooks in Confluence — leaving things better than you found them. Write clean, maintainable automation in Bash, PowerShell, and Python to streamline operations, reduce toil, and improve visibility. Champion compliance efforts tied to Vanta, ITAR, NIST 800‑171, and GCC‑High — particularly around network segmentation, endpoint posture, and cloud security. Lead special projects from kickoff to completion, with full accountability for outcomes. Basic Qualifications Associate’s or Bachelor’s degree in IT, Network Engineering, Computer Science, or a related field — or equivalent experience that speaks for itself. 3+ years in network or systems administration with a meaningful networking focus. Demonstrated Cisco Meraki proficiency: security appliance policies, switch port configuration, SSID management, and client troubleshooting. Strong networking fundamentals: TCP/IP, DNS, DHCP, VLANs, 802.1X, spanning tree, routing, and Wi‑Fi (802.11ax). Solid Azure networking knowledge (VNets, subnets, NSGs, VPN Gateways) and working familiarity with AWS (VPCs, Security Groups). MDM experience across macOS, Windows, and Linux — enrollment, configuration profiles, compliance, and patch management. Confident Windows and Linux server administration: patching, hardening, and service management. Self‑directed and composed under pressure, with a track record of managing competing priorities without dropping the ball. Clear communicator who can translate technical complexity for any audience. Preferred Qualifications Cisco Meraki certifications (ECMS1, ECMS2) or deep hands‑on experience across the full MX, MS, MR, and MV product line. Microsoft certifications such as AZ‑700 (Azure Network Engineer) or AZ‑104 (Azure Administrator). Enterprise‑scale Jamf Pro and Microsoft Intune experience, plus familiarity with Linux endpoint tooling like Landscape or Fleet. Hands‑on zero‑trust experience with Zscaler ZPA/ZIA in production environments. Real multicloud networking chops — Azure VNets, NSGs, ExpressRoute, and AWS VPCs, Transit Gateway, or Direct Connect. Familiarity with compliance frameworks, including NIST 800‑171, CMMC, and ITAR, and how they shape network and endpoint security decisions. Experience supporting VoIP, multicast, or industrial IoT on enterprise networks. Background in a high‑growth startup or aerospace environment — you know how to build for scale while staying nimble. Compensation & Benefits Salary Range: $110,000 – $130,000 per year Job‑related skills, education, experience, and performance determine leveling and base salary. You’ll also be eligible for incentives in the form of stock options and/or long‑term cash awards. Equity in a fully funded space startup with serious growth potential 401(k) matching Unlimited PTO Health, vision, and dental insurance Daily lunch and snacks on site; dinners twice a week Maternity/Paternity leave Benefits Varda offers a comprehensive benefits package designed to support health, financial well‑being, and a high‑quality workplace experience. Below is an overview of what full‑time employees receive (at this time, interns receive a subset of benefits): Health & Wellness Flexible PTO policy +12 paid holidays 100% company‑paid Medical, Dental, and Vision insurance plans for employees and dependents with FSA and employer‑matched HSA options Voluntary accident, hospital, critical illness, and pet insurance $120/month wellness reimbursement for gym and fitness expenses 12 weeks of parental leave (with supplemental disability leave for CA mothers) Family building, pregnancy, parenting, and menopause benefits via Maven Clinic Sponsored One Medical memberships for employees and their dependents Financial & Retirement Substantial incentive equity in a fully funded space start‑up 401(k) retirement plan with 6% employer match (immediately vested) $20/pay period cell phone reimbursement Relocation support for new hires, if needed Workplace Experience & Perks Fully stocked kitchen with lunch provided daily and dinner provided twice weekly Company and team‑bonding events, happy hours and mission‑success celebrations Complimentary EV charging ITAR Requirements Varda, like all employers, must ensure that its employees working in the United States are lawfully authorized to work in the U.S. Additionally, our employees are exposed to and have access to certain export‑controlled items. Because our employees are provided access to export‑controlled items, our policy is to only hire “U.S. persons” who are permitted to have access to our technology without an export license. “US person” means: U.S. citizen, U.S. lawful permanent resident, or protected individual as defined by 8 U.S.C. 1324b(a)(3) (i.e., individual admitted to the U.S. as a refugee or granted asylum). E-Verify Statement Varda Space Industries, Inc. participates in the U.S. Department of Homeland Security E-Verify program. The E-Verify program is an Internet‑based employment eligibility verification system operated by the U.S. Citizenship and Immigration Services. Learn more about E-Verify program. E-Verify Notice Right To Work Notice Read more Read more Varda Space Industries is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, martial status, mental or physical disability, or any other legally protected status. #J-18808-Ljbffr Vardaspace