Senior Systems and Security Administrator

Job Description Summary The Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications. Job Description Summary The Senior Systems & Security Administrator is a hands-on role responsible for managing, securing, and supporting a hybrid enterprise IT environment. The position supports Windows Server and Linux/Ubuntu infrastructure, Microsoft 365, Microsoft Entra ID, Active Directory, Exchange Online, AWS, Azure, and Odoo-based business applications. This role manages system and cloud operations, identity and access, system maintenance, patching, monitoring, backup and recovery, vulnerability remediation, Tier 2/3 support, automation, and technical documentation. The administrator independently troubleshoots complex infrastructure issues and applies least-privilege and security best practices. Job Description Key Responsibilities Systems and Infrastructure Administration Administer Windows Server environments, including Active Directory, DNS, DHCP, Group Policy, file services, patching, and system lifecycle activities. Administer Linux and Ubuntu servers, including users and permissions, services, patching, performance monitoring, log analysis, and troubleshooting. Perform server provisioning, configuration, upgrades, patching, backup validation, recovery testing, and documentation. Monitor system availability, capacity, performance, and backup status, and proactively address issues. Identity, Microsoft 365, and Messaging Administer Active Directory, Microsoft Entra ID, and Microsoft 365 identity services. Manage the full user lifecycle, including account provisioning, access changes, group membership, license assignment, and offboarding. Support hybrid identity environments, including directory synchronization and synchronization troubleshooting. Administer Exchange Online, including user and shared mailboxes, distribution and security groups, mailbox permissions, licensing, and mail flow. Manage Conditional Access, multifactor authentication, enterprise applications, single sign-on, role-based access, and privileged access. Conduct periodic reviews of user accounts, group memberships, licenses, and access permissions. Cloud and Business Application Operations Administer AWS environments, including compute, networking, identity and access, security groups, DNS, load balancing, storage, monitoring, and database services. Support Azure virtual machines, identity services, networking, storage, monitoring, and security controls. Maintain least-privilege access, cloud identity controls, firewall rules, security configurations, and monitoring. Support Odoo environments, including Linux hosting, PostgreSQL connectivity, application availability, logs, backups, and troubleshooting. Collaborate with Odoo developers and business stakeholders on deployments, integrations, scheduled jobs, performance issues, and access requests. Participate in cloud migration, modernization, automation, and infrastructure improvement initiatives. Security and Maintenance Maintain Windows, Linux/Ubuntu, cloud, and business application environments according to established security standards and operating procedures. Perform operating system, application, and security patching, coordinate maintenance windows, and validate system health after changes. Apply secure configuration standards and maintain appropriate administrative and least-privilege access. Review system, application, and cloud logs for operational issues, unauthorized access, or abnormal activity, and elevate findings when needed. Support vulnerability remediation through patching, configuration changes, and coordination with internal teams and vendors. Maintain system documentation, asset inventories, access and backup records, and technical procedures. Support and Collaboration Provide Tier 2/3 support for infrastructure, cloud, identity, messaging, and Odoo platform issues. Collaborate with IT teams, business stakeholders, developers, vendors, and managed security service providers. Participate in scheduled maintenance and occasional after-hours or on-call support. Improve reliability, security, and operational efficiency through scripting and automation. Qualifications Required Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent practical experience. At least 8 years of hands‑on experience in enterprise IT operations, systems administration, infrastructure operations, or a similar role. Strong hands‑on experience with enterprise Windows Server and Linux/Ubuntu environments. At least 4 years of hands‑on experience administering AWS environments in an enterprise setting. At least 4 years of hands‑on experience administering Active Directory and Microsoft Entra ID. At least 2 years of hands‑on Exchange Online administration experience, including mailboxes, shared mailboxes, groups, permissions, licensing, and mail flow. Experience supporting hybrid environments that connect on‑premises Active Directory with Microsoft Entra ID. Working knowledge of Azure administration and cloud security controls. Understanding of Odoo architecture and operations, including application services, PostgreSQL, Linux hosting, logs, backups, and common troubleshooting methods. Strong troubleshooting skills across servers, authentication, email, cloud services, and business applications. Ability to create clear technical documentation and communicate with both technical and non‑technical stakeholders. Preferred Experience supporting Odoo in an enterprise environment, including deployments, PostgreSQL backup and restore, performance troubleshooting, integrations, and scheduled jobs. Experience with additional AWS services for load balancing, DNS, storage, monitoring, databases, containers, serverless computing, or web application security. Experience with endpoint management, endpoint detection and response, vulnerability management, security monitoring, or email security platforms. Experience with Exchange Online security, including anti‑phishing, anti‑spam, mail‑flow rules, and email authentication standards. Experience with automation and infrastructure‑as‑code tools such as PowerShell, Bash, Python, Ansible, or Terraform. Experience with backup, disaster recovery, business continuity planning, and restore testing. Relevant AWS, Microsoft, CompTIA, or information security certifications. Experience supporting SSL/TLS certificates, web infrastructure, and identity federation using Benefits Premium Medical Insurance Coverage 401(k) Savings Plan Paid Time Off (PTO) based on seniority Paid Holidays Additional Workplace Offerings (subject To Change Or Eligibility.) Annual Bonus Plan Onsite Employee Fitness Center with Indoor Racquetball Court and Yoga Room Summer Fridays Complimentary Gourmet Breakfast, Lunch, and Dinner Relocation Support for New Hires Work Anniversary Recognitions Congratulatory & Condolence Gifts Employee Referral Bonus Program License/Certification Reimbursements Corporate Employee Discounts Visa Sponsorships (100% paid by the company) i.e., New H-1B, H-1B Transfer, O-1, and Green Card Commuter Support (Shuttle Bus Program and EZPass Support) Vehicle Perks Qualification(s) Education(s): Bachelor of Science (B.S): Computer and Information Science (Required) Work Experience Experience Range IV: 8 - 13 years of relevant experience or industry exposure in a related field Skill(s) AWS Administration Language(s) English Certification(s) Not Applicable The anticipated compensation range is 91,000.00 - 172,000.00 USD Annual Actual compensation will be determined based on various factors including qualifications, education, experience, and location. The pay range is subject to change at any time dependent on a variety of internal and external factors. Kiss Nail Products, Inc., KDC GA Corp., Ivy Enterprises, Inc., AST Systems, LLC, Red Beauty, Inc., or Dae Do, Inc. (collectively, the “Company”) is an equal opportunity employer and is committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or any other characteristic protected by law. #J-18808-Ljbffr Kiss Beauty Group