System Administrator, IT Services (Cloud, Network, & Security)

AmaWaterways seeks talented, motivated professionals to explore career opportunities and begin their journey with AmaWaterways. This description outlines the System Administrator, IT Services role, including its scope, responsibilities, qualifications, and work environment. Overview The System Administrator, IT Services is a hands-on infrastructure role with a primary emphasis on cloud administration, network administration, and security from the system-administration side. The position administers and secures AmaWaterways’ Microsoft Azure and AWS environments, Cisco-based network infrastructure, and identity, endpoint, and server security posture, while supporting the broader environment including VMware virtualization, Citrix Cloud applications and virtual desktops, Microsoft 365 and Active Directory / Entra ID, and 8x8 telephony. The role reports to the Manager, System Administration and supports employees across the Calabasas headquarters and global offices with technical work, documentation, and partnership with IT and Security teams. Responsibilities Cloud Administration (Primary Focus) Serve as a primary administrator for AmaWaterways’ Microsoft Azure and Amazon Web Services (AWS) environments, including provisioning and lifecycle management of virtual machines/EC2 instances, storage, and platform services. Administer cloud identity and access management — Microsoft Entra ID (Azure AD), Azure RBAC, AWS IAM users/roles/policies — applying least-privilege principles and managing federation and single sign-on. Configure and maintain cloud networking constructs (VNets/VPCs, subnets, route tables, network security groups, security groups, VPN/ExpressRoute/Direct Connect, and load balancers). Monitor cloud cost, utilization, and capacity; identify rightsizing and optimization opportunities; and support tagging, budgeting, and chargeback/showback reporting. Implement and maintain cloud backup, snapshot, and disaster-recovery configurations across Azure and AWS workloads, and perform periodic recovery testing. Support cloud governance and configuration baselines using native tooling (Azure Policy, Microsoft Defender for Cloud, AWS Config/Security Hub) and assist with infrastructure-as-code and automation where applicable. Network Administration (Primary Focus) Administer Cisco network infrastructure — switches, routers, and wireless — including VLANs, trunking, port configuration, basic routing and switching, and firmware/IOS updates across the Calabasas headquarters and remote offices. Administer firewalls, VPN, and remote-access connectivity; manage site-to-site and client VPN tunnels and support secure connectivity between offices, data center/colo, and cloud. Manage core network services (DNS, DHCP, NTP) and Wi-Fi infrastructure, including SSID configuration, controller management, and wireless performance troubleshooting. Monitor network health, performance, and availability using monitoring/alerting tools; investigate and resolve connectivity, latency, and throughput issues, escalating to vendors/MSPs for changes that exceed the role’s scope. Maintain network documentation — topology diagrams, IP address management (IPAM), VLAN and firewall rule inventories — and keep configuration backups current. Support telephony and contact-center networking for 8x8 (QoS, SIP/RTP traffic, and call-quality troubleshooting) in partnership with the voice platform. Security Administration (Primary Focus) Apply system-administration security practices across cloud, network, server, and endpoint layers — hardening configurations, enforcing least-privilege access, and maintaining secure baselines. Administer multi-factor authentication, Conditional Access, and identity-protection policies in Microsoft Entra ID; review privileged access and support access certifications/reviews. Operate and maintain endpoint and server protection (EDR/AV), disk encryption (BitLocker/FileVault), and patch/vulnerability remediation in accordance with IT security and patch-management standards. Support email and collaboration security (anti-phishing, anti-spam, safe links/attachments) and assist with triage and remediation of phishing, impersonation, and account-compromise incidents. Monitor security alerts and logs across Microsoft Defender, cloud-native security tooling, and network devices; investigate, document, and escalate suspected incidents. Assist with vulnerability scanning, remediation tracking, and security configuration reviews; contribute to security audits, evidence gathering, and policy/standard compliance. Partner with leadership and any third-party security providers (MSP/MSSP) on incident response, threat containment, and continuous-improvement initiatives. Infrastructure & End-User Support (Supporting Responsibilities) Administer and maintain the on-premises VMware vSphere environment (ESXi hosts, vCenter), including virtual machine provisioning, storage management, host patching, and performance troubleshooting. Administer the Citrix Cloud environment, including published applications and virtual desktops (Citrix DaaS / Virtual Apps and Desktops), delivery groups, machine catalogs, image updates, and end-user session troubleshooting. Administer Microsoft 365 services (Exchange Online, Microsoft Teams, SharePoint Online, OneDrive), including mailbox, distribution-list, license, and collaboration management. Administer Active Directory and on-premises identity services — users, groups, organizational units, Group Policy, DNS, and DHCP — including hybrid synchronization with Entra ID. Provision, patch, monitor, and maintain Windows Server and select Linux servers, both on-premises (VMware) and in Azure/AWS, including backup verification. Manage Windows and macOS endpoints using Microsoft Intune (or comparable MDM/UEM) — enrollment, compliance and configuration policies, software deployment, and remote remediation — and administer iOS/Android mobile devices. Provide Tier 2/Tier 3 support to AmaWaterways employees, handling escalations and tickets through the ITSM system to resolution within agreed SLAs. Own IT onboarding and offboarding: account creation, license and access assignment, virtual desktop entitlements, equipment provisioning/imaging, and timely deprovisioning. Maintain accurate IT asset and licensing records (hardware, software, cloud) and manage decommissioning in accordance with data-sanitization policy. Coordinate with vendors and managed service providers for procurement, support cases, and field work. Document procedures, runbooks, and knowledge-base articles; keep documentation current as the environment evolves. Participate in IT projects under the direction of the Manager, System Administration. Participate in an after-hours on-call rotation for critical IT incidents, as required. Performs other related duties as assigned by management. Supervisory Responsibilities This is an individual contributor role with no direct reports. May provide informal guidance and knowledge transfer to Help Desk staff, contractors, or interns assigned to IT Services projects. Carries out responsibilities in accordance with the organization’s policies and applicable laws. Qualifications Associate’s or Bachelor’s Degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related discipline, or equivalent combination of education and experience. Industry certifications strongly preferred, such as: Microsoft Certified: Azure Administrator Associate (AZ-104) and/or Azure Security Engineer Associate (AZ-500); AWS Certified SysOps Administrator or Solutions Architect – Associate; Cisco CCNA; CompTIA Security+, Network+, and/or CySA+; Microsoft Identity and Access Administrator Associate (SC-300) or Security Operations Analyst Associate (SC-200); ITIL 4 Foundation. Comprehensive technical skills required across: Azure and AWS administration, Cisco networking, security tooling, Entra ID / Active Directory, EDR/AV, Microsoft Defender, VMware vSphere, Citrix Cloud / DaaS, Microsoft 365, Windows Server, Linux basics, Intune, 8x8 telephony, scripting, ITSM, and modern productivity tools. 3–6 years of professional experience in system administration with a demonstrated focus on cloud, network, and/or security administration. Hands-on experience with cloud security and governance tooling and least-privilege access models. Familiarity with backup and recovery tooling and ITIL processes. Strong customer-service orientation and ability to communicate clearly with non-technical staff and executives. Strong written communication skills and ability to document architecture, procedures, and knowledge-base articles. Strong organizational skills and ability to manage multiple priorities in parallel. Ability to lift and move IT equipment (up to 25 lbs frequently, up to 50 lbs occasionally) and travel/hospitality exposure is a plus but not required. Familiarity with audiovisual and meeting-room technology is a plus. Competencies Ethics, Adaptability, Customer Service, and Quality – demonstrated examples of these competencies in the workplace. Physical Demands And Work Environment Occasionally stand, walk, or climb; continually sit and use hands; lift up to 25 pounds regularly and up to 50 pounds with assistance; travel to offices as needed. Moderate noise level with occasional higher noise in server/equipment rooms; vision requirements include close and color vision for cable and indicator identification. The above describes the general content of and requirements for the performance of this job and is not an exhaustive statement of duties. Management reserves the right to assign or reassign duties and responsibilities as needed. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. #J-18808-Ljbffr AmaWaterways River Cruises