System & Network Administrator

Regular Full Time

Professional

West Henrietta, NY, US

Salary Range: $85,000.00 To $95,000.00 Annually

Title

System & Network Administrator

Department

Information Technology

Reports to

Information Technology Manager

SEE YOUR CAREER THROUGH A NEW LENS WITH RPO!

RPO is a global leader in precision optics, optical components, and optical assemblies. We specialize in a full spectrum of products & services including – Design and Engineering, Systems Integration, Lens Assembly, Visible and Infrared Components, Glass and Plastic Molded Aspheres, and Thin Film Coating. As one of the fastest growing companies in Rochester, RPO offers exciting career paths and work on market-leading programs. See below one of many career opportunities to join the RPO team!

Position Overview:

Rochester Precision Optics, LLC is seeking a Systems & Network Administrator to support and operate the company’s core IT infrastructure within a regulated manufacturing environment. This role is responsible for the administration and operational stability of server, network, cloud, and enterprise infrastructure platforms supporting approximately 300 users across corporate and manufacturing operations. The Systems & Network Administrator works closely with the IT Manager to maintain a secure, reliable, and compliant infrastructure, including implementation of technical controls aligned with NIST 800-171 and CMMC 2.0 requirements.

This is a hands-on role where the successful candidate will take ownership of infrastructure operations, contribute to the ongoing improvement and modernization of the organization’s infrastructure platforms, and serve as an escalation resource for complex technical issues.

Key Responsibilities:

Infrastructure & Systems Administration

• Administer and maintain Windows Server environments and enterprise infrastructure systems

• Manage Active Directory, DNS, DHCP, Group Policy, and identity infrastructure

• Support virtualization platforms such as VMware or Hyper-V

• Provision and maintain virtual machines and server resources

• Monitor infrastructure performance, system capacity, and service availability

• Perform patch management and security updates for servers and infrastructure systems

• Maintain file services, storage systems, and system health monitoring

• Administer enterprise backup platforms and validate backup integrity through periodic recovery testing

• Administer enterprise software deployment platforms including PDQ Deploy and related deployment tooling

• Create and maintain standardized software deployment packages for enterprise applications and operating system updates

• Coordinate controlled rollout of software updates and application upgrades across managed systems

• Maintain infrastructure documentation including system configuration standards and architecture diagrams

Network Infrastructure Administration

• Maintain & support network infrastructure including switches, firewalls, VPN, and wireless networks

• Configure and support VLANs, routing, and subnetting

• Configure and maintain firewall policies, access rules, and network security controls

• Maintain network authentication systems supporting secure wired and wireless access

• Support VoIP and network-connected infrastructure including cameras and related technologies

• Maintain and troubleshoot DNS, DHCP, routing, and other core network services

• Support structured cabling, patch panel management, and infrastructure expansion projects

• Maintain network diagrams, segmentation documentation, and infrastructure configuration records

Microsoft 365 GCC High Administration

• Administer Microsoft 365 GCC High tenant services including Exchange Online, Microsoft Teams, and Entra ID

• Configure and maintain Conditional Access policies and secure authentication configurations

• Support identity lifecycle integration between on-premises Active Directory and Entra ID

• Provide Tier 2/3 escalation support for advanced Exchange Online and Teams issues

• Assist with Microsoft Purview administration including eDiscovery searches, retention policies, and litigation hold support

• Maintain secure messaging and collaboration configurations aligned with regulatory requirements

Endpoint & Mobile Device Management Platform Administration

• Administer enterprise device management platforms including Microsoft Intune and Endpoint Central

• Configure and maintain device enrollment policies, compliance policies, and security baselines

• Integrate device compliance enforcement with Conditional Access authentication policies

• Provide Tier 3 escalation support for complex endpoint and mobile device management issues

• Support device security posture aligned with organizational security and compliance requirements

Enterprise Infrastructure Platforms

• Maintain backend infrastructure supporting enterprise applications including ERP, SQL Server, and FileMaker hosting environments

• Support infrastructure stability for unified communications platforms such as 3CX VoIP

• Maintain backend infrastructure supporting physical security platforms including badge access control and video surveillance systems

• Maintain infrastructure supporting enterprise print services and related systems

• Support infrastructure used for digital signage, IoT devices, and other network-connected systems

Security & Compliance Operations

• Implement and maintain infrastructure security controls aligned with NIST 800-171 and CMMC 2.0 requirements

• Partner with internal leadership and external compliance advisors on cybersecurity initiatives

• Maintain secure configuration baselines and infrastructure hardening standards

• Ensure infrastructure systems generate and forward logs to centralized monitoring platforms

• Support vulnerability remediation across infrastructure platforms

• Assist with investigation of infrastructure-level security alerts and anomalies

• Support audit readiness activities and collection of technical compliance evidence

Collaboration & Operational Support

• Serve as Tier 2 / Tier 3 escalation resource for complex infrastructure and systems issues

• Collaborate with IT leadership on infrastructure improvements and modernization initiatives

• Assist with enterprise application upgrades and infrastructure lifecycle projects

• Provide mentorship and technical guidance to IT support staff

• Participate in rotating on-call coverage for infrastructure alerts and critical incidents

Required Skills & Qualifications:

• Bachelor’s degree in Information Technology, Computer Science, or related field preferred, or equivalent combination of education and experience.

• Relevant industry certifications such as Network+, Security+, Microsoft, or VMware certifications are a plus.

• 5+ years of experience in systems administration, infrastructure engineering, or related roles

• Strong knowledge of Windows Server, Active Directory, and Microsoft enterprise environments

• Experience managing network infrastructure including VLANs, switching, firewalls, and VPN technologies

• Experience supporting Microsoft 365 environments (GCC High experience preferred)

• Experience with virtualization platforms such as VMware or Hyper-V

• Experience administering enterprise endpoint management platforms (Intune, Endpoint Central, or similar)

• Experience supporting enterprise backup platforms and disaster recovery planning

• Familiarity with enterprise deployment tools and automation scripting (PowerShell preferred)

• Experience supporting infrastructure hosting enterprise applications or ERP systems preferred

• Familiarity with NIST 800-171 or CMMC security frameworks preferred

Core Competencies:

• Results-Oriented: Motivated, hard-working and ready to level-up;

• Curious: You never stop learning and have an insatiable desire to gain new skills and knowledge;

• Process Oriented: Well organized, demonstrating attention to detail;

• Analytical: Possess a “If there’s a problem, I’ll find a solution” attitude;

• Accountable: Demanding the highest quality from yourself and team members;

• Detail-Oriented: Have excellent time management and organizational skills;

• A Team Player: Reliable, collaborative, flexible with a positive ‘get things done’ attitude;

Additional Requirements:

Pursuant to ITAR, EAR, and other export compliance laws and regulations, applicants for this position must be U.S. Persons as defined by U.S. law, i.e., U.S. citizens, lawful permanent residents ("Green Card" holders), persons granted refugee status or asylum status in the United States, or temporary residents granted amnesty.

Compensation & Benefits:

• Competitive compensation package linked to your experience and performance.

• 401(k) with company match and Tuition Reimbursement opportunities.

• Health, dental, vision, HSA, & life insurance.

• Paid time off including vacation, sick time, and 11 paid company holidays

Work environment & Physical Demands:

• While performing the duties of this job, the employee is regularly required to stand, use hands & fingers, handle or feel, and reach with hands and arms. The employee frequently is required to stand, walk, stoop, kneel, crouch, talk and hear.

• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. May involve prolonged periods of magnified inspection (eye strain)

• Requires good hand-eye coordination, arm, hand, and finger dexterity, including ability to grasp.

• The job may involve prolong periods of standing.

• Highly repetitive work, usually in a fixed body position for a sustained period of time.

• The employee is frequently required to use the computer.

• May involve the use of oils and solvents.

• Subject to some soilage and irritation from cleaning solutions. (Lab Coats provided)

• Generally works in a clean environment and works to maintain the environment as such.

• Safety Glasses and hearing protection are required

• May require area specific safety training

• This position works in a manufacturing environment. The noise level in the work environment is usually loud.

• The employee is regularly exposed to moving mechanical parts and fumes or airborne paper particles.

• May work at different workstations as production needs require, or shifts from one station to another, during the production process.

Disclaimer:

This job description reflects management’s assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed.

Rochester Precision Optics is committed to leveraging the talent of a diverse workforce to create great opportunities for our business and our people.

EOE/AA/Race/Gender/Disability/Veteran

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States, and to complete the required employment eligibility verification form upon hire.

This role will be performed onsite at our West Henrietta, NY facility.

Schedule: Monday - Friday, 7am - 3:30pm