Systems Administrator

Key Responsibilities

Virtualization and infrastructure

Plan and execute Proxmox VE upgrades across the cluster, including pre-upgrade health checks, backup validation, rolling node upgrades and rollback planning.

Manage VM capacity, storage and performance, including disk-space remediation on shared servers such as Remote Desktop hosts.

Diagnose and resolve hardware faults with colocation providers, including drive replacements in firewall and server appliances.

Maintain datacenter asset records and support the eventual decommission of on-premises hardware.

Manage physical servers in the office location and support stabilization

Firewalls, load balancing and network

Upgrade pfSense firewall clusters (CARP high-availability pairs) across multiple datacenters, including end-of-life version remediation, with minimal customer impact.

Upgrade and maintain HAProxy load balancers, including major-version upgrades and configuration validation.

Upgrade and maintain network switches.

Perform the recurring firewall rule review required under PCI DSS.

Keep the detailed network diagrams and data-flow diagrams current and audit-r***y.

Support VPN operations and troubleshoot VPN authentication issues.

Web hosting (IIS) and dealer site operations

Administer IIS on Windows Server across production, demo and non-production environments.

Build and configure new IIS sites for OEM program launches, including tiered programs, wholesale and accessories sites.

Add, change and remove site bindings for dealer onboarding, domain changes, reactivations and cancellations.

Investigate dealer site outages and certificate errors, and restore service quickly.

Refresh image and content caches and support content-delivery issues.

Cloudflare, DNS and certificates

Troubleshoot and configure Cloudflare: custom hostnames, WAF and bot rules, allow-listing for crawlers and partner services, redirects and page rules.

Diagnose Cloudflare-related issues affecting search engine crawlers, merchant feeds and PCI ASV scan results.

Manage DNS records (Constellix and Cloudflare) for new dealer sites, program launches and domain migrations.

Manage the SSL/TLS certificate lifecycle across public sites, internal services, Active Directory and pre-production, including renewal tracking and expired-certificate remediation.

Support email deliverability configuration (SPF, DKIM, DMARC) for platform and support mailboxes.

Security, vulnerability and compliance operations

Remediate penetration test findings, such as TLS/SSL misconfigurations, SSH password authentication and exposed management interfaces.

Track and retire end-of-life software across the estate: runtimes (Node.js, Python), MFA agents, syslog servers, encryption tools and similar.

Support vulnerability management using Microsoft Defender Vulnerability Management, including agent rollout and retiring legacy scanning agents.

Evaluate and implement vulnerability scanning coverage for non-Windows systems (Linux, network appliances).

Produce evidence for PCI DSS, ISO 27001 and SOC 2 audits, and respond to customer security questionnaires with technical detail.

Follow change management for all production changes and maintain accurate records.

Access and Windows administration

Administer Active Directory, Group Policy and Windows Server, including patching and hardening.

Process access requests and timely access removal for joiners, movers and leavers, in line with least-privilege and PCI requirements.

Resolve RDP, login and server-access issues for internal teams.

Support SFTP/FTP services used for OEM and dealer data feeds.

Transition and handoff

Write and maintain runbooks for every system you own, so no knowledge is held by a single person.

Partner with the modernization team and AWS consultants to supply environment details, dependencies and cutover support.

Plan and execute decommissioning of retired servers, sites, DNS records and firewall rules as workloads move to AWS.