Senior Systems and Security Administrator

Senior Systems & Security AdministratorThe Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications. This role manages system and cloud operations, identity and access, system maintenance, patching, monitoring, backup and recovery, vulnerability remediation, Tier 2/3 support, automation, and technical documentation. The administrator independently troubleshoots complex infrastructure issues and applies least-privilege and security best practices.Systems and Infrastructure AdministrationAdminister Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, file services, patching, and system lifecycle activities.Administer Linux and Ubuntu servers, including users and permissions, services, patching, performance monitoring, log analysis, and troubleshooting.Perform server provisioning, configuration, upgrades, patching, backup validation, recovery testing, and documentation.Monitor system availability, capacity, performance, and backup status, and proactively address issues.Identity, Microsoft 365, and MessagingAdminister Active Directory, Microsoft Entra ID, and Microsoft 365 identity services.Manage the full user lifecycle, including account provisioning, access changes, group membership, license assignment, and offboarding.Support hybrid identity environments, including directory synchronization and synchronization troubleshooting.Administer Exchange Online, including user and shared mailboxes, distribution and security groups, mailbox permissions, licensing, and mail flow.Manage Conditional Access, multifactor authentication, enterprise applications, single sign-on, role-based access, and privileged access.Conduct periodic reviews of user accounts, group memberships, licenses, and access permissions.Cloud and Business Application OperationsAdminister AWS environments, including compute, networking, identity and access, security groups, DNS, load balancing, storage, monitoring, and database services.Support Azure virtual machines, identity services, networking, storage, monitoring, and security controls.Maintain least-privilege access, cloud identity controls, firewall rules, security configurations, and monitoring.Support Odoo environments, including Linux hosting, PostgreSQL connectivity, application availability, logs, backups, and troubleshooting.Collaborate with Odoo developers and business stakeholders on deployments, integrations, scheduled jobs, performance issues, and access requests.Participate in cloud migration, modernization, automation, and infrastructure improvement initiatives.Security and MaintenanceMaintain Windows, Linux/Ubuntu, cloud, and business application environments according to established security standards and operating procedures.Perform operating system, application, and security patching, coordinate maintenance windows, and validate system health after changes.Apply secure configuration standards and maintain appropriate administrative and least-privilege access.Review system, application, and cloud logs for operational issues, unauthorized access, or abnormal activity, and escalate findings when needed.Support vulnerability remediation through patching, configuration changes, and coordination with internal teams and vendors.Maintain system documentation, asset inventories, access and backup records, and technical procedures.Support and CollaborationProvide Tier 2/3 support for infrastructure, cloud, identity, messaging, and Odoo platform issues.Collaborate with IT teams, business stakeholders, developers, vendors, and managed security service providers.Participate in scheduled maintenance and occasional after-hours or on-call support.Improve reliability, security, and operational efficiency through scripting and automation.QualificationsRequiredBachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience.At least 8 years of hands-on experience in enterprise IT operations, systems administration, infrastructure operations, or a similar role.Strong hands-on experience with enterprise Windows Server and Linux/Ubuntu environments.At least 4 years of hands-on experience administering AWS environments in an enterprise setting.At least 4 years of hands-on experience administering Active Directory and Microsoft Entra ID.At least 2 years of hands-on Exchange Online administration experience, including mailboxes, shared mailboxes, groups, permissions, licensing, and mail flow.Experience supporting hybrid environments that connect on-premises Active Directory with Microsoft Entra ID.Working knowledge of Azure administration and cloud security controls.Understanding of Odoo architecture and operations, including application services, PostgreSQL, Linux hosting, logs, backups, and common troubleshooting methods.Strong troubleshooting skills across servers, authentication, email, cloud services, and business applications.Ability to create clear technical documentation and communicate with both technical and non-technical stakeholders.PreferredExperience supporting Odoo in an enterprise environment, including deployments, PostgreSQL backup and restore, performance troubleshooting, integrations, and scheduled jobs.Experience with additional AWS services for load balancing, DNS, storage, monitoring, databases, containers, serverless computing, or web application security.Experience with endpoint management, endpoint detection and response, vulnerability management, security monitoring, or email security platforms.Experience with Exchange Online security, including anti-phishing, anti-spam, mail-flow rules, and email authentication standards.Experience with automation and infrastructure-as-code tools such as PowerShell, Bash, Python, Ansible, or Terraform.Experience with backup, disaster recovery, business continuity planning, and restore testing.Relevant AWS, Microsoft, CompTIA, or information security certifications.Experience supporting SSL/TLS certificates, web infrastructure, and identity federation usingBenefitsPremium Medical Insurance Coverage401(k) Savings PlanPaid Time Off (PTO) based on seniorityPaid HolidaysAnnual Bonus PlanOnsite Employee Fitness Center with Indoor Racquetball Court and Yoga RoomSummer FridaysComplimentary Gourmet Breakfast, Lunch, and DinnerRelocation Support for New HiresWork Anniversary RecognitionsCongratulatory & Condolence GiftsEmployee Referral Bonus ProgramLicense/Certification ReimbursementsCorporate Employee DiscountsVisa Sponsorships (100% paid by the company) i.e., New H-1B, H-1B Transfer, O-1, and Green CardCommuter Support (Shuttle Bus Program and EZPass Support)Vehicle PerksEducation(s):Bachelor of Science (B.S): Computer and Information Science (Required)Work Experience:Experience Range IV: 8 - 13 years of relevant experience or industry exposure in a related fieldSkill(s):AWS AdministrationLanguage(s):EnglishCertification(s):Not ApplicableThe anticipated compensation range is91,000.00 - 172,000.00 USD AnnualActual compensation will be determined based on various factors including qualifications, education, experience, and location. The pay range is subject to change at any time dependent on a variety of internal and external factors.Kiss Nail Products, Inc., KDC GA Corp., Ivy Enterprises, Inc., AST Systems, LLC, Red Beauty, Inc., or Dae Do, Inc. (collectively, the "Company") is an equal opportunity