IT Systems Administrator

Be an Early Applicant Remote Hiring Remotely in USA Mid level Remote Hiring Remotely in USA Mid level Owns the lifecycle, security, and administration of company devices, Mac MDM, user accounts, endpoint controls, networks, servers, backups, logging, and vulnerability remediation. Supports field deployments and customer-site infrastructure, maintains IT policies and documentation, coordinates shared services with parent-company IT, evaluates new tools, and communicates project risks and tradeoffs to leadership., The IT Systems Administrator is a hands-on position which will own and operate the tools, endpoints, and infrastructure that keep our people, our network, and our field deployments running securely and reliably. You’ll be the dedicated LEXSO-side counterpart to our parent company’s IT function, building and administering the systems specific to our environment while coordinating with Constellis IT on shared services. This is a builder role: you’ll stand up new tooling, tighten existing processes, and keep clear, current documentation and records as the company scales., * Own the full lifecycle of company laptops and devices including provisioning, configuration, inventory, and retirement

• Deploy and administer a mobile device management (MDM) platform across the Mac fleet
• Enforce disk encryption, endpoint protection, firewall settings, and patch compliance
• Maintain an accurate, current asset inventory across all issued hardware
• Administer user account lifecycle across core systems including onboarding, role changes, and offboarding
• Enforce multi-factor authentication and access control standards across company systems
• Manage least-privilege access reviews and local admin rights on endpoints
• Support on-premises server stack installation, configuration, and troubleshooting at customer sites, on an as-needed basis
• Provide network infrastructure support with switches, firewalls, VPN, connectivity for field and office environments, as other issues as they arise
• Partner with Field Ops and delivery engineering on installation and integration issues in the field when needed
• Stand up and monitor centralized logging and alerting across endpoints and infrastructure
• Manage patch and vulnerability remediation cadence, with regular status reporting
• Own backup procedures and removable media handling practices
• Write and maintain clear IT policies, procedures, and system documentation
• Produce accurate, current records and evidence on request to support internal reviews and customer or partner due diligence
• Serve as the primary point of contact between LEXSO and Constellis IT for shared services and tooling decisions
• Evaluate and recommend new tools as the company’s needs grow
• Communicate clearly with leadership on project status, risks, and tradeoffs

• 4+ years in a hands-on IT systems administrator, systems engineer, or infrastructure role
• Direct experience deploying and managing Apple’s MDM platform for a Mac-based fleet
• Experience with Jamf, Kandji, Mosyle, or Intune is a plus
• Working knowledge of endpoint hardening, disk encryption, endpoint protection/EDR, firewall configuration, and patch management
• Experience administering identity and access management, including MFA enforcement and account lifecycle processes
• Comfort with basic network infrastructure including switches, firewalls, VPN, troubleshooting connectivity issues
• Experience administering Google Workspace, or demonstrated ability to learn it quickly
• Experience writing and maintaining IT policies, procedures, and technical documentation
• Strong written and verbal communication and the ability to explain technical tradeoffs to non-technical stakeholders
• Self-directed and comfortable owning a workstream independently in a small, fast moving team

• Preferred qualifications:

• Experience supporting IT for a government contractor or other regulated environment
• Experience with centralized logging/SIEM tooling and basic log review practices
• Experience supporting field or on-site deployments, not just a remote environment
• Prior experience as the sole or founding IT hire at a small or growing company

Constellis offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects its commitment to creating a diverse and supportive workplace.