System & Network Administrator

POSITION SUMMARY

We are seeking a highly skilled and motivated System & Network Administrator to join our IT department. Based in Harvard, MA, this role will have global responsibility for managing and supporting IT networks and systems across four locations: San Diego, CA; Long Island, NY; Harvard, MA; and Suzhou, China. This position will play a vital role in maintaining and enhancing our IT infrastructure, with a focus on modernization, security, and compliance.

Key projects include upgrading networks to Cisco Meraki, consolidating domains into MS O365 Azure, supporting a hybrid Active Directory environment, and creating an Azure GCC-high enclave for compliance with CMMC v2 Level 2 standards.

The ideal candidate will also mentor junior IT staff, educate users, and implement IT best practices for a secure and efficient environment.

KEY POSITION RESPONSIBILITIES

• IT Infrastructure Management

  • Manage and maintain IT infrastructure in Harvard, MA, and remotely support other global sites.
  • Administer Cisco Meraki networking solutions, including configuration, deployment, and ongoing maintenance.
  • Oversee server virtualization using Hyper-V for all locally run servers.
  • Manage network legacy hardware until it is replaced with Cisco Meraki such as NETGEAR switches, TP-Link POE switches, Ubiquiti wireless access points and routers running OpenSense.
  • Support 3XLogic and Unify security camera systems for indoor and outdoor surveillance.
  • Ensure backup solutions using Datto for servers and Work Folders for workstation data sync.

  System Administration

  • Administer hybrid Active Directory, syncing on-premise infrastructure with Azure AD.
  • Consolidate domains into a unified MS O365 Azure domain (aeminc.com).
  • Manage Great Plains for financials (planed to replace with Oracle Netsuite in 2025) and other software, including SOLIDWORKS, DraftSight, and WordPress.
  • Support the migration of legacy applications and services to Azure and SaaS platforms.
  • Maintain Docker and Posix-based containers as Hyper-V guests
  • Support and Manage Windows Hello and Certificate based Authentication infrastructure
  • Manage policies for BitLocker encryption and Sophos antivirus/data loss prevention.
  
  

  Security and Compliance

  • Assist in designing and implementing an Azure GCC-high enclave for handling CUI securely.
  • Ensure compliance with NIST 800-171 and CMMC v2 Level 2 standards.
  • Use ManageEngine for vulnerability management, patching, and monitoring IT systems.
  • Oversee secure remote access using dual certificate-based OpenVPN.

  User Support and Training

  • Provide tier-2/3 support for users and manage low-traffic helpdesk operations via email.
  • Educate users on IT policies, secure usage of personal devices, and software best practices.
  • Mentor junior IT team members, fostering growth and technical expertise.

  Project Management

  • Lead IT projects such as the implementation of SOLIDWORKS PDM, ERP upgrades, and Windows 11 deployments.
  • Address data storage challenges, including implementing deduplication solutions.
  • Standardize systems and IT practices across all global locations.

  Documentation and Reporting

  • Develop and maintain IT policies, procedures, and documentation to meet compliance standards.
  • Create detailed documentation for network configurations, software deployments, and backup systems.
  • Monitor and manage IT spending in alignment with budgetary constraints.

Qualifications

Education & Experience

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).
• 5 years of experience in IT infrastructure and network/system administration.
• Strong knowledge of NIST and CMMC compliance requirements.

Technical Skills

• Expertise in networking protocols, firewalls, VPNs, and group policy management.
• Proficiency in using monitoring tools like ManageEngine for security and performance.
• Experience with IT asset management, including deploying and managing Adobe Acrobat licenses.

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent written and verbal communication skills.
• Ability to mentor and train junior staff and educate end-users.
• Capable of managing multiple projects and working under deadlines.

Preferred Qualifications

• Certifications: CCNA, Microsoft Certified: Azure Administrator Associate, or CISSP.
• Experience in a global or multi-site organization.
• Familiarity with ITAR regulations and managing classified data.
• Proven experience with Cisco Meraki, Azure, Office 365, and Hyper-V

Work Conditions

• Based in Harvard, MA, with up to 25% travel to support sites in San Diego, Long Island, and Suzhou, China.
• Flexible schedule to accommodate global time zones as necessary.

Equal Opportunity Employer.

Minorities/Women/Veterans/Disability/Gender Identity/Sexual Orientation