System Administrator – IT Operations

About Malleum

Malleum is at the forefront of next-generation cyber defense, partnering with marquee clients across government, defense, financial services, and critical infrastructure. We’re experiencing exceptional growth as demand accelerates for trusted advisors capable of delivering at the intersection of national security, allied intelligence cooperation, and enterprise resilience. Our consultants embed directly with clients to design, secure, and operate the networks and systems behind cutting‑edge defensive technologies and programs with national and allied security impact.

If you take pride in being the trusted technical hands clients rely on to keep mission‑critical environments running and to help them recover when things go wrong, Malleum is where your craft meets purpose.

We’re seeking a client‑facing System Administrator to deliver hands‑on administration, maintenance, and operational support across client endpoints, servers, and Microsoft 365 environments, and to play a supporting role in active incident‑response engagements. In this role you’ll work remotely and at times on‑site, within client environments including sovereign, regulated, and cleared settings, providing the technical expertise, reliability, and professionalism that define the Malleum delivery experience.

This is a hands‑on, intermediate‑level role for a practitioner who pairs strong systems and endpoint skills with solid client presence, and who can step up when crises demand long, focused hours alongside our IR team.

• Administer, monitor, and maintain client endpoints, servers, and Microsoft 365 / Entra
• Implement and operate Microsoft Intune, including enrollment, compliance policies, configuration profiles, Win
  32 and Store app packaging and deployment, Autopilot, and endpoint hardening
• Configure, monitor, and test client backup, disaster recovery, and business continuity systems, proving restores on a regular schedule
• Lead patch management, software deployment, and configuration management across client servers and endpoints
• Provide multi‑client support through the PSA/RMM (Connect Wise): triage, resolve, and elevate tickets cleanly while meeting SLAs
• Administer Active Directory, Group Policy, file and print services, and virtualization (VMware, Hyper‑V)
• Implement and enforce hardening standards aligned with CIS Benchmarks and client frameworks such as NIST 800‑171 and ITSG‑33
• Standardize provisioning, onboarding/offboarding, and access‑control workflows within client environments
• Support active incident‑response engagements—reimaging and rebuilding systems, restoring from backup, deploying and tuning endpoint tooling, and assisting with containment, eradication, and recovery
• Work odd hours, evenings, and weekends during active IR engagements, including rapid mobilization with little notice when clients are under attack
• Produce high‑quality client deliverables: configuration documentation, runbooks, SOPs, and status reports
• Serve as a trusted technical point of contact, communicating clearly with client stakeholders ranging from end users to leadership
• Participate in an on‑call rotation supporting critical client infrastructure

• Solid progressive experience in IT systems administration and endpoint management, ideally in a consulting, MSP, MSSP, or IR setting
• Demonstrated, hands‑on Microsoft Intune implementation experience—packaging, policies, and deployment, not just awareness
• Strong Microsoft 365 and Entra
• Real backup and recovery experience: configuring, monitoring, and proving restores
• Comfortable owning support tickets end to end, with strong communication and professionalism
• Proficiency with Windows Server, Active Directory, and Group Policy
• Scripting for automation and rapid response (Power Shell; Bash or Python an asset)
• Calm, methodical, and effective under pressure; willing to work odd hours and weekends when supporting active IR matters
• Comfort working across multiple client environments, tooling stacks, and change‑management processes simultaneously
• Familiarity with virtualization (VMware, Hyper‑V) and Azure; networking fundamentals (TCP/IP, DNS, DHCP, VLANs) an asset
• Familiarity…