Salary : $124,555.18 - $167,634.48 Annually
Location : 375 Beale Street, San Francisco, CA
Job Type: Regular
Remote Employment: Flexible/Hybrid
Job Number: 206
Section: CART - Capital Delivery, Asset Management, Roadside Tolling
Opening Date: 10/09/2026
Closing Date: 10/25/2026 11:55 PM Pacific
ABOUT THE ROLEUnder the direction of the Bay Area Toll Authority (BATA) Information Technology Manager, the Systems Administrator provides server, identity, and security administration in a primarily Microsoft Server and Azure environment with a small number of Linux systems. This is a broad role with an emphasis on identity, security, and automation. The position helps build a new configuration standards and automation program, and will support facility monitoring technology as new toll facilities come online. This is one of two systems administrator positions on a seven-person IT infrastructure team within the Capital Delivery, Asset Management, and Roadside Tolling (CART) section, alongside network engineers and a technical project manager. Responsibilities are divided between the two administrators and reviewed as the work changes.
The systems supported by this position keep toll collection running across the Bay Area state-owned bridges and several of the region's Express Lane corridors, including equipment at toll plazas and roadside facilities. This is a 24/7 operation, though after-hours escalations are rare and have not required a rotating on-call schedule. The position is expected to respond to major system failures and security incidents when they occur.
ESSENTIAL DUTIES & RESPONSIBILITIESSystems Administrator responsibilities include, but are not limited to, the following:
- Administering identity and access platforms, including Active Directory, Entra, and Okta; managing account lifecycle, group membership, and multifactor authentication administration
- Developing configuration standards, building automated compliance auditing against those standards, and maintaining systems infrastructure documentation
- Administering endpoint security and file integrity monitoring platforms; performing vulnerability remediation and system hardening
- Administering on-premises and cloud server infrastructure, storage, operating systems, and system software, including supporting migration of services to Azure
- Monitoring system performance, capacity, availability, and security, and responding promptly to alerts and incidents
- Managing patch and update cycles across the server and endpoint estate, and tracking platform lifecycle to plan replacement of systems approaching vendor end of support
- Administering backup and recovery services, including backup design and scheduling, periodic restore testing and verification, and recovery documentation
- Supporting facility technology systems as new toll facilities come online, including building management, environmental monitoring, camera and video, and physical access control
- Supporting agency technology projects through infrastructure and security design review, requirements input, and technical coordination with vendors
- Providing after-hours response for major system failures and security incidents, and performing occasional on-site work at toll plazas and roadside facilities
- Performing other job-related tasks and duties as needed or assigned by the Section
QUALIFICATIONSKNOWLEDGE, SKILLS, AND ABILITIES- Experience administering enterprise identity platforms such as Okta or Entra, including hybrid integration with on-premises Active Directory
- Experience with system hardening and configuration baselines
- Proficiency with Microsoft PowerShell for system administration and automation
- Experience administering Microsoft Azure
- Experience administering enterprise backup and recovery, including restore testing and verification
- Experience responding to security incidents and alerts from endpoint detection or SIEM platforms
- Fundamental understanding of networking, including routing, switching, and firewalls
- Fundamental understanding of common protocols (such as, but not limited to, LDAP, SMTP, TCP/IP, RADIUS, DNS, DHCP, SAML, and SSL/TLS)
- Strong analytical and problem-solving skills, evidenced by a history of enhancing system performance and resolving complex technical issues
- Valid California Class C driver's license and a safe driving record. This position requires occasional travel to toll plazas and roadside facilities, which are not served by public transit. Rental vehicles are available for planned site work; the position requires the ability to reach a site on short notice for unplanned or emergency response.
MINIMUM QUALIFICATIONSEducation & Experience: Equivalent to completion of the twelfth (12th) grade and five (5) years of increasingly responsible experience conducting needs and systems analysis and planning, design, development, implementation, configuration, and maintenance of information technology applications, systems, and/or infrastructure
Licenses or Certificates: Valid California Class C driver's license and a safe driving record.
PREFERRED QUALIFICATIONSExperience:
- Experience with configuration management tooling such as Ansible, Puppet, or Chef
- Experience using version control (Git) for infrastructure documentation or automation code
- Experience with vulnerability management tooling and remediation workflows
- Security certifications such as Security+, GSEC, or CISSP
- Experience administering Linux systems
- Experience with enterprise monitoring tools (SolarWinds, Splunk, or similar)
- Experience with operational technology or building systems (building management, environmental monitoring, or physical security platforms)
- Experience with Nutanix
- Experience with LAN hardware including patch panels, switches, fiber optics, and Ethernet wiring
IMPORTANT INFORMATIONHOW TO APPLYTo apply for this outstanding opportunity, please use this link:
EMPLOYMENT REQUIREMENTSSuccessful completion of a background check, professional references and the Employment Eligibility Verification Form I-9.
DISABILITYThe Human Resources Department will make reasonable efforts in the recruitment or skills assessment process to accommodate applicants with disabilities. If selected for an interview or testing, and you require accommodation, please notify the Human Resources Department when confirming your interview or test.
01
Briefly describe how your previous experience and education qualifies you for this position. (Please refer to Qualifications and/or Knowledge, Skills and Abilities in the job description when answering this question.) **250-word maximum.
02
Describe your experience administering an enterprise identity platform. What have you done to reduce manual effort in account provisioning, access changes, or authentication support?
03
Describe how you would bring a group of existing servers into compliance with a published security baseline. How would you handle a control you could not apply as written?
04
Describe a system or service you owned end to end. What condition was it in when you took it over, and what did you change while you owned it?
Required Question
