Systems Administrator

System Administrator Amwest Services ON-SITE . We are seeking a 2nd System Administrator to work directly with our Senior System Administrator, IT staff, and Development Team in a multi-site environment. A strong willingness to embrace and apply AI in daily IT work is required. The position touches all layers of IT, including physical infrastructure, systems administration, networking, security, business applications, web environments, documentation, automation, internal AI tools, and operational support. Supporting full on-premise/hybrid environments across multiple locations. The ideal candidate should be resourceful, self-motivated, team-oriented, technically curious, and comfortable helping maintain secure, reliable, and well-documented systems. Responsibilities Network & Security Administration Working with platforms such as Ubiquiti/UniFi, pfSense, HAProxy, ACME / Let's Encrypt, OpenVPN, IPsec, WireGuard, and Linux-based network/security services Managing network and security infrastructure across multiple locations, including routers, switches, firewalls, VLANs, VPNs, NAT, routing, DMZs, SD-WAN, remote access, and firewall policies Supporting core network services, including

DNS, DHCP, SNMP, SMTP, SSH, TLS, SSL

certificates, site-to-site VPNs, and remote access services Configuring and maintaining reverse proxies, web-facing network paths, SSL termination, firewall rules, and public-facing service access Troubleshooting routing, switching, latency, packet flow, VPN tunnels, firewall rules, NAT, remote access, and connectivity issues Assisting with firewall, network device, and security policy updates, including firmware, patching, access control, MFA, IPS/IDS, and vulnerability remediation Systems & Virtualization Administration Working with platforms such as Proxmox, VMware, vCenter, Windows Server, Linux, Active Directory, Veeam Backup & Replication, LAMP servers, Grafana/Prometheus, NFS, SMB, and iSCSI Managing virtualization platforms, including VM provisioning, resource allocation, clustering, maintenance, and monitoring Supporting Windows and Linux servers used for business applications, web services, databases, Active Directory, backups, and internal infrastructure Administering Windows workstations, user environments, deployments, patching, troubleshooting, and lifecycle management Supporting Windows workstations, desktops, laptops, printers, scanners, mobile devices, and other office technology Managing NAS/storage environments for virtualization, backups, shared storage, and file services Assisting with workstation and server deployment, migration, teardown, patching, firmware updates, and lifecycle maintenance Supporting user account setup, password resets, MFA enrollment, permissions, onboarding, and offboarding

SIP / VOIP

Administration Working with our 3CX platform, experience in FreePBX, Asterisk, or similar PBX systems considered beneficial Configuring, maintaining, and troubleshooting

SIP/VOIP

systems, including our on-premise UC-PBX environment Managing SIP trunks, extensions, call routing, queues, voicemail, desk phones, softphones, and remote users Troubleshooting call quality, registration issues, and SIP service availability Assisting with PBX upgrades, backups, monitoring, failover, and recovery planning Monitoring & Alerting Working with monitoring platforms such as Grafana/Prometheus, with experience in other NOC and monitoring tools considered helpful Monitoring servers, networks, services, storage, uptime, application performance, VPN tunnel status, and critical infrastructure health Creating alerts for outages, resource usage, failed services, backup issues, security events, and performance problems Reviewing dashboards, logs, metrics, traffic patterns, IPS/IDS events, and historical performance data Troubleshooting performance, availability, network, and infrastructure issues based on monitoring data Maintaining monitoring templates, thresholds, dashboards, alert rules, and notification procedures Web, SaaS & Application Support Working with platforms such as WordPress/WooCommerce, PHP, MySQL/MariaDB, Microsoft 365, Exchange Online, Power Automate, Planner, Zoho Suite, marketplace and payment gateway integrations Supporting on-premise and cloud-based websites, SaaS platforms, API integrations, and business application environments Assisting with custom websites, internally developed applications, updates, configuration changes, user access management, and general platform maintenance Assisting with production testing, deployment verification, plugin/configuration changes, database connectivity checks, and post-update issue review Backup & Disaster Recovery Working with backup and replication tools such as Veeam, rsync, local repositories, off-site backups, and cloud backup solutions Ensuring critical servers, virtual machines, files, databases, and business systems are properly backed up, replicated, and recoverable Managing backup jobs, replication tasks, retention schedules, failed backups, and recovery alerts Performing test restores and restoration procedures to verify systems and data can be recovered when needed Maintaining recovery procedures, restore documentation, and disaster recovery plans Documentation & Procedures Maintaining system documentation, network diagrams, infrastructure inventories, access procedures, and troubleshooting notes Documenting server, network, VPN, backup, monitoring, and application support procedures Tracking configuration changes, user access, permissions, assets, and onboarding/offboarding steps Requirements & Desired Skills Minimum 5 years recent experience with LAN/WAN administration as a System Administrator, Network Administrator, Web Administrator, or similar role Experience supporting multi-site environments and on-premise infrastructure Minimum 5 years recent experience with Windows Server 2016 or higher, Windows 10/11 support, and troubleshooting Hands-on background with Active Directory, group policy, user accounts, permissions, and access management Proficiency with Linux operating systems, including Red Hat, Rocky Linux, Ubuntu, Debian, or similar distributions Minimum 3 years of Microsoft 365 / Azure administration, including Exchange Online and related Microsoft cloud services Intermediate to advanced knowledge of routers, firewalls, VLANs, VPNs, DMZs, switching, DNS, DHCP, SNMP, and SMTP Familiarity with SIP/VOIP and

IP/UC PBX

systems, including 3CX, FreePBX, Asterisk, or similar platforms Experience managing virtualization platforms such as Proxmox, VMware, vCenter, Xen Orchestra, or similar Experience supporting web infrastructure, including web servers, reverse proxies, SQL database servers, WordPress/WooCommerce, and related eCommerce environments Background with backup and disaster recovery, including backup replication, restoration, retention schedules, NAS storage, and restore testing Experience with Grafana/Prometheus, Zabbix, or similar monitoring tools Practical understanding of OSI model, Layer 2 / Layer 3 networking, routing, switching, subnetting, and connectivity troubleshooting Ability to review and troubleshoot Syslog, Event Viewer, application logs, firewall logs, server logs, and monitoring alerts Certifications are a plus, including Microsoft, CompTIA, VCP, Security+, MCSA, or CISSP, Linux Essentials/RHCSA or similar Physical Requirements This position may occasionally require working in server rooms or other office locations, including moving equipment, installing hardware, running cables, and assisting with workstation or server setup. Education High School Diploma required Bachelor's Degree in IT, Engineering, Computer Science, Information Systems, or equivalent experience preferred but not required

Job Type:

Full-time Pay:

$75,000.00 - $80,000.00 per year

Benefits:

Paid time off

Education:

Bachelor's (Preferred)

Experience:

System administration: 5 years (Required) Network administration: 5 years (Required)

Linux:

3 years (Required) Web services: 2 years (Required)

Microsoft Windows Server:

3 years (Required)

VoIP:

2 years (Preferred)

Virtualization:

3 years (Preferred) Computer hardware: 3 years (Required) Disaster recovery: 1 year (Required)

Work Location:

In person