System Administrator – IT Operations

About the role

Malleum is seeking a client‑facing System Administrator to provide hands‑on administration, maintenance, and operational support for client endpoints, servers, and Microsoft 365 environments. The role blends strong technical expertise with professional client interaction, supporting both routine operations and active incident‑response engagements.

Key responsibilities

• Administer, monitor and maintain client endpoints, servers and Microsoft 365/Entra ID environments.
• Implement and operate Microsoft Intune, including enrollment, compliance policies, configuration profiles, Win32/Store app packaging, Autopilot and endpoint hardening.
• Configure, test and verify backup, disaster‑recovery and business‑continuity solutions, performing regular restores.
• Lead patch management, software deployment and configuration management across servers and endpoints.
• Provide multi‑client support via ConnectWise PSA/RMM, triaging and resolving tickets while meeting SLAs.
• Administer Active Directory, Group Policy, file/print services and virtualization platforms (VMware, Hyper‑V).
• Enforce hardening standards aligned with CIS Benchmarks, NIST 800‑171 and ITSG‑33.
• Standardize provisioning, onboarding/off‑boarding and access‑control workflows.
• Support active incident‑response engagements: re‑image, rebuild, restore, deploy endpoint tooling and assist with containment, eradication and recovery.
• Work evenings, weekends and on short notice during active attacks.
• Produce high‑quality client deliverables such as documentation, runbooks, SOPs and status reports.

Required profile

• Intermediate‑level practitioner with strong systems and endpoint administration experience.
• Comfortable working in sovereign, regulated and cleared client environments.
• Excellent client‑facing skills and ability to work under pressure during crises.
• Willingness to work odd hours and travel to client sites when required.

Required skills

• Microsoft 365 / Entra ID administration
• Microsoft Intune, Autopilot, Win32 app packaging
• Backup, disaster‑recovery and business‑continuity tools
• Patch management and software deployment
• ConnectWise PSA/RMM ticketing
• Active Directory, Group Policy
• VMware and Hyper‑V virtualization
• CIS Benchmarks, NIST 800‑171, ITSG‑33 hardening standards
• Incident response support (re‑imaging, system restore, endpoint tooling)

What we offer

• Opportunity to work with high‑impact national security and critical infrastructure clients.
• Hybrid work model – remote daily with occasional onsite engagements.
• Professional development in cyber‑defense and incident response.