7+ years in systems administration or infrastructure engineering, with 3+ years in a senior or lead role.
Proficient in hybrid Microsoft 365, Intune, and Azure environments.
Hands-on experience with Windows Server, Ubuntu, and Red Hat systems.
Familiarity with virtualization technologies like vSphere and SAN storage solutions.
Experience managing AWS infrastructure and Kubernetes deployments.
Strong skills in Layer 2/3 networking and security tools.
Proficient in PowerShell and Bash scripting.
Responsibilities
Run and manage Microsoft 365, Entra ID, and Azure in a hybrid setup.
Oversee device management in Intune, including compliance and app deployment.
Build and maintain Windows and Linux servers, ensuring security and performance.
Manage virtualization and SAN storage, focusing on provisioning and capacity planning.
Administer AWS infrastructure, ensuring effective access control and monitoring.
Operate Kubernetes clusters, handling builds, upgrades, and troubleshooting.
Design and maintain network segmentation across various zones.
Benefits
Opportunity to work in a fast-paced, innovative environment.
Engage in custom solution development for unique challenges.
Mentorship opportunities for junior IT staff.
Full-time onsite presence fosters close collaboration.
Access to cutting-edge technology and R&D facilities.
Full Job Description
SENIOR IT SYSTEMS ENGINEER
As a Senior IT Systems Engineer, you will build the systems that connect our people, our factory, and our data: identity and endpoints, servers and storage, cloud and Kubernetes, the network, and the security layer over all of it. IT here is part of the technology we build, so it gets the same appetite for custom solutions to problems nobody has solved yet. Freeform is scaling rapidly across headcount, locations, and new technology coming online, so we're looking for someone who's excited to move fast and build the plane as we fly it. We want someone with broad skills, a "no job too big or small" mentality, and a taste for building.
Responsibilities:
Run Microsoft 365, Entra ID, and Azure in a hybrid setup with on-prem Active Directory, including Entra Connect, conditional access, RBAC, and licensing
Manage the device fleet in Intune: enrollment, compliance, app deployment, Autopilot, and patching
Build and maintain Windows Server (AD DS, DNS, DHCP, Group Policy, RADIUS/NPS) and hardened Ubuntu and Red Hat servers
Run virtualization and SAN storage (Pure Storage, HPE 3PAR over iSCSI and NFS), from provisioning and replication to capacity planning
Run and manage AWS infrastructure, including EKS, S3, IAM and VPC networking, with ownership of access control, monitoring and cost.
Administer Kubernetes both on-prem and in EKS: cluster builds and upgrades, networking and ingress, storage, RBAC, and troubleshooting workloads.
Design and maintain the Layer 2/3 network and own segmentation across user, server, management, OT, and guest zones
Operate Defender XDR, Sentinel, and pfSense firewalls: tune detections, investigate incidents, and drive vulnerability remediation and least-privilege access
Design and build custom solutions where off-the-shelf tools fall short, and automate repetitive work
Act as the senior escalation point for infrastructure incidents and lead root-cause analysis
Document what you build in runbooks and diagrams, and mentor junior IT staff
Join the on-call rotation and planned after-hours maintenance windows
Basic Qualifications:
7+ years in systems administration or infrastructure engineering, 3+ in a senior or lead role, owning a mixed Windows, Linux, cloud, and network environment
Experience with the below technologies including administering and troubleshooting
Hybrid Microsoft 365, Intune, and Azure: on-prem AD synced to Entra ID, hybrid join, co-existence, and migration
Windows Server DNS, DHCP, and RADIUS/NPS in production
Ubuntu and Red Hat: systemd, storage, networking, hardening, and command-line troubleshooting
vSphere, Hyper-V, or OpenShift, plus SAN storage over iSCSI and NFS (hands-on with Pure Storage and HPE 3PAR)
AWS (EKS, S3, IAM) / Azure / GCP
Kubernetes (on-prem and in the cloud)
Layer 2/3 networking: VLANs, ACLs, segmentation, MLAG, and LACP
Defender XDR, Sentinel, and pfSense administration
PowerShell and Bash scripting experience
Clear written communication with technical and non-technical audiences
Nice to Have:
Experience with HashiCorp Vault and Argo CD
Experience with Ansible
Python scripting experience
Experience administering Siemens Teamcenter
Experience with Microsoft SQL Server administration
Hands-on experience deploying physical security systems (DVR/NVR, CCTV, access control)
AI fluency: practical use of AI tools for scripting, troubleshooting, and documentation, with sound judgment on data handling
Degree in computer information systems, computer science, or computer engineering
Location:
Based in Hawthorne, our vertically integrated facility brings technology development, R&D, and production together under one roof. We operate at the center of LA's deep tech ecosystem, surrounded by some of the most ambitious hardware innovation happening anywhere in the country.
Our fast-paced, cross-functional environment is built on close collaboration, and as such, this role requires full-time onsite presence (five days a week), with very limited exceptions.
