IT Systems Administrator

POSITION SUMMARYThe IT Systems Administrator is a hands-on position which will own and operate the tools, endpoints, and infrastructure that keep our people, our network, and our field deployments running securely and reliably. You’ll be the dedicated LEXSO-side counterpart to our parent company’s IT function, building and administering the systems specific to our environment while coordinating with Constellis IT on shared services. This is a builder role: you’ll stand up new tooling, tighten existing processes, and keep clear, current documentation and records as the company scales.RESPONSIBILITIESOwn the full lifecycle of company laptops and devices including provisioning, configuration, inventory, and retirementDeploy and administer a mobile device management (MDM) platform across the Mac fleetEnforce disk encryption, endpoint protection, firewall settings, and patch complianceMaintain an accurate, current asset inventory across all issued hardwareAdminister user account lifecycle across core systems including onboarding, role changes, and offboardingEnforce multi-factor authentication and access control standards across company systemsManage least-privilege access reviews and local admin rights on endpointsSupport on-premises server stack installation, configuration, and troubleshooting at customer sites, on an as-needed basisProvide network infrastructure support with switches, firewalls, VPN, connectivity for field and office environments, as other issues as they arisePartner with Field Ops and delivery engineering on installation and integration issues in the field when neededStand up and monitor centralized logging and alerting across endpoints and infrastructureManage patch and vulnerability remediation cadence, with regular status reportingOwn backup procedures and removable media handling practicesWrite and maintain clear IT policies, procedures, and system documentationProduce accurate, current records and evidence on request to support internal reviews and customer or partner due diligenceServe as the primary point of contact between LEXSO and Constellis IT for shared services and tooling decisionsEvaluate and recommend new tools as the company’s needs growCommunicate clearly with leadership on project status, risks, and tradeoffsQUALIFICATIONS4+ years in a hands-on IT systems administrator, systems engineer, or infrastructure roleDirect experience deploying and managing Apple’s MDM platform for a Mac-based fleetExperience with Jamf, Kandji, Mosyle, or Intune is a plusWorking knowledge of endpoint hardening, disk encryption, endpoint protection/EDR, firewall configuration, and patch managementExperience administering identity and access management, including MFA enforcement and account lifecycle processesComfort with basic network infrastructure including switches, firewalls, VPN, troubleshooting connectivity issuesExperience administering Google Workspace, or demonstrated ability to learn it quicklyExperience writing and maintaining IT policies, procedures, and technical documentationStrong written and verbal communication and the ability to explain technical tradeoffs to non-technical stakeholdersSelf-directed and comfortable owning a workstream independently in a small, fast moving teamPreferred qualifications:Experience supporting IT for a government contractor or other regulated environmentExperience with centralized logging/SIEM tooling and basic log review practicesExperience supporting field or on-site deployments, not just a remote environmentPrior experience as the sole or founding IT hire at a small or growing companyBENEFITSConstellis offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects its commitment to creating a diverse and supportive workplace.

• 4+ years in a hands-on IT systems administrator, systems engineer, or infrastructure role
• Direct experience deploying and managing Apple’s MDM platform for a Mac-based fleet
• Experience with Jamf, Kandji, Mosyle, or Intune is a plus
• Working knowledge of endpoint hardening, disk encryption, endpoint protection/EDR, firewall configuration, and patch management
• Experience administering identity and access management, including MFA enforcement and account lifecycle processes
• Comfort with basic network infrastructure including switches, firewalls, VPN, troubleshooting connectivity issues
• Experience administering Google Workspace, or demonstrated ability to learn it quickly
• Experience writing and maintaining IT policies, procedures, and technical documentation
• Strong written and verbal communication and the ability to explain technical tradeoffs to non-technical stakeholders
• Self-directed and comfortable owning a workstream independently in a small, fast moving team
• Preferred qualifications:
• Experience supporting IT for a government contractor or other regulated environment
• Experience with centralized logging/SIEM tooling and basic log review practices
• Experience supporting field or on-site deployments, not just a remote environment
• Prior experience as the sole or founding IT hire at a small or growing company

Constellis offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects its commitment to creating a diverse and supportive workplace.