Junior Systems Engineer – SaaS Infra, Azure & Security

** No sponsorship offered for this position *
* ** No relocation benefits for this position *
*
Pay: $35.00–$45.00/hr

Please note:

This role requires in-office work in Temecula, CA, at least 4 days per week, and is not eligible for visa sponsorship or relocation assistance.

About ASM

At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we’ve grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack.

About the role

This is an entry-level role for someone early in their IT career who wants to grow into a well-rounded systems engineer. You’ll work alongside our senior team to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You’ll also learn how a SOC 2 and HIPAA-compliant organization operates day to day.

We don’t expect you to know everything on day one. We’re looking for someone curious, careful, and eager to learn, and we’ll help you get there.

What you’ll do

• Manage user and group access in Microsoft Entra  (formerly Azure AD) and Active Directory to ensure appropriate access
• Help maintain and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and [Palo Alto] firewalls
• Investigate and troubleshoot issues flagged by our monitoring systems or reported by users, and escalate when needed
• Support patch management for Windows Servers, VMware, and network devices, and help us automate more of it
• Help maintain system hardening standards and the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance
• Assist with audits and security assessments, and occasionally help clients understand our security posture
• Take part in scheduled maintenance windows and, after onboarding, our on-call rotation

What you’ll learn

• Hands-on administration of a production, compliance-driven SaaS environment
• Identity and access management in Microsoft Entra , including Conditional Access, MFA, and hybrid identity with on-prem Active Directory
• Azure, VMware, and enterprise networking and firewall management
• Automation with Power Shell
• How SOC 2 and HIPAA audits work from the inside

Schedule and on-call

During onboarding, you may be in the office up to 5 days per week.

The role includes occasional evening and weekend maintenance work. After you’ve completed onboarding, you’ll join our 24/7 on-call rotation, which may include on-call shifts up to several times per week. Time spent handling after-hours calls is paid at standard overtime rates.

Who thrives here

You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You enjoy digging into problems that don’t have obvious answers. You’re careful without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects.

Required

• 0–2 years of experience in IT support, help desk, or system administration (internships, homelab projects, and coursework count)
• A solid grasp of computing fundamentals, including operating systems, file systems, and networking (TCP/IP, DNS, DHCP, VLANs)
• Familiarity with Windows Server, Active Directory, and Microsoft Entra
• Some exposure to Power Shell or another scripting language
• Strong attention to detail and a habit of documenting your work
• Strong written and verbal communication skills

Nice to have

• Experience with Azure, VMware vSphere/vSAN, or Group Policy
• Experience with Microsoft IIS web servers, reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door
• Certifications such as CompTIA A+, Network+, or Security+, or Microsoft AZ-900,…