System Network Administrator

JOB DESCRIPTION

Position Title:

System & Network Administrator (Administrator II)

Executive Leadership:

Chief Information Officer

Leadership:

VP Infrastructure & Engineering Operations

Team Membership:

Information Technology

Location:

Exton, PA Office (620 Pennsylvania Drive, Exton, PA 19341) Or Remote

Job Status:

Exempt (Salaried)

Supervisory Responsibility:

None

Position Summary:

The System & Network Administrator keeps World Travel, Inc.'s servers, networks, identity platform, and cloud services secure, available, and well documented. This mid-level role spans on-premises and cloud (hybrid) infrastructure, serves as a Tier 2/3 escalation point for infrastructure issues, and treats automation and zero-trust security as everyday practice rather than special projects.

Essential Duties and Responsibilities:

Systems Administration

• Install, configure, patch, and monitor Windows Server and Linux (RHEL, Ubuntu etc) systems, both physical and virtual.
• Manage virtualization platforms (VMware vSphere, Hyper-V, Proxmox, or Nutanix) and container hosts where used.
• Administer identity and access, including Active Directory, Microsoft Entra ID, SSO, and multi-factor authentication.
• Maintain Microsoft 365, including email security, licensing, and data retention.
• Run backup and disaster recovery following the 3-2-1-1-0 rule, with immutable copies and quarterly restore tests.

Network Administration

• Design, configure, and maintain switches, routers, firewalls, VPN, and wireless (Wi-Fi 6/6E/7) networks.
• Manage VLANs, routing (OSPF, BGP), DHCP, DNS, NAC, and IPv4/IPv6 addressing.
• Support SD-WAN and secure remote access, moving toward ZTNA/SASE where adopted.
• Monitor performance and capacity with tools such as PRTG, Zabbix, LibreNMS, or Datadog.

Cloud and Hybrid Infrastructure

• Administer workloads in Azure, AWS, or Google Cloud, including virtual networks, IAM, and cost tracking.
• Maintain hybrid connectivity (site-to-site VPN, ExpressRoute, or Direct Connect) and hybrid identity sync.

Security and Compliance

• Apply zero-trust principles: least privilege, MFA everywhere, network segmentation, and conditional access.
• Manage endpoint protection (EDR/XDR), vulnerability scanning, and timely patching of critical CVEs.
• Forward logs to the SIEM and support incident response, including tabletop exercises.
• Support controls aligned with NIST CSF 2.0, CIS Controls v8.1,PCI and ISO 27001 or SOC 2 audits where applicable.

Automation and Documentation

• Automate routine work with PowerShell, Bash, or Python, and manage configuration as code (Ansible, Terraform) in Git.
• Use AI-assisted tools responsibly for scripting and troubleshooting, following company data policies.
• Keep network diagrams, runbooks, asset inventory, and change records current.

Support and Operations

• Serve as Tier 2/3 escalation for infrastructure incidents and work within ITIL-aligned change and problem management.
• Participate in an on-call rotation and planned after-hours maintenance windows.
• Evaluate vendors, manage licenses and hardware lifecycle, and mentor junior IT staff.

Qualifications:

Required Qualifications

• 3+ years administering servers and networks in a production environment, or an associate's/bachelor's degree in IT or a related field plus 2+ years.
• Solid working knowledge of Windows Server, Active Directory/Entra ID, and at least one Linux distribution.
• Hands-on experience with enterprise switching, routing, and firewalls (e.g., Cisco, Juniper, Aruba, Fortinet, Palo Alto).
• Strong grasp of TCP/IP, DNS, DHCP, VLANs, VPNs, and wireless networking.
• Experience with at least one public cloud platform (Azure, AWS, or GCP).
• Scripting ability in PowerShell, Bash, or Python.
• Working knowledge of backup, patching, endpoint security, and MFA practices.
• Ability to pass a background check and to work occasional after-hours maintenance and on-call shifts.

Preferred Qualifications and Certifications

• Networking: Cisco CCNA or CCNP, Juniper JNCIA, CompTIA Network+; experience with SD-WAN, ZTNA/SASE, and Wi-Fi site surveys.
• Systems: Microsoft Certified: Azure Administrator (AZ-104), RHCSA, CompTIA Server+ or Linux+; VMware, Hyper-V, or Nutanix administration.
• Cloud: AWS Certified SysOps Administrator or Solutions Architect Associate; hybrid identity and cloud cost management.
• Security: CompTIA Security+, Microsoft SC-300 or AZ-500; SIEM, EDR/XDR, and vulnerability management.
• Automation: HashiCorp Terraform Associate; Ansible, Git, and CI/CD pipelines.
• Operations: ITIL 4 Foundation; change management and audit support (SOC 2, ISO 27001).

Soft Skills and Competencies:

• Methodical troubleshooting: isolates root causes under pressure and documents the fix.
• Clear communication: explains technical issues to non-technical colleagues and writes usable runbooks.
• Security mindset: questions defaults, follows change control, and reports risks early.
• Ownership: sees tasks through, follows up on tickets, and keeps stakeholders informed.
• Continuous learning: keeps current with vendor changes, threats, and new tooling.
• Collaboration: works well with the help desk, developers, security, and outside vendors.

Education and Experience Requirements Associate's or bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent hands-on experience. 3+ years administering servers and networks in a production enterprise environment (or 2+ years with a related degree).

Industry certifications preferred but not required:

CCNA/CCNP, Network+, Security+, AZ-104, RHCSA, ITIL 4 Foundation, etc.

Physical Factors/Environment:

Must be able to sit for long periods of time. Must be able to lift equipment up to 50 pounds (23 kg) and work in server rooms, data centers, and wiring closets. Must be able to work odd/off-shift hours, including very late at night and/or weekends to meet company and project needs. Must participate in a rotating on-call schedule and scheduled after-hours maintenance windows. Must be able to work more than 40 hours per work week. Work is performed in office, data center, and remote settings, with occasional travel to company sites.

If you need an accommodation, please reach out to People Operations Department.