IT Systems Administrator

The IT Systems Administrator is a hands-on position which will own and operate the tools, endpoints, and infrastructure that keep our people, our network, and our field deployments running securely and reliably. You'll be the dedicated LEXSO-side counterpart to our parent company's IT function, building and administering the systems specific to our environment while coordinating with Constellis IT on shared services. This is a builder role: you'll stand up new tooling, tighten existing processes, and keep clear, current documentation and records as the company scales.

• →Own the full lifecycle of company laptops and devices including provisioning, configuration, inventory, and retirement
• →Deploy and administer a mobile device management (MDM) platform across the Mac fleet
• →Enforce disk encryption, endpoint protection, firewall settings, and patch compliance
• →Maintain an accurate, current asset inventory across all issued hardware
• →Administer user account lifecycle across core systems including onboarding, role changes, and offboarding
• →Enforce multi-factor authentication and access control standards across company systems
• →Manage least-privilege access reviews and local admin rights on endpoints
• →Support on-premises server stack installation, configuration, and troubleshooting at customer sites, on an as-needed basis
• →Provide network infrastructure support with switches, firewalls, VPN, connectivity for field and office environments, as other issues as they arise
• →Partner with Field Ops and delivery engineering on installation and integration issues in the field when needed
• →Stand up and monitor centralized logging and alerting across endpoints and infrastructure
• →Manage patch and vulnerability remediation cadence, with regular status reporting
• →Own backup procedures and removable media handling practices
• →Write and maintain clear IT policies, procedures, and system documentation
• →Produce accurate, current records and evidence on request to support internal reviews and customer or partner due diligence
• →Serve as the primary point of contact between LEXSO and Constellis IT for shared services and tooling decisions
• →Evaluate and recommend new tools as the company's needs grow
• →Communicate clearly with leadership on project status, risks, and tradeoffs

• 4+ years in a hands-on IT systems administrator, systems engineer, or infrastructure role
• Direct experience deploying and managing Apple's MDM platform for a Mac-based fleet
• Experience with Jamf, Kandji, Mosyle, or Intune is a plus
• Working knowledge of endpoint hardening, disk encryption, endpoint protection/EDR, firewall configuration, and patch management
• Experience administering identity and access management, including MFA enforcement and account lifecycle processes
• Comfort with basic network infrastructure including switches, firewalls, VPN, troubleshooting connectivity issues
• Experience administering Google Workspace, or demonstrated ability to learn it quickly
• Experience writing and maintaining IT policies, procedures, and technical documentation
• Strong written and verbal communication and the ability to explain technical tradeoffs to non-technical stakeholders
• Self-directed and comfortable owning a workstream independently in a small, fast moving team
• Preferred qualifications:
• Experience supporting IT for a government contractor or other regulated environment
• Experience with centralized logging/SIEM tooling and basic log review practices
• Experience supporting field or on-site deployments, not just a remote environment
• Prior experience as the sole or founding IT hire at a small or growing company