> Markdown version of [/jobs/ext/594912-it-systems-administrator](https://www.wearedevelopers.com/jobs/ext/594912-it-systems-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Systems Administrator - **Company:** Bernardo Consulting Group LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $95,000.0 - $105,000.0 - **Contract:** Permanent contract - **Skills:** Proxmox, Microsoft Windows, Active Directory, Software System Penetration Testing, Ubuntu (Operating System), Cyber Security, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), HAProxy, Hyper-V, Virtual Private Networks (VPN), Linux System Administration, Linux Servers, Windows Servers, Network Connections, Routing, Packet Analyzer, Prometheus, Phishing, Runbook, Virtual Local Area Networks, Datadog, Snort (Software), Grafana, Microsoft InTune, Azure Security Center, Information Technology, Patch Management, PfSense, Firewall Services Module, Vulnerability Analysis - **Published:** June 21, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=da716870d76f932e ## About the Role Do you have experience in VLAN?, BCG runs a primarily on-premises environment alongside a growing Microsoft 365 / Entra ID / Intune tenant, so this is a hands-on, broad generalist role - backup verifications, firewall rule changes, and Linux server patching can all land in the same afternoon. We are looking for an adaptable person with a broad skill set who enjoys going down the rabbit hole to find the answer. This is a high-trust, self-directed role. Sound judgment, follow-through, and the discipline to document your work and know when to escalate are essential., * 6+ years of hands-on systems administration experience in a Microsoft-centric environment. * Demonstrated proficiency administering Windows operating systems (Windows 11 endpoints, Windows Server 2022). * Strong working knowledge of Active Directory, Entra ID, and Group Policy. * Strong networking fundamentals - VLANs, routing / switching, firewall rules, DNS, and DHCP. * Working knowledge of enterprise patch management and enterprise backup principles. * Strong written documentation skills - able to produce runbooks, SOPs, and incident write-ups suitable for non-technical readers. * Customer-service orientation - professional and patient with non-technical users - paired with a preference for back-end and infrastructure work over a high-volume support desk. * Availability for occasional after-hours maintenance windows and as secondary on-call for urgent incidents; ability to provide approximately two weeks of standalone coverage during the IT Manager's planned absences. * Self-directed - comfortable working unsupervised, with the judgment to know when to escalate. * U.S. citizenship and eligibility for U.S. government security clearance., BCG also runs the following platforms. Hands-on experience with any of them is a strong plus, but not required. * Proxmox - production hypervisor experience. * Linux server administration - primarily Ubuntu. * pfSense advanced features - pfBlockerNG, Suricata / Snort, HAProxy, or similar. * WireGuard and Tailscale - VPN and overlay networking. * Observability tooling - Grafana, Prometheus, or equivalent. ## Description The IT Systems Administrator is the second technical seat on the BCG IT team, reporting to the IT Manager. The role is built to be more than day-to-day maintenance: you will own routine operations to keep the environment running reliably, and you will also have direct input on where the department goes next - project design work, evaluating and recommending new technology, and improving the processes and tooling we already run. As BCG and the IT team grow, you have the opportunity to grow with us., * Administer the Hyper-V host fleet - VM lifecycle, resource allocation, checkpoints, and host health. * Maintain Windows Server workloads and roles. * Maintain the expanding fleet of Linux (Ubuntu) servers. * Monitor capacity, performance, and health across the fleet; respond to alerts per runbook and escalate or remediate by severity. Network & Connectivity * Administer firewalls, routers, and managed switches. * Maintain VPN and overlay-network connectivity (Tailscale, WireGuard). * Diagnose connectivity and performance issues using logs, packet captures, and the Grafana / Prometheus telemetry stack; produce post-incident notes when changes are made. Backup, BC/DR, and Data Protection * Operate BCG's 3-2-1 backup architecture and verify backup job success daily; investigate failures. * Run periodic restore tests against documented RTO / RPO targets. * Contribute to disaster recovery runbooks and failover procedures. Security Operations * Tune Microsoft Defender for Endpoint policies and Attack Surface Reduction (ASR) rules; review Defender recommendations and incident queues, and act on high-severity alerts. * Investigate phishing, suspicious sign-ins, and endpoint anomalies, escalating to the IT Manager. * Assist with and run monthly enterprise patching via Action1. * Support vulnerability scanning and penetration testing - quarterly scans, annual external penetration test coordination, and remediation tracking. Identity, Endpoint, and End-User Support * Administer Active Directory, Entra ID, and Microsoft Intune, helping integrate them into a single identity-and-endpoint plane as BCG's Entra footprint matures. * Own new-hire onboarding and offboarding end-to-end, and help streamline and standardize the process (checklists, automation, repeatable provisioning) so it scales cleanly as BCG grows. * Provide responsive Tier 2 support to BCG's remote employees. End-user support is a smaller part of this role than a typical helpdesk job - BCG is a small, largely self-sufficient team - so a genuine service mindset and sound judgment with non-technical colleagues matter more than appetite for a high-volume ticket queue. Asset & License Management * Maintain the hardware and software asset inventory. * Own license management across Microsoft 365 / Entra, Action1, and other tooling: track assignments, renewal and true-up dates, and reclaim licenses at offboarding. * Reconcile inventory and licensing periodically against actual deployment, flagging gaps, shortfalls, and renewal risks. Documentation & Continuous Improvement * Maintain accurate documentation - network and infrastructure diagrams, asset inventory, and patch rosters. * Keep runbooks current for recurring operations (backup verification, patch cycle, restore tests, incident response). * Keep BCG SOPs up to date as the environment and team evolve., This is a 100% remote role open to US-based candidates in any state. Hours are flexible, with some evening or weekend work necessary for maintenance windows. Travel is minimal (under 5%). BCG provides all necessary equipment - laptop, monitor, and standard peripherals - shipped directly to your home. You will need a stable, secure, high-speed internet connection and a private workspace suitable for handling confidential systems and communications. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [5 steps for running a Kubernetes environment at scale](https://www.wearedevelopers.com/videos/88-5-steps-for-running-a-kubernetes-environment-at-scale) - [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark) - [Software Engineering Social Connection: Yubo’s lean approach to scaling an 80M-user infrastructure](https://www.wearedevelopers.com/videos/1583-software-engineering-social-connection-yubo-s-lean-approach-to-scaling-an-80m-user-infrastructure) - [Into the hive of eBPF!](https://www.wearedevelopers.com/videos/1199-into-the-hive-of-ebpf) - [All your telemetry data from any source in one place](https://www.wearedevelopers.com/videos/57-all-your-telemetry-data-from-any-source-in-one-place) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)