Systems Administrator

Key Responsibilities

Virtualization and infrastructure

• Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.
• Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.
• Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.
• Maintain datacenter asset records and support the eventual decommission of on-premises hardware.
• Manage physical servers in the office location and support stabilization

Firewalls, load balancing and network

• Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.
• Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.
• Upgrade and maintain network switches.
• Perform the recurring firewall rule review required under PCI DSS.
• Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.
• Support VPN operations and troubleshoot VPN authentication issues.

Web hosting (IIS) and dealer site operations

• Administer IIS on Windows Server across production, demo and non-production environments.
• Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.
• Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.
• Investigate dealer site outages and certificate errors, and restore service quickly.
• Refresh image and content caches and support content-delivery issues.

Cloudflare, DNS and certificates

Troubleshoot and configure Cloudflare

custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.

• Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.
• Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.
• Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.
• Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.

Security, vulnerability and compliance operations

• Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.

Track and retire end-of-life software across the estate

runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.

• Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.
• Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).
• Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.
• Follow change management for all production changes and maintain accurate records.

Access and Windows administration

• Administer Active Directory, Group Policy and Windows Server, including patching and hardening.
• Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.
• Resolve RDP, login and server-access issues for internal teams.
• Support SFTP/FTP services used for OEM and dealer data feeds.

Transition and handoff

• Write and maintain runbooks for every system you own, so no knowledge is held by a single person.
• Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.
• Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.