← All roles

Staff Systems Administrator (R5995)

Shield AI· Enterprise Operations Division – Service Delivery
Apply on company site
Hybrid (London)Full Time EmployeePosted 4w ago

About the role

Senior individual contributor responsible for accountable technical ownership of enterprise IT infrastructure and end-user computing within a dedicated, security-sensitive entity environment. Design, implement, operate, secure, and continuously improve on-premises systems and cloud platforms while maintaining compliance, audit readiness, and robust service delivery.

Responsibilities

  • Own and operate on-premises and cloud infrastructure, including physical and virtual servers, storage, backup platforms, identity services, core network services, and enterprise applications.
  • Administer Azure and/or AWS environments with availability, capacity, performance, monitoring, secure configuration, backup, and disaster-recovery readiness.
  • Define technical roadmaps, identify operational risks, and drive modernization, standardization, scalability, and resilience improvements.
  • Maintain architecture diagrams, inventories, operating procedures, recovery documentation, configuration records, and service ownership information.
  • Plan and execute infrastructure changes using disciplined change, testing, rollback, and post-implementation review practices.
  • Operate technology services for a dedicated legal or operating entity with explicit separation from other corporate environments.
  • Implement and maintain trust boundaries, network segmentation, firewall policies, secure remote access, administrative tiers, and controlled cross-entity connectivity.
  • Ensure data, devices, accounts, cloud resources, and third-party access remain within authorized boundaries.
  • Collaborate with Security, Legal, Compliance, Privacy, and corporate IT teams to translate obligations into practical controls and evidence.
  • Document and validate boundary controls, data flows, privileged access paths, and intercompany dependencies; drive remediation to closure.
  • Support local business continuity and operational autonomy while aligning with global architecture and governance.
  • Establish, implement, and maintain secure configuration baselines for Windows, macOS, Linux, servers, network devices, cloud services, and endpoint-management platforms.
  • Own patching and vulnerability-remediation workflows with risk-based prioritization and status reporting.
  • Administer endpoint protections (full-disk encryption, EDR/XDR, host firewall, secure boot, etc.).
  • Harden identity and administrative access with RBAC, MFA, privileged-access separation, conditional access, service-account governance, and reviews.
  • Maintain logging, alerting, time synchronization, configuration monitoring, backup protection, and security telemetry for detection and auditability.
  • Collect and maintain audit-ready evidence; support audits, control assessments, and remediation plans.
  • Participate in incident response, containment, recovery, root-cause analysis, and corrective actions for security events.
  • Manage technical risks and policy exceptions with compensating controls and closure plans.
  • Administer Active Directory and Entra ID or equivalent identity platforms, including lifecycle, authentication, authorization, federation, and policy enforcement.
  • Manage Windows, macOS, and Linux endpoints through Intune, Jamf, or equivalent; ensure secure provisioning and lifecycle management.
  • Lead onboarding and offboarding activities including device provisioning, access configuration, license assignment, and asset recovery.
  • Provide advanced troubleshooting and escalation support for employees and engineering environments.
  • Own IT asset lifecycle, software licensing, vendor coordination, procurement support, and secure disposal.
  • Use scripting and automation to improve consistency and reporting.
  • Contribute reusable infrastructure patterns and documentation for scalable use across similar environments.

Qualifications

  • 8+ years of experience in systems administration, infrastructure engineering, or related discipline.
  • Proven track record owning production IT infrastructure and end-user environments in complex, regulated, or security-sensitive settings.
  • Strong hands-on expertise with Windows, macOS, Linux; server administration and virtualization; Azure and/or AWS; and Active Directory and Entra ID.
  • Experience implementing system and endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, EDR/XDR, and least-privilege controls.
  • Experience supporting security or compliance programs and producing evidence for audits or regulatory requirements.
  • Strong networking knowledge (TCP/IP, DNS, DHCP, VLANs, routing, VPNs, segmentation, firewall policy, secure remote access).
  • Experience with endpoint management platforms such as Intune, Jamf, or equivalent.
  • Experience implementing and testing monitoring, backup, disaster recovery, and business-continuity capabilities.
  • Excellent documentation, prioritization, risk communication, and stakeholder-management skills.
  • Ability to support time-sensitive operational needs and participate in after-hours maintenance or incident response.

Skills

Required:WindowsmacOSLinuxAzureAWSActive Directory / Entra IDIntune / JamfNetworkingSecurity and Compliance
Nice to have:Scripting (PowerShell, Bash, Python)

Benefits

  • Comprehensive total rewards package aligned to country office location.
Last updated Oct 23, 2026. Interested? Apply on the company site.

About Shield AI

Autonomy for the world.

Our mission is to protect service members and civilians with intelligent systems.

AerospaceAutonomyDefenseliquid-ai-recruiting-targetsetter-30setter-30-2026-q1
Company profileWebsite

More open roles at Shield AI