{"id":2810698,"url":"https://alion.io/job/enactor-senior-system-administrator","title":"Senior System Administrator","company":{"id":4446377,"name":"Enactor","domain":"enactor.co","url":"https://alion.io/company/enactor","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rooster","truth_index":{"grade":"D","score":40,"open_postings":20,"ghost_share":1,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-20T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":["LK"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3299},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Linux","optional":false},{"name":"PowerShell","optional":false},{"name":"Puppet","optional":false},{"name":"SentinelOne","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Azure","optional":true},{"name":"Configuration Management","optional":true},{"name":"Microsoft Entra ID","optional":true}],"status":"live","first_seen_at":"2026-06-11T06:12:09Z","employer_posted_date":"2026-07-08","last_verified_at":"2026-10-20T10:18:03Z","board_verified":true,"closed_at":null,"days_open":131,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":130},"description":"Work mode: Full-time on-siteSenior System Administrator\nLaptop Provisioning, Maintenance & Asset Lifecycle (Windows, Linux, macOS)\n# About the Role\nWe are looking for a Senior System Administrator to be the single owner of our end-user computing environment across Windows, Linux, and macOS. This is a standalone role - you will define the standards, run the day-to-day, and be the escalation point all in one. You will own laptop provisioning, ongoing maintenance, security hygiene, and the full asset lifecycle, making sure every employee has a reliable, secure, and well-configured machine from day one through decommissioning.\nOur stack is JumpCloud for MDM (with Apple Business Manager for Mac zero-touch and light-touch Windows provisioning via JumpCloud), Google Workspace for identity and email, and Microsoft Azure / Entra ID for Microsoft 365.\n# Key Responsibilities\n## Laptop Provisioning & Onboarding\n· Image, configure, and deploy new laptops (Windows, Linux, macOS) for joiners, ensuring devices are ready on or before the start date.\n· Maintain standard build configurations and automated provisioning workflows in JumpCloud, using Apple Business Manager for Mac zero-touch enrolment and light-touch Windows provisioning via JumpCloud; manage Linux baselines with Ansible or equivalent.\n· Enrol devices into MDM, domain, and endpoint security platforms; configure VPN, Wi-Fi, certificates, and SSO access.\n· Install and license required software based on role-specific software bundles.\n· Run onboarding handover sessions with new hires to walk them through device setup, security policies, and support channels.\n## Maintenance & Support\n· Provide L1/L2 endpoint support across all three operating systems - diagnosing hardware faults, OS issues, driver problems, peripheral connectivity, and performance degradation.\n· Plan and roll out OS upgrades, security patches, and firmware updates with minimal disruption to users.\n· Monitor endpoint health, disk encryption status, antivirus / EDR coverage, and patch compliance; remediate drift.\n· Maintain documentation, runbooks, and a knowledge base for common issues and standard operating procedures.\n· Coordinate hardware repairs and warranty claims with OEMs (Dell, Lenovo, HP, Apple) and authorised service partners.\n## Asset Lifecycle Management\n· Own the full asset lifecycle: procurement intake, tagging, allocation, transfer, recovery, refresh, and disposal.\n· Maintain an accurate, auditable asset inventory in AssetTiger and JumpCloud, covering laptops, peripherals, and software licences.\n· Forecast refresh cycles and hardware demand; partner with Procurement on vendor selection, quotes, and purchase orders.\n· Manage device recovery and secure data wipe (NIST 800-88 / equivalent) for exits and refreshes; arrange certified e-waste disposal.\n· Track software licence usage and renewals; flag over- and under-utilisation.\n· Manage our pool of Windows licence keys: allocate to devices, track activation status, reclaim on offboarding or refresh, and keep records reconcilable against AssetTiger.\n## Security & Compliance\n· Enforce endpoint security baselines: full-disk encryption (BitLocker, LUKS, FileVault), screen-lock policies, local admin controls, and WatchGuard EPDR coverage across the fleet.\n· Support internal and external audits (SOC 2, ISO 27001) with evidence of device compliance, access controls, and asset records.\n· Respond to security alerts on endpoints; quarantine, investigate, and remediate in coordination with the Security team.\n· Administer WatchGuard EPDR day-to-day: deploy and update agents, tune policies, triage detections, and report on coverage and threat posture.\n# Must-Have Skills & Experience\n· 7-9 years of hands-on system administration experience supporting a mixed Windows, Linux, and macOS fleet.\n· Deep hands-on experience with MDM, preferably JumpCloud (MDM, policies, commands, directory) and Apple Business Manager; comfortable managing Linux endpoints via Ansible, Puppet, or equivalent.\n· Comfortable with shell scripting (Bash, PowerShell) for automation of routine provisioning and maintenance tasks.\n· Solid understanding of networking fundamentals: DNS, DHCP, VPN, Wi-Fi, and certificate-based authentication.\n· Hands-on experience with AssetManagement AssetTiger (or a comparable ITAM tool) and using JumpCloud as a source of truth for device inventory, running a structured asset lifecycle process end to end.\n· Working knowledge of WatchGuard EPDR (or a comparable EDR / EPP such as CrowdStrike, SentinelOne, or Defender for Endpoint) - agent deployment, policy tuning, and detection triage.\n· Experience managing Windows licensing in-house: tracking owned product keys, handling activation (MAK / retail / OEM), and reconciling entitlements against deployed devices.\n· Strong ticket-management discipline (Jira, ServiceNow, Freshservice) with a focus on SLAs and user experience.\n· Excellent communication skills - able to explain technical issues clearly to non-technical users.\n# Nice-to-Have\n· Experience supporting a hybrid / remote workforce with zero-touch and light-touch deployment via JumpCloud and Apple Business Manager / ADE.\n· Familiarity with SOC 2 or ISO 27001 endpoint controls.\n· Certifications: JumpCloud Core / Pro, Apple ACSP, RHCSA, Google Workspace Administrator, or Microsoft 365 Certified.\n· Exposure to IaC and configuration management at scale.\n· Prior experience as the sole IT / SysAdmin in a growing company, building process from scratch.\n# What Success Looks Like (First 6 Months)\n· Every new joiner receives a fully provisioned, compliant laptop on or before day one.\n· Asset inventory is reconciled, accurate, and audit-ready across all three operating systems.\n· Patch and encryption compliance is above 95% across the fleet.\n· A documented, repeatable provisioning and offboarding playbook is in place and being followed.","description_format":"text","description_chars":5888,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Sri Lanka","iso":"LK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-18T09:31:16Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.239,"p_room":0.28,"age_days":130,"expected_fill_days":35,"reasons":["conf:0","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/enactor-senior-system-administrator","json_url":"https://alion.io/job/enactor-senior-system-administrator.json","meta":{"generated_at":"2026-10-20T11:29:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12641,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4446377},"rest":"https://alion.io/mcp/rest/get_company?id=4446377"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fenactor-senior-system-administrator"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fenactor-senior-system-administrator"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fenactor-senior-system-administrator"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/enactor-senior-system-administrator\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fenactor-senior-system-administrator"}]}