Amwest Services

LOCAL AND ON-SITE POSITION. Well established Property Management Company since 2008 has expanded into the Warehousing and eCommerce Marketplace with a multi-site environment and is seeking a Senior System Administrator to help manage our IT/Web Dev Staff. Private Office will be provided.

ROLE: This is a high-impact role where you will support both our IT and Web Development teams. You will lead the architecture, implementation, and maintenance of our IT Hybrid Infrastructure spanning from on-premise systems, SaaS platforms to cloud environments while helping to manage our Web Development process. This includes holding Web Developers accountable for timelines and web software implementation. Must have a strong understanding of networking (routers, firewalls, web servers, proxies, and DMZ) and be able to work with Linux, Shell Scripting (includes setting up proper SSH Keys) and VMs. You will be responsible for the setup of web environments that includes clustering, reverse proxies/caching, and web platforms like WordPress/plugins.

RESPONSIBILITIES:

· Network/Security Administration: Must configure, maintain, and monitor multiple server rooms (on-premise private cloud/hardware) that includes Edge, Core, and DMZ Firewalls/Routers (Unifi EFG & pfSense), Proxy Servers (HAProxy), SSL Certs (ACME/Lets Encrypt), IPS/IDS, Linux Distros (Red Hat, Rocky, Ubuntu, Debian, etc.).

· Virtualization/System Administration: Must configure, maintain and monitor our virtualization platforms (VMware and XCP-ng) and various VMs (Windows Workstations, Windows/Linux Servers, LAMP Web Servers, Active Directory, VEEAM B&R, vCenter, Xen Orchestra, Zabbix, etc.), NAS Drives (via NFS/SMB/iSCSI), VDI Thin Clients, Routers/Firewalls, Switches, WiFi Access Points, Printers, Scanners, Mobile Devices, Smart Hubs, 100+ IP Cameras and other Network Devices. and would be helping to manage PHP, MySQL and other server types.

· Web Development Oversight: Assist in managing the Web Development Staff so the SDLC progresses in a timely fashion and development goals are met by each developer.

· SIP/VOIP: Must be able to work with SIP/VOIP to configure and maintain our UC-PBX (we use 3CX) running as a VM on-premise.

· Network Monitoring: Must configure, maintain, and monitor the entire infrastructure with our NOC tool (Zabbix).

· Web/SAAS Administration: Must configure, maintain, and monitor various on-premise/cloud websites (using WordPress/WooCommerce, custom sites, etc.), SAAS Services, and API Integrations (eBay, Amazon, payment gateways, etc.). Must implement and manage Microsoft 365 Apps, including their more modern apps like Power Automate, Planner, etc. Knowledge of Zoho Suite, such as Flow, Forms, and Inventory is a plus! Would also assist with PHP, MariaDB/MySQL and other server configurations.

· Backup Management: Must configure, maintain, and monitor Global Backups with Retention Schedules, Recovery Times & Test Restores.

· VPN Management: Must use various technologies in maintaining existing and new connections to multiple locations via SDWAN and traditional VPN tunnels (L2/L3 OpenVPN and IPsec).

· User Support: Must assist staff when necessary using on-premise apps such as MS Office, QuickBooks and off-site SAAS apps from Microsoft 365, Zoho, Appfolio, IGMS, Airbnb, Zillow, etc. Assist users with day-to-day software or hardware issues as needed.

· Setups /Updates/Documentation: Must perform workstation/server teardowns and setup as needed, manage Firmware Updates, Patches and Policies and maintain proper System/Network Documentation.

JOB DETAILS

· User & Access Management: (1) Create, modify, and delete user accounts (local/domain), (2) Manage group policies and permissions (e.g., Active Directory, LDAP), (3) Reset passwords and enforce password policies and (4) Audit user access and permissions regularly.

· System Maintenance & Monitoring: (1) Apply OS/software patches and updates (Windows/Linux/macOS), (2) Monitor system performance (CPU, RAM, disk, network), (3) Check logs for errors (Event Viewer, Syslog, SIEM tools), (4) Configure and maintain Zabbix for infrastructure monitoring, (5) Schedule and verify backups (full/incremental/differential) and (6) Test disaster recovery plans.

· Network Administration: (1) Configure and maintain firewalls, switches, and routers, (2) Monitor network traffic (Wireshark, Zabbix), (3) Troubleshoot connectivity issues (DNS, DHCP, VPN), (4) Manage IP addressing (IPv4, subnetting) and (5) Secure network services (SSH, TLS, VLANs).

· Security Management: (1) Install and update antivirus/anti-malware tools, (2) Apply security patches and vulnerability fixes, (3) Configure and monitor intrusion detection/prevention (IDS/IPS), (4) Perform security audits and compliance checks (e.g., CIS benchmarks) and (5) Investigate security incidents and breaches.

· Backup & Disaster Recovery: (1) Schedule automated backups (Veeam, Bacula, rsync), (2) Test backup restoration processes, (3) Maintain offsite/cloud backups, (4) Document and update disaster recovery (DR) plans and (5) Manage RAID configurations for redundancy.

· Storage Management: (1) Monitor and expand disk space (SAN/NAS/DAS), (2) Manage quotas and clean up old files, (3) Optimize storage performance (defragmentation, SSDs) and (4) Configure and maintain file servers (NFS, SMB/CIFS).

· Virtualization & Cloud Management: (1) Deploy and manage VMs, (2) Automate scaling and load balancing and (3) Migrate physical servers to virtual/cloud environments.

· Scripting & Automation: (1) Write shell scripts (Bash, PowerShell, etc.) for repetitive tasks and (2) Automate backups, log rotation, and reports.

· Hardware Maintenance: (1) Install, replace, or upgrade server hardware, (2) Troubleshoot faulty components (RAM, HDDs, PSUs) and (3) Manage data center cooling/power (UPS).

· Documentation & Reporting: (1) Maintain system documentation (network diagrams, passwords), (2) Document procedures (onboarding, troubleshooting) and (3) Generate usage/performance reports for management.

· Helpdesk & Support: (1) Troubleshoot user issues (email, printing, login), (2) Provide remote support (RDP, SSH, TeamViewer) and (3) Escalate complex issues to higher-tier support.

· Compliance & Auditing: (1) Ensure compliance with regulations (GDPR, HIPAA, PCI-DSS), (2) Conduct periodic access reviews and (3) Prepare for external audits.

· Monitoring & Alerting (Zabbix-Specific Tasks): (1) Install and configure Zabbix server, proxies, and agents, (2) Create custom monitoring templates for servers, networks, and applications, (3) Set up triggers and alerts for critical events (disk space, high CPU, downtime), (4) Integrate Zabbix with email/SMS/chat (Teams) notifications, (5) Optimize Zabbix performance (database tuning, housekeeping) and (6) Generate and analyze Zabbix dashboards and reports.

REQUIREMENTS AND DESIRED SKILLS

· Minimum 5 years recent experience with LAN and WAN administration, as a Systems Administrator, Network Administrator, Web Administrator or similar position with experience managing multi-site environments.

· Minimum 5 years recent experience with Microsoft Windows Server 2016 (or higher), Active Directory, Red Hat/Rocky/Ubuntu/Debian Linux OS and Windows 10 /11 installation and support experience.

· Minimum 3 years of Microsoft 365/Azure Administration that includes working with their apps/services and Exchange Online.

· Intermediate to advanced skills/expertise with router/firewall/VLAN management, DMZ configurations, network switching, DNS, DHCP, SNMP, SMTP (basic/advanced authentications) and network monitoring tools.

· Intermediate to advanced skills/expertise with SIP/VOIP and IP/UC PBX systems.

· Intermediate to advanced skills/expertise with virtualized environment management, web servers (both production and development), proxy servers, SQL database servers, web content and application filtering.

· Working knowledge of fault tolerance and high-availability setups.

· Practical knowledge of the OSI layer model and networking protocols (layer 2 and 3 in particular).

· Practical experience with integrated public cloud solutions such as AWS.

· Able to read, interpret, and draw conclusions from Syslog, log, etc.

· Ability to troubleshoot and resolve basic routing issues.

· Certifications are a plus (e.g., Microsoft, CompTIA, VCP).

Soft Skills: Strong problem-solving ability, cross-team collaboration, and effective communication.

Preferred Certifications:

· CompTIA Security+, MCSA, CISSP.

Education:

· High School Diploma

· Bachelor’s Degree in IT preferred but not required (Engineering, Computer Science or Information Systems) or equivalent experience.

Job Type: Full-time

Pay: $85,000.00 - $105,000.00 per year

Benefits:

• Paid time off

Work Location: In person