Senior System Administrator – IT Infrastructure, Security

This is a fully remote position, open to applicants in India.

📋 Description

• Act as the lead engineer and primary escalation contact for Contour's inaugural in-house IT team.

• Manage and enhance Google Workspace, Slack, HubSpot, Rippling, the LMS, identity and device platforms, and sanctioned AI platforms.

• Address L2 and L3 escalations, determine root causes, and develop runbooks for recurring challenges.

• Design and implement identity and access controls, including role-based access, SSO, MFA, 2SV, periodic access reviews, and offboarding procedures.

• Oversee macOS and Windows device fleets, which primarily consist of BYOD devices.

• Manage campus networks, CCTV, and door access from India utilizing UniFi or similar tools; handle MSP scope and escalations.

• Take responsibility for endpoint, email, domain, credential, and vendor security posture.

• Direct incident response for security incidents and outages; maintain timelines, compose RCAs, and monitor remediation efforts.

• Enforce production change records with necessary approvals, rollback plans, and verification steps.

• Document systems and create instructional guides for future administrators.

• Analyze ticket trends, availability, license usage, unused seats, security posture, risks, costs, and provide recommendations to leadership.

• Develop monitored Make.com or Zapier automations with error handling and alerting mechanisms.

• Facilitate practical AI adoption throughout the team.

• Mentor and assess the work of the systems engineer.

• Evaluate and suggest tools beyond the fixed HubSpot platform.

⛳️ Requirements

• A minimum of four years in systems administration, systems engineering, or senior IT support.

• At least two years serving as the accountable administrator for a core business system.

• Administrator-level experience with Google Workspace or Microsoft 365 supporting several hundred users or more.

• Proficient in designing identity and access controls, including SSO, MFA, an identity provider, and least privilege principles.

• Handled security tasks such as hardening, access reviews, patching, endpoint protection, and managed at least one security incident from detection to documentation.

• Experience in networking diagnosis, including VLANs, routing, wireless design, and hands-on experience with UniFi or similar tools.

• Managed endpoints across macOS and Windows at scale, including BYOD devices.

• Familiarity with a formal change management process, including at least one successful rollback.

• Proficient scripting skills in Python, JavaScript, or Google Apps Script.

• Ability to articulate technical trade-offs in straightforward language for executives.

• Comfortable working with the time difference between India and Australia.

• Nice to have: hands-on experience with UniFi, CCTV, or door access control systems.

• Nice to have: administration experience with HubSpot, Rippling, Aircall, or Notion.

• Nice to have: experience with Google Apps Script, Zapier, or Make.com scenarios, or basic Python programming.

• Nice to have: experience in education or similar environments managing student or minor data.

• Nice to have: relevant diploma, degree, or certification such as CompTIA A+, Network+, Microsoft 365 Fundamentals, or Google Workspace Administrator.

🏝️ Benefits

• Fully remote position, available anywhere in India.

• No travel needed; campus hardware is managed through the MSP and onshore team.

• Compensation details are shared early in the hiring process.

• The hiring process includes a written screen, a short video response, a practical task, and two conversations.