{"id":1206001,"url":"https://alion.io/job/shield-ai-staff-systems-administrator-r5995","title":"Staff Systems Administrator (R5995)","company":{"id":50,"name":"Shield AI","domain":"shield.ai","url":"https://alion.io/company/shield-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":75,"open_postings":62,"ghost_share":0,"stale_share":0.806,"repost_share":0,"time_to_fill_p50_days":76,"computed_at":"2026-10-19T05:45:15Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":106000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":10},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Azure DevOps","optional":true},{"name":"Bash","optional":true},{"name":"CI/CD","optional":true},{"name":"GitHub","optional":true},{"name":"ISO 27001","optional":true},{"name":"ITIL","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"SOC 2","optional":true},{"name":"VMWare","optional":true}],"status":"live","first_seen_at":"2026-09-24T21:46:27Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-19T22:44:25Z","board_verified":true,"closed_at":null,"days_open":25,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":25},"description":"Job Description:\nShield AI is seeking a highly autonomous Staff Systems Administrator to serve as the accountable technical owner for enterprise IT infrastructure and end-user computing within a dedicated, security-sensitive entity environment. This senior individual contributor will design, implement, operate, secure, and continuously improve on-premises systems, cloud platforms, identity services, networks, and endpoints while preserving required legal, operational, information-security, and access boundaries.\nThe role combines deep infrastructure ownership with hands-on service delivery. The successful candidate will translate security and compliance requirements into durable technical controls, maintain audit-ready evidence, drive equipment and endpoint hardening, and deliver resilient support to engineering and business teams with minimal oversight.\nWhat you'll do:\nInfrastructure Ownership (On-Prem & Cloud)\nOwn and operate on-premises and cloud infrastructure, including physical and virtual servers, storage, backup platforms, identity services, core network services, and enterprise applications.\nAdminister Azure and/or AWS environments with responsibility for availability, capacity, performance, monitoring, secure configuration, backup, and disaster-recovery readiness.\nDefine technical roadmaps, identify operational risks, and independently drive modernization, standardization, scalability, and resilience improvements.\nMaintain accurate architecture diagrams, inventories, operating procedures, recovery documentation, configuration records, and service ownership information.\nPlan and execute infrastructure changes using disciplined change, testing, rollback, and post-implementation review practices.\nFirewalled Entity and Segmented-Environment Support\nOperate technology services for a dedicated legal or operating entity with explicit separation of systems, identities, data, administration, suppliers, and access from other corporate environments where required.\nImplement and maintain approved trust boundaries, network segmentation, firewall policies, secure remote access, administrative tiers, and controlled cross-entity connectivity.\nEnsure data, devices, accounts, cloud resources, and third-party access remain within authorized entity, contractual, regulatory, and data-residency boundaries.\nPartner with Security, Legal, Compliance, Privacy, and corporate IT teams to translate entity-specific obligations into practical controls, operating procedures, and evidence.\nDocument and periodically validate boundary controls, data flows, privileged access paths, exceptions, and intercompany dependencies; escalate gaps and drive remediation to closure.\nSupport local business continuity and operational autonomy while aligning with approved global architecture, security standards, and governance.\nSecurity, Compliance, and Systems\nEstablish, implement, and maintain secure configuration baselines for Windows, macOS, Linux, servers, network devices, cloud services, and endpoint-management platforms using recognized frameworks and vendor guidance.\nOwn patching and vulnerability-remediation workflows, including asset coverage, risk-based prioritization, remediation timelines, exception documentation, validation, and status reporting.\nAdminister and validate endpoint protections such as full-disk encryption, EDR/XDR, host firewall, secure boot, application controls, device compliance, removable-media controls, and least-privilege configurations.\nHarden identity and administrative access through role-based access control, multifactor authentication, privileged-access separation, conditional access, service-account governance, and periodic access reviews.\nMaintain logging, alerting, time synchronization, configuration monitoring, backup protection, and security telemetry needed for detection, investigation, and auditability.\nCollect and maintain audit-ready evidence; support internal and external audits, control assessments, security reviews, customer requirements, and remediation plans.\nParticipate in incident response, containment, recovery, root-cause analysis, and corrective actions for infrastructure and endpoint security events.\nManage technical risks and policy exceptions transparently, including compensating controls, accountable owners, expiration dates, and closure plans.\nIdentity, Endpoint, and Service Delivery\nAdminister Active Directory and Entra ID or equivalent identity platforms, including user and group lifecycle, authentication, authorization, federation, and policy enforcement.\nManage Windows, macOS, and Linux endpoints through Intune, Jamf, or equivalent tooling, ensuring secure provisioning, configuration compliance, software deployment, inventory accuracy, and timely retirement.\nLead onboarding and offboarding activities, including device provisioning, access configuration, license assignment, asset recovery, and compliance validation.\nProvide advanced troubleshooting and escalation support for employees, engineering systems, lab environments, collaboration services, and secure connectivity.\nOwn IT asset lifecycle, software licensing, vendor coordination, procurement support, warranty management, and secure equipment disposal.\nUse scripting and automation to improve consistency, reduce manual effort, strengthen controls, and provide meaningful operational and compliance reporting.\nContribute reusable infrastructure patterns, standards, and documentation that can scale across comparable international entity environments.\nRequired qualifications:\n8 + years of experience in systems administration, infrastructure engineering, enterprise IT operations, or a closely related discipline.\nDemonstrated success independently owning production IT infrastructure and end-user environments in a complex, regulated, segmented, or security-sensitive organization.\nStrong hands-on expertise with Windows, macOS, and Linux; server administration and virtualization; Azure and/or AWS; and Active Directory and Entra ID or equivalent identity platforms.\nPractical experience implementing system and endpoint hardening, configuration baselines, patch management, vulnerability remediation, encryption, endpoint detection and response, and least-privilege controls.\nExperience supporting security or compliance programs and producing evidence for audits, assessments, or customer and regulatory requirements.\nStrong networking knowledge, including TCP/IP, DNS, DHCP, VLANs, routing, VPNs, network segmentation, firewall policy, and secure remote access.\nExperience with endpoint management platforms such as Intune, Jamf, or equivalent, including compliance policy and device lifecycle management.\nExperience implementing and testing monitoring, backup, disaster recovery, and business-continuity capabilities.\nExcellent documentation, prioritization, risk communication, and stakeholder-management skills, with the ability to drive outcomes under limited supervision.\nAbility to support time-sensitive operational needs and participate in planned after-hours maintenance or incident response when required.\nPreferred qualifications:\nExperience supporting a firewalled, ring-fenced, subsidiary, joint-venture, sovereign, or otherwise separately governed entity environment.\nExperience supporting engineering, R&D, aerospace, defense, manufacturing, or other mission-critical technical teams.\nWorking knowledge of recognized security and compliance frameworks such as CIS Controls and Benchmarks, NIST, ISO 27001, SOC 2, Cyber Essentials, or equivalent local and contractual standards.\nExperience with security tooling such as SIEM, vulnerability-management platforms, privileged-access management, data-loss prevention, certificate management, or network-access control.\nExperience supporting isolated, air-gapped, export-controlled, or data-residency-restricted systems.\nScripting and automation experience using PowerShell, Bash, Python, APIs, infrastructure as code, or configuration-management tooling.\nFamiliarity with GitHub, Azure DevOps, CI/CD environments, and secure engineering workflows.\nRelevant certifications such as Microsoft, AWS, VMware, Cisco, CompTIA Security+, CISSP, CISM, GIAC, ITIL, or equivalent.","description_format":"text","description_chars":8212,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Military Drones","Defense Manufacturing","Defense AI","Drone AI"],"lifecycle":[{"event":"open","at":"2026-09-24T23:51:56Z"},{"event":"close","at":"2026-10-19T00:04:52Z"},{"event":"reopen","at":"2026-10-19T03:09:01Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":61,"band":"ok","label":"Likely open","p_open":1,"p_active":0.614,"p_room":1,"age_days":24,"expected_fill_days":76,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/shield-ai-staff-systems-administrator-r5995","json_url":"https://alion.io/job/shield-ai-staff-systems-administrator-r5995.json","meta":{"generated_at":"2026-10-20T01:19:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1605,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50},"rest":"https://alion.io/mcp/rest/get_company?id=50"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fshield-ai-staff-systems-administrator-r5995"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fshield-ai-staff-systems-administrator-r5995"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fshield-ai-staff-systems-administrator-r5995"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/shield-ai-staff-systems-administrator-r5995\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fshield-ai-staff-systems-administrator-r5995"}]}