{"id":2183361,"url":"https://alion.io/job/eternal-ag-it-systems-administrator-cloud-identity-endpoint-security","title":"IT Systems Administrator (Cloud, Identity, Endpoint & Security)","company":{"id":3872654,"name":"Eternal Ag","domain":"eternal.ag","url":"https://alion.io/company/eternal-4","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"C","score":55,"open_postings":12,"ghost_share":0.75,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-24T06:02:35Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"Ubuntu","optional":false},{"name":"Windows","optional":false},{"name":"Ansible","optional":true},{"name":"Bash","optional":true},{"name":"Configuration Management","optional":true},{"name":"Crowdstrike","optional":true},{"name":"DHCP","optional":true},{"name":"GDPR","optional":true},{"name":"ISO 27001","optional":true},{"name":"Jira","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SentinelOne","optional":true},{"name":"SOC 2","optional":true},{"name":"VPN","optional":true},{"name":"Wi-Fi","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-06-10T13:47:12Z","employer_posted_date":"2026-06-10","last_verified_at":"2026-10-24T20:55:58Z","board_verified":true,"closed_at":null,"days_open":136,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":135},"description":"Transform 800,000 hectares of greenhouses into fully-autonomous food production sites\nAt eternal.ag, we're building the future of sustainable food production. Our mission is to convert the world's existing greenhouses into fully automated facilities that can produce fresh food year-round - addressing the critical need to double food production by 2050 while facing severe labor shortages, water scarcity, and climate challenges.\nAbout the Role\nWe are looking for an IT Systems Administrator to own and improve day-to-day IT operations across cloud services, identity, endpoint devices, and cybersecurity controls. You will manage AWS infrastructure basics, Microsoft 365 services, Microsoft Entra ID (Azure AD) identity and access, Windows PCs, and Ubuntu/Linux laptops. You will also implement and administer Mobile Device Management (MDM) and help establish and enforce practical cybersecurity policies and best practices across the company.\nThis is a hands-on role requiring strong troubleshooting skills, structured documentation habits, and the ability to balance user support with system reliability and security.\nWhat You’ll Do\nIT operations & user support\nProvide Tier 1-2 support for employees across hardware, OS, identity/login, network access, and SaaS tools.\n\nProvision, onboard, and offboard users (accounts, groups, device enrollment, licenses, access rights).\n\nMaintain IT documentation (runbooks, onboarding/offboarding checklists, asset records, system diagrams).\n\nManage IT vendors and service providers as needed (ISPs, equipment suppliers, security tools).\n\nMicrosoft 365 administration\nAdminister Microsoft 365 services including Exchange Online, Teams, SharePoint/OneDrive, and core admin settings.\n\nManage licensing and service configuration aligned to business needs and cost control.\n\nImplement and monitor baseline security controls (e.g., MFA, security defaults/conditional access, mailbox security, secure sharing).\n\nSupport email deliverability, domain/DNS records (SPF/DKIM/DMARC), and collaboration settings.\n\nMicrosoft Entra ID (Azure AD) / Identity & Access Management\nAdminister Microsoft Entra ID tenant configuration, users/groups, role-based access controls, and identity lifecycle.\n\nImplement access policies such as MFA, Conditional Access, device compliance requirements, and least-privilege access.\n\nManage SSO integrations for SaaS applications and troubleshoot authentication issues.\n\nSupport secure onboarding/offboarding and periodic access reviews.\n\nEndpoint management: Windows + Ubuntu/Linux\nMaintain Windows PCs (deployment, patching, troubleshooting, device encryption, local admin controls, endpoint security).\n\nMaintain Ubuntu/Linux laptops (user access, updates, disk encryption where applicable, security hardening, troubleshooting).\n\nStandardize device setup using repeatable processes (imaging, configuration scripts, endpoint policies).\n\nMaintain endpoint inventory (hardware specs, ownership, lifecycle, warranty, status).\n\nMobile Device Management (MDM) & device compliance\nImplement and administer an MDM solution to enforce device security, configuration, and compliance.\n\nExamples: Microsoft Intune, Jamf, Kandji, or equivalent (choose what fits your environment).\n\nDefine and enforce device baselines (PIN/biometrics, encryption, auto-lock, OS update requirements, remote wipe).\n\nManage BYOD vs corporate-owned policies, and align with privacy/responsible monitoring expectations.\n\nEnsure smooth enrollment and support for iOS/Android and laptops where supported.\n\nAWS administration (cloud operations & governance)\nAdminister AWS accounts and foundational services used by the company, such as:\n\nIAM (users/roles/policies), security groups, VPC basics, EC2, S3, RDS (as applicable), CloudWatch/logging.\n\nImprove AWS security posture (least-privilege IAM, MFA for privileged access, key/secret hygiene).\n\nSupport backups, monitoring/alerting, and incident response procedures for cloud workloads.\n\nAssist with cost visibility and optimization (tagging, budgets, alerts, rightsizing recommendations).\n\nCybersecurity policies & best practices\nHelp define, implement, and maintain company cybersecurity policies and standards, such as:\n\nAcceptable use, password/MFA, endpoint security, patching, backups, access control, vendor access, secure sharing.\n\nImplement practical security controls aligned with the company’s risk level: Endpoint protection, encryption, vulnerability management, audit logging, least privilege, secure onboarding/offboarding.\n\nRun security awareness basics (phishing awareness, secure handling of data, reporting procedures).\n\nSupport security incident response: triage, containment, remediation, post-incident improvements.\n\nCoordinate with external security vendors (pentest, audits, SOC/SIEM support) if applicable.\n\nWho You Are\nCore requirements\n3+ years in IT administration / systems administration / IT operations.\n\nStrong experience administering Microsoft 365 and Microsoft Entra ID (Azure AD), including MFA and SSO.\n\nHands-on experience managing Windows endpoints (deployment, patching, troubleshooting, security controls).\n\nHands-on experience supporting Ubuntu/Linux laptops (updates, access, security hardening basics).\n\nExperience implementing or administering an MDM platform and device compliance policies.\n\nFamiliarity with AWS administration fundamentals (IAM, networking basics, monitoring, security concepts).\n\nSolid understanding of cybersecurity fundamentals: least privilege, secure configuration, patch management, encryption, phishing, backups, incident response basics.\n\nStrong troubleshooting ability, ability to communicate clearly with non-technical colleagues, and good documentation habits.\n\nBonus points if you have\nExperience with Microsoft security tooling (e.g., Defender for Endpoint, Defender for Office 365) or equivalent.\n\nFamiliarity with compliance frameworks (e.g., ISO 27001 concepts, SOC 2 readiness, GDPR awareness) as applicable.\n\nExperience with automation/scripting: PowerShell (Windows/M365), Bash (Linux), Python (optional), and/or Ansible for configuration management.\n\nBasic networking skills: DHCP/DNS/VPN/Wi-Fi management, firewall concepts, zero-trust principles.\n\nExperience with ticketing systems (Jira Service Management, Zendesk, Freshservice, etc.).\n\nExperience building policies and controls in a startup/SMB environment with pragmatic constraints.\n\nSoft skills & working style\nYou prioritize security and reliability without blocking productivity.\n\nYou can translate technical risk into business impact and propose practical mitigations.\n\nYou’re comfortable owning problems end-to-end and escalating appropriately.\n\nYou can create simple documentation others can follow.\n\nYou handle confidential information responsibly.\n\nTools & Systems\nMicrosoft 365 Admin Center, Exchange Admin, Entra ID, Intune (or Jamf/Kandji/other MDM)\n\nAWS Console + IAM + CloudWatch (and IaC tools if applicable)\n\nWindows 10/11, Ubuntu/Linux\n\nEndpoint security tooling (Defender/CrowdStrike/SentinelOne, etc.)\n\nPassword manager and/or SSO provider integrations\n\nTicketing + asset management system\n\nApply Now\nReady to help transform 800,000 hectares of greenhouses into fully automated food production sites? If you’re excited to build the IT and security foundation that lets a robotics team ship safely and move fast, we’d love to hear from you.\nWe’re committed to building a diverse and inclusive team. We encourage applications from candidates of all backgrounds.\neternal.ag is building fully automated food production sites that can sustainably produce fresh food year-round. Backed by world-class investors and partnering with leading agricultural companies, we're turning the vision of fully-autonomous greenhouses into reality.","description_format":"text","description_chars":7762,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Robotics AI","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-09T15:29:31Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.141,"p_room":0.28,"age_days":135,"expected_fill_days":27,"reasons":["conf:4","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/eternal-ag-it-systems-administrator-cloud-identity-endpoint-security","json_url":"https://alion.io/job/eternal-ag-it-systems-administrator-cloud-identity-endpoint-security.json","meta":{"generated_at":"2026-10-24T23:17:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34265,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3872654},"rest":"https://alion.io/mcp/rest/get_company?id=3872654"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feternal-ag-it-systems-administrator-cloud-identity-endpoint-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feternal-ag-it-systems-administrator-cloud-identity-endpoint-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feternal-ag-it-systems-administrator-cloud-identity-endpoint-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/eternal-ag-it-systems-administrator-cloud-identity-endpoint-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feternal-ag-it-systems-administrator-cloud-identity-endpoint-security"}]}