Systems Administrator

Key Responsibilities

Virtualization and infrastructure

∙ Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.

∙ Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.

∙ Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.

∙ Maintain datacenter asset records and support the eventual decommission of on-premises hardware.

∙ Manage physical servers in the office location and support stabilization

Firewalls, load balancing and network

∙ Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.

∙ Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.

∙ Upgrade and maintain network switches.

∙ Perform the recurring firewall rule review required under PCI DSS.

∙ Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.

∙ Support VPN operations and troubleshoot VPN authentication issues.

Web hosting (IIS) and dealer site operations

∙ Administer IIS on Windows Server across production, demo and non-production environments.

∙ Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.

∙ Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.

∙ Investigate dealer site outages and certificate errors, and restore service quickly.

∙ Refresh image and content caches and support content-delivery issues.

Cloudflare, DNS and certificates

∙ Troubleshoot and configure Cloudflare: custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.

∙ Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.

∙ Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.

∙ Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.

∙ Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.

Security, vulnerability and compliance operations

∙ Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.

∙ Track and retire end-of-life software across the estate: runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.

∙ Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.

∙ Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).

∙ Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.

∙ Follow change management for all production changes and maintain accurate records.

Access and Windows administration

∙ Administer Active Directory, Group Policy and Windows Server, including patching and hardening.

∙ Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.

∙ Resolve RDP, login and server-access issues for internal teams.

∙ Support SFTP/FTP services used for OEM and dealer data feeds.

Transition and handoff

∙ Write and maintain runbooks for every system you own, so no knowledge is held by a single person.

∙ Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.

∙ Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.