System Administrator

The Systems Administrator is a hands-on generalist responsible for the day-to-day health of Natoli’s servers, network, endpoints, and cloud services, plus direct support for employees across the office, shop floor, and remote sites. This is a broad role in a small IT team: on any given day you may be patching a server, tracing a network drop in the manufacturing area, hardening a firewall rule, onboarding a new hire, and closing help desk tickets. You will work closely with the IT Manager on infrastructure projects while owning the operational routines that keep the business running., Systems Administration

• Administer Windows Server environments, Active Directory, Group Policy, DNS, DHCP, and file/print services.
• Administer Microsoft 365 / Entra ID: user and license provisioning, Exchange Online, SharePoint, OneDrive, and Teams.
• Maintain virtualization hosts and guests (Scale and/or Hyper-V), including resource monitoring, capacity planning input, and VM lifecycle.
• Own backup and recovery operations: verify job completion, perform restore testing, and support disaster recovery and business continuity planning.
• Manage patching and update cycles for servers, workstations, and applications; schedule and execute maintenance windows with minimal production impact.
• Provide infrastructure support for line-of-business systems, including ERP/MRP, engineering and CAD/CAM applications, and shop-floor and quality systems (coordinating with vendors and application owners as needed).
• Monitor system health, respond to alerts, and investigate performance issues before they become outages.

Networking

• Support and maintain LAN/WLAN and WAN infrastructure: switches, routers, firewalls, VPN, wireless access points, and structured cabling across office, manufacturing, and warehouse areas.
• Configure VLANs, DHCP scopes, port assignments, and QoS; troubleshoot connectivity issues end to end, from the wall jack to the cloud.
• Support site-to-site and remote-user VPN connectivity for satellite technical centers and traveling staff.
• Maintain accurate network documentation, IP schemes, and rack/cabling diagrams.
• Coordinate with ISPs, telecom, and low-voltage vendors on circuits, installs, and outages.

Security

• Administer endpoint protection/EDR, email security and filtering, and multi-factor authentication.
• Apply least-privilege principles to accounts, shares, and administrative access; conduct periodic access reviews.
• Support vulnerability management: run and interpret scans, prioritize remediation, and verify fixes.
• Assist with security awareness training, phishing simulations, and incident response - containment, investigation support, and documentation.
• Help maintain IT policies, standards, and evidence for customer, quality, or cyber-insurance audits.

End-User Support & IT Operations

• Serve as an escalation point for help desk tickets; resolve hardware, software, account, printing, mobile device, and A/V issues for employees on-site and remote.
• Image, deploy, and maintain laptops, desktops, industrial PCs, mobile devices, scanners, and printers.
• Execute onboarding and offboarding: accounts, equipment, permissions, and clean termination of access.
• Support conference room technology and remote-meeting infrastructure.
• Maintain the IT asset inventory and software license records.

Documentation & Projects

• Write and maintain runbooks, configuration standards, and knowledge base articles so procedures are repeatable and not dependent on one person.
• Contribute to infrastructure projects: hardware refreshes, migrations, upgrades, and new-site or new-system rollouts.
• Evaluate tools and make practical recommendations, including cost and effort estimates, to the IT Manager.

This role is ideal for someone with a few years of solid infrastructure experience who wants breadth - systems, networking, and security - rather than a single narrow specialty., * 3+ years of hands-on experience in systems administration, IT infrastructure, or a comparable combined sysadmin/network/support role.

• Working proficiency with Windows Server, Active Directory, and Group Policy.
• Working proficiency with Microsoft 365 administration.
• Practical networking knowledge: TCP/IP, DNS, DHCP, VLANs, routing and switching fundamentals, firewall rules, VPN, and Wi-Fi troubleshooting.
• Experience with server virtualization (VMware or Hyper-V).
• Experience with backup and restore operations.
• Solid understanding of core security practices: patching, endpoint protection, MFA, access control, and phishing/social-engineering awareness.
• Strong troubleshooting discipline - able to isolate a problem methodically rather than by guesswork.
• Clear written and verbal communication; able to explain technical issues to non-technical colleagues without condescension.
• Ability to prioritize competing requests and work independently in a small team.
• Associate’s or Bachelor’s degree in Information Technology, Computer Science, or a related field - or equivalent hands-on experience and certifications.

Preferred Qualifications

• Experience supporting IT in a manufacturing or engineering environment, including shop-floor systems, industrial PCs, machine-connected devices, or OT/IT segmentation.
• Experience supporting an ERP/MRP system.
• Scripting for automation (PowerShell preferred; Python or Bash welcome).
• Experience with Intune, SCCM, or comparable endpoint management.
• Familiarity with Azure or other cloud infrastructure.
• Certifications such as CompTIA Network+, Security+, Microsoft (MS-102, AZ-104, or similar), Cisco CCNA, or equivalent vendor certifications.
• Experience supporting multiple or international sites.
• Familiarity with regulated or quality-driven environments (GMP, ISO, or customer audit support).

Work Environment & Physical Requirements

• On-site role at our St. Charles, MO campus, with work in both office and manufacturing/warehouse areas; safety glasses and other PPE required in designated areas.
• Occasional after-hours or weekend maintenance windows and participation in an on-call rotation for critical outages.
• Ability to lift and move equipment up to 50 lbs, work in server/network closets, use ladders, and access under-desk and overhead cabling.
• Occasional travel to other company facilities (typically minimal).

• Competitive salary in the $70,000 - $90,000 range, based on experience
• Comprehensive benefits (medical, dental, vision, life, disability)
• Retirement plan with company contribution
• Paid time off and holidays
• Tuition/certification reimbursement and paid training
• A stable, family-owned company with a long track record of promoting from within and a workplace culture recognized by third-party certification

For more than 50 years, Natoli Engineering has set the standard in solid-dose tablet compression - precision punches and dies, tablet presses, data acquisition software, press refurbishing, and technical training for pharmaceutical, nutraceutical, veterinary, confectionery, and industrial manufacturers worldwide. We are a family-owned business headquartered on a 10-acre campus in St. Charles, Missouri, with technical centers across the U.S. and internationally. Our people stay, grow, and advance here - and the technology that supports our manufacturing, engineering, and R&D operations matters to every one of them.