Position: System Administrator/jr DevOps Engineer
Company: Freelance
Experience required: 2y
English level: intermediate

System Administrator manages internal Service Desk and provides timely support and escalation of company employees’ requests related to corporate equipment (laptops, printers, routers, wi-fi access points), systems and services (Jira, OKTA, GMail, Salesforce, etc.), operational systems and software. 
Reports To
The System Administrator  will report to IT Director

Responsibilities and Duties

System Administration
Set up and configure corporate services and systems (Jira, Slack, Dropbox, Office365, Salesforce, Monday.com, etc) according to corporate security policies (password complexity, encryption, malware protection, logging, monitoring, backups, etc.)
Set up and configure corporate equipment according to corporate security policies (password complexity, encryption, malware protection, logging, monitoring, backups, etc.)
Develop, build, maintain and support corporate systems and integrations such as:
Single Sign On (OKTA)
Centralized local station management (MS Active Directory for Windows, MacServer for MacOS)
Corporate mail and document service (GSuite/Google WorkSpaces)
VPN service (OpenVPN)
Corporate software update and distribute system
Mobile Device Management (Google MDM)
Asset management (equipment, licences, software)
Access control (access and permission management in corporate services)
User management (on/off-boarding, support user’s life-cycle)
Manage back up process of corporate systems and services
Investigate, resolve, escalade technical issues (Incident management)
Update corporate systems and equipment according to Change Management process

Networks
Set up and configure corporate networks according to corporate security policies
Support local office networks and negotiate with 3rd parties (L2/L3)
Support wi-fi enterprise (Radius) and negotiate with 3rd parties
Support corporate VPN connections 
Check and fix security vulnerabilities in local office networks and VPN (vulnerability management

Support of users
Manage internal IT Service Desk
Resolve, escalade, meet SLA in internal users requests from IT Service Desk Porta
Support and develop internal knowledge base
Create clear and comprehensive documentation for users and administrators
Set up and support Operational Systems (MS Windows and MacOS) of local stations
Set up and support corporate software on local stations
Communication with other company’s locations about administrative questions

3rd parties
Communication with office network providers
Communication with repair equipment service

On-going activity
Automate routine repeated actions
Timely escalation of violation of processes by users, teams, 3rd parties
Continuous improvement of processes, procedures
Status tracking and reporting


Qualifications
Deep understanding of the model ‘The principle of least privilege’ for User and Access Management
Hands-on experience with Single Sign On systems (OKTA)
Hands-on experience with centralized management systems and GPO for Windows (MS Active Directory)
Hands-on experience with centralized management systems for MacOS (Mac Server)
Good knowledge of personal operational systems -  Mac OS, Windows
Knowledge of protocols LDAP, SAML, OAuth
Good knowledge of networks (L2/L3, vlan, VPNs, routing, switching, security, wi-fi, etc)
Hands on experience of scripting (Bash, Powershell)
Hands on experience of asset management (inventory)
Hands on experience of access control management (access, permissions review)
Hands-on experience of mobile device management
Hands-on experience with VPN services (OpenVPN, Pritunl)
Hands-on experience with enterprise Wi-Fi (Radius, wi-fi controllers) 
Hands-on experience with Atlassian stack (Jira, Service Desk, Confluence)
Experience in assets security (Firewalls, Vulnerability scanners)
Hands-on experience with AWS cloud
Hands-on experience with antiviruses software for different operational systems (MacOs, Windows)
Hands-on experience with back-up procedures, tools, and Disaster Recovery
Hands-on experience with administration of GSuite, Slack, Zoom, Box, Salesforce and others
At least Intermediate Level of English
Good communication skills
Problem-solving attitude
Proactive person
Team spirit
BSc in Computer Science, Engineering or relevant field
Will be a plus:
Upper-intermediate English
Knowledge of alternative tools (OneLogin, JumpCloud, Jamf, Office365, Azure AD)
Hands on experience with SIEM
Hands on experience with Host intrusion detection and prevention system (HIDS/HIPS)
Hands on experience with Data Loss Prevention
experience with ISMS process - is very desirable

Ongoing professional development 
Work with manager to developer ongoing career growth and training path that includes: 
Improve personal skills 
Request trainings and certifications