System Administrator

Pay: $45.00–$60.00/hr

Please note: This role requires in-office work in Temecula, CA, 3–4 days per week, and is not eligible for visa sponsorship or relocation assistance.

About ASM

At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we’ve grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack.

About the role

As a System Administrator, you’ll work closely with Development and Management to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You’ll take ownership of key systems, help shape the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance, and work with clients to help them understand our security posture.

What you’ll do

• Manage, maintain, and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and Palo Alto Networks firewalls
• Manage user and group access in Microsoft Entra ID and Active Directory to ensure appropriate access
• Own patch management for Windows Servers, VMware, and network devices, and continue automating it
• Maintain and improve system hardening standards based on industry best practices and known vulnerabilities
• Troubleshoot issues identified by our monitoring systems or reported by users, and see them through to resolution
• Support security and compliance audits and assessments, and help clients understand our security posture
• Perform maintenance during off-hours windows to minimize service disruption
• Respond to high-severity after-hours alerts that affect security or availability

Schedule and on-call

During onboarding, you may be in the office up to 5 days per week.

The role includes occasional evening and weekend maintenance work and participation in our 24/7 on-call rotation, which may include on-call shifts up to several times per week. Time spent handling after-hours calls is paid at standard overtime rates.

Who thrives here

You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You thrive on complex problems that don’t have obvious solutions, and you understand how systems work under the hood well enough to find root causes rather than just fix symptoms. You’re meticulous without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects.

Required

• 5+ years of experience in system administration or infrastructure engineering
• A strong understanding of computing fundamentals, including operating systems, file systems, and networking, as well as firewalls and security configurations
• Experience configuring and managing Windows Server and IIS environments using automation
• Experience administering and deploying resources in Azure
• Experience managing Active Directory, Group Policy, and Microsoft Entra ID
• VMware vSphere and vSAN configuration and management
• Experience managing Windows updates and patching at scale
• Proficiency automating tasks with PowerShell
• Experience working within compliance frameworks such as HIPAA, SOC 2, HITRUST, or FedRAMP, including supporting audits and assessments
• Strong written and verbal communication skills, including explaining technical topics to non-technical audiences

Nice to have

• Experience with Palo Alto Networks firewalls and Panorama
• Experience with reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door
• Experience setting up and managing site-to-site VPNs
• Infrastructure as code with Terraform
• Microsoft certifications in relevant technologies (e.g., AZ-104, AZ-500), or equivalent experience
• CISSP or equivalent security experience
• SQL Server administration experience

• Compensation: In accordance with California pay transparency requirements, the anticipated hourly pay range for this position is $45.00 to $60.00 per hour. Actual compensation will be determined based on factors such as experience, skills, and qualifications.
• A competitive PTO structure (non-accrual, granted immediately after the probationary period)
• 100% medical, dental, and vision coverage for all employees
• Several medical coverage options to choose from (free and at cost)
• Potential partial coverage for dependents (based on the plan chosen)
• Several supplemental benefit options (hospital confinement, accident insurance, disability, cancer insurance, etc.)
• FSA (Flexible Spending Account)
• DCFSA (Dependent Care Flexible Spending Account)
• 401(k) with employer match
• Weekly catered company lunches (Wednesdays)
• Company “All-In” collaboration days
• Summer and holiday parties
• A modern, regularly updated technology stack