Network/Systems Administrator

You in this Role

The Network / Systems Administrator is a individual-contributor role within a lean IT department of three. You will own the day-to-day administration, monitoring, and troubleshooting of Unusual Machines' enterprise network and systems infrastructure across all seven sites. Working directly with the Director of IT, you will be a primary subject matter expert for firewall, switching, wireless, identity, cloud, and server infrastructure - while supporting compliance obligations and contributing to ongoing strategic IT buildout initiatives.

This role is ideal for a technically deep, self-directed administrator who thrives in a fast-moving environment, takes genuine ownership of infrastructure, and understands the discipline required in regulated industries.

What You'll Do

• Administer and maintain the enterprise firewall environment: Palo Alto, managed via Panorama; enforce security policy, NAT, zone architecture, and URL/App-ID rules
• Manage Prisma Access for remote user connectivity and ZTNA policy enforcement
• Operate and maintain Cisco Catalyst switching infrastructure across all sites - VLANs, trunking, STP, QoS, port security, and IOS-XE configuration management
• Administer Meraki MR46 wireless access points and MX68 LTE failover appliances at branch locations via Meraki Dashboard
• Maintain Spectrum Enterprise Metro Ethernet WAN connectivity across all seven sites; coordinate with carriers on circuit issues and escalations
• Manage iSCSI storage network on dedicated VLAN 61 (10.10.61.0/24) with MTU 9000 jumbo frame configuration
• Support DNS operations managed via Cloudflare (registrar and authoritative nameservers for unusualmachines.com)

Systems & Cloud Infrastructure

• Administer Microsoft 365 tenant (unusualmachines.com, E3 licensing) including Exchange Online, SharePoint Online, Teams, and OneDrive
• Manage Entra ID P2: Conditional Access policy authoring and tuning, Privileged Identity Management (PIM), Identity Protection risk policies, and SCIM-based provisioning integrations
• Operate Microsoft Intune for endpoint policy management, compliance baselines, Autopilot provisioning, and application deployment (rollout in progress)
• Administer Windows Server infrastructure including Active Directory, DNS, DHCP, Group Policy, and file services
• Manage NAS/storage infrastructure
• Operate and maintain backup and disaster recovery processes; ensure recovery objectives are met and tested

ITSM & Operations

• Operate within Freshservice Enterprise ITSM platform: own infrastructure-tier tickets, contribute to CMDB asset accuracy, document changes per change management process
• Maintain network and systems documentation to a professional standard - configuration baselines, topology diagrams, runbooks, and change records
• Participate in on-call rotation and respond to after-hours infrastructure incidents as needed across a seven-site footprint
• Provide assistance and escalation support to Desktop Helpdesk staff for network, identity, and server-related issues

What You'll Bring

• 5+ years of hands-on experience in a network/systems administration role in an enterprise environment
• Palo Alto Networks firewall administration: PAN-OS security policy, NAT, zone design, App-ID, URL filtering - Panorama experience strongly preferred
• Cisco Catalyst switching: IOS-XE, VLAN configuration, trunking, STP, QoS - production experience required
• Microsoft 365 back-end administration: Exchange Online, SharePoint, Teams, licensing, and service health management
• Entra ID / Azure AD: Conditional Access, PIM, Identity Protection, SCIM provisioning, group-based access management
• Windows Server administration: Active Directory, DNS, DHCP, GPO, and file services
• Familiarity with backup/DR concepts and tools; ability to design and verify recovery procedures
• PowerShell scripting for M365, Entra ID, and Windows Server automation tasks
• Experience working in a compliance-driven environment (SOX, ITAR, HIPAA, PCI, or equivalent)
• Strong documentation discipline - you write things down and keep them current

Preferred Qualifications

• Palo Alto PCNSA or PCNSE certification
• Cisco CCNA or CCNP certification
• Microsoft certifications: MS-102 (M365 Administrator), SC-300 (Identity & Access), AZ-104 (Azure Administrator)
• Meraki wireless and SD-WAN administration experience
• Microsoft Intune / Autopilot / Endpoint Manager experience
• Tenable.io or equivalent vulnerability management platform experience
• Prisma Access / GlobalProtect VPN administration
• Experience with iSCSI storage networks and NAS platforms (Synology, NetApp, Dell, Ubiquiti ENAS)
• Experience supporting multi-site WAN environments with Metro Ethernet or MPLS
• Familiarity with Freshservice or comparable enterprise ITSM platforms