IT Systems Administrator

About Astro Forge

At Astro Forge, our mission is to make space resources accessible on Earth. We mine asteroids to extract valuable minerals in space at a lower cost and smaller carbon footprint than current terrestrial mining methods. Along the way, we seek to leverage the technologies we build to provide additional value across other domains. We offer a unique opportunity to join an exciting team looking to expand humanity’s capabilities in space.

Astro Forge is seeking its first dedicated IT Systems Administrator to build, maintain, and scale the company's internal technology infrastructure. As a key member of a lean and fast-moving team, you will own all aspects of IT, from end-user support and hardware lifecycle management to network administration and security compliance. You'll work closely with engineers, operators, and leadership to ensure our systems run reliably so that we can focus on what matters: mining asteroids.

This role is ideal for a self-starter who thrives in a hardware-forward startup environment. You will be a one-person IT department initially, defining how IT works at Astro Forge, building the foundation for scale, and directly enabling the mission-critical work happening every day at our facility in Seal Beach. Prior experience in aerospace, defense, or manufacturing is a plus; comfort working alongside propulsion engineers and spacecraft technicians is a must.

• Serve as the primary point of contact for all IT support requests; triage and resolve hardware, software, and network issues across macOS, Windows, and Linux environments.
• Design, deploy, and maintain corporate network infrastructure including switches, firewalls, VLANs, VPNs, and wireless access points supporting both office and lab environments.
• Administer identity and access management systems (SSO, MFA, and directory services) and manage provisioning and deprovisioning for all employees and contractors.
• Procure, configure, deploy, and asset-track all company hardware: laptops, workstations, servers, lab machines, mobile devices, and peripheral equipment.
• Manage and scale cloud services and SaaS applications (Google Workspace, Microsoft 365, Slack, Zoom, Git Hub, and others) and enforce license compliance.
• Develop, implement, and maintain IT security policies in compliance with ITAR, CMMC, and NIST cybersecurity frameworks; act as a key contributor to the company's information security posture.
• Establish and manage endpoint protection, patch management, and vulnerability remediation programs across all company devices.
• Support onboarding and offboarding workflows to ensure every employee has a seamless first day and a clean exit.
• Build and maintain IT documentation, network diagrams, runbooks, and standard operating procedures.
• Evaluate, recommend, and implement new tools and systems as the company scales; proactively identify gaps before they become incidents.

• 3+ years of experience in IT systems administration, IT engineering, or a closely related role.
• Demonstrated ability to support users across macOS, Windows, and Linux environments.
• Hands-on experience administering network infrastructure: routing, switching, VPNs, firewalls, and wireless systems.
• Experience with identity and access management platforms such as Active Directory, Azure AD, Okta, or equivalent.
• Familiarity with cloud platforms (AWS, GCP, or Azure) and SaaS administration at the organizational level.
• Strong troubleshooting instincts and the ability to diagnose and resolve issues independently in a fast-paced environment.
• Ability to work onsite at our Seal Beach, CA facility.

• Experience in an aerospace, defense, hardware startup, or manufacturing environment.
• Working knowledge of ITAR and/or CMMC compliance requirements.
• Proficiency in scripting (Bash, Power Shell, or Python) for automation, tooling, and reducing toil.
• Experience with MDM solutions such as Jamf or Microsoft Intune for endpoint management.
• Familiarity with cybersecurity frameworks including NIST CSF and CIS Controls.
• CompTIA Security+, Network+, or equivalent industry certifications.
• Willingness to work extended hours or…