Systems Administrator

 Title System & Network AdministratorDepartment Information TechnologyReports to Information Technology Manager SEE YOUR CAREER THROUGH A NEW LENS WITH RPO!RPO is a global leader in precision optics, optical components, and optical assemblies. We specialize in a full spectrum of products & services including - Design and Engineering, Systems Integration, Lens Assembly, Visible and Infrared Components, Glass and Plastic Molded Aspheres, and Thin Film Coating. As one of the fastest growing companies in Rochester, RPO offers exciting career paths and work on market-leading programs. See below one of many career opportunities to join the RPO team! Job Summary:Rochester Precision Optics, LLC is seeking a Systems & Network Administrator to support and operate the company's core IT infrastructure within a regulated manufacturing environment. This role is responsible for the administration and operational stability of server, network, cloud, and enterprise infrastructure platforms supporting approximately 300 users across corporate and manufacturing operations. The Systems & Network Administrator works closely with the IT Manager to maintain a secure, reliable, and compliant infrastructure, including implementation of technical controls aligned with NIST 800-171 and CMMC 2.0 requirements.This is a hands-on role where the successful candidate will take ownership of infrastructure operations, contribute to the ongoing improvement and modernization of the organization's infrastructure platforms, and serve as an escalation resource for complex technical issues. Summary of Essential Job Duties:Infrastructure & Systems AdministrationAdminister and maintain Windows Server environments and enterprise infrastructure systemsManage Active Directory, DNS, DHCP, Group Policy, and identity infrastructureSupport virtualization platforms such as VMware or Hyper-VProvision and maintain virtual machines and server resourcesMonitor infrastructure performance, system capacity, and service availabilityPerform patch management and security updates for servers and infrastructure systemsMaintain file services, storage systems, and system health monitoringAdminister enterprise backup platforms and validate backup integrity through periodic recovery testingAdminister enterprise software deployment platforms including PDQ Deploy and related deployment toolingCreate and maintain standardized software deployment packages for enterprise applications and operating system updatesCoordinate controlled rollout of software updates and application upgrades across managed systemsMaintain infrastructure documentation including system configuration standards and architecture diagramsNetwork Infrastructure AdministrationMaintain & support network infrastructure including switches, firewalls, VPN, and wireless networksConfigure and support VLANs, routing, and subnettingConfigure and maintain firewall policies, access rules, and network security controlsMaintain network authentication systems supporting secure wired and wireless accessSupport VoIP and network-connected infrastructure including cameras and related technologiesMaintain and troubleshoot DNS, DHCP, routing, and other core network servicesSupport structured cabling, patch panel management, and infrastructure expansion projectsMaintain network diagrams, segmentation documentation, and infrastructure configuration recordsMicrosoft 365 GCC High AdministrationAdminister Microsoft 365 GCC High tenant services including Exchange Online, Microsoft Teams, and Entra IDConfigure and maintain Conditional Access policies and secure authentication configurationsSupport identity lifecycle integration between on-premises Active Directory and Entra IDProvide Tier 2/3 escalation support for advanced Exchange Online and Teams issuesAssist with Microsoft Purview administration including eDiscovery searches, retention policies, and litigation hold supportMaintain secure messaging and collaboration configurations aligned with regulatory requirementsEndpoint & Mobile Device Management Platform AdministrationAdminister enterprise device management platforms including Microsoft Intune and Endpoint CentralConfigure and maintain device enrollment policies, compliance policies, and security baselinesIntegrate device compliance enforcement with Conditional Access authentication policiesProvide Tier 3 escalation support for complex endpoint and mobile device management issuesSupport device security posture aligned with organizational security and compliance requirementsEnterprise Infrastructure PlatformsMaintain backend infrastructure supporting enterprise applications including ERP, SQL Server, and FileMaker hosting environmentsSupport infrastructure stability for unified communications platforms such as 3CX VoIPMaintain backend infrastructure supporting physical security platforms including badge access control and video surveillance systemsMaintain infrastructure supporting enterprise print services and related systemsSupport infrastructure used for digital signage, IoT devices, and other network-connected systemsSecurity & Compliance OperationsImplement and maintain infrastructure security controls aligned with NIST 800-171 and CMMC 2.0 requirementsPartner with internal leadership and external compliance advisors on cybersecurity initiativesMaintain secure configuration baselines and infrastructure hardening standardsEnsure infrastructure systems generate and forward logs to centralized monitoring platformsSupport vulnerability remediation across infrastructure platformsAssist with investigation of infrastructure-level security alerts and anomaliesSupport audit readiness activities and collection of technical compliance evidenceCollaboration & Operational SupportServe as Tier 2 / Tier 3 escalation resource for complex infrastructure and systems issuesCollaborate with IT leadership on infrastructure improvements and modernization initiativesAssist with enterprise application upgrades and infrastructure lifecycle projectsProvide mentorship and technical guidance to IT support staffParticipate in rotating on-call coverage for infrastructure alerts and critical incidents The following information provides an overview of the skills, qualities, and qualifications needed for this role.Qualifications:Bachelor's degree in Information Technology, Computer Science, or related field preferred, or equivalent combination of education and experience.Relevant industry certifications such as Network+, Security+, Microsoft, or VMware certifications are a plus.5+ years of experience in systems administration, infrastructure engineering, or related rolesStrong knowledge of Windows Server, Active Directory, and Microsoft enterprise environmentsExperience managing network infrastructure including VLANs, switching, firewalls, and VPN technologiesExperience supporting Microsoft 365 environments (GCC High experience preferred)Experience with virtualization platforms such as VMware or Hyper-VExperience administering enterprise endpoint management platforms (Intune, Endpoint Central, or similar)Experience supporting enterprise backup platforms and disaster recovery planningFamiliarity with enterprise deployment tools and automation scripting (PowerShell preferred)Experience supporting infrastructure hosting enterprise applications or ERP systems preferredFamiliarity with NIST 800-171 or CMMC security frameworks preferred You Are:Results-Oriented: Motivated, hard-working and ready to level-up;Curious:  You never stop learning and have an insatiable desire to gain new skills and knowledge;Process Oriented:  Well organized, demonstrating attention to detail;Analytical:  Possess a "If there's a problem, I'll find a solution" attitude;Accountable:  Demanding the highest quality from yourself and team members;Detail-Oriented:  Have excellent time management and organizational skills;A Team Player:  Reliable, collaborative, flexible with a positive "˜get things done' attitude;A U.S. Person: Compliant with ITAR, EAR and other laws and regulations as defined:  "U.S. citizens, lawful permanent residents ("Green Card" holders), persons granted refugee status or asylum status in the United States, or temporary residents granted amnesty." You Will Enjoy:Growth:  The opportunity to learn and advance your career;Wealth: Competitive compensation package linked to your experience and performance, a 401(k) with company match;Wellness: Health, dental, vision & life insurance;Balance:  11 paid holidays, generous paid vacation and sick -time;Culture:  an energetic, caring, fun, value-driven team. Work environment & Physical Demands:While performing the duties of this job, the employee is regularly required to stand, use hands & fingers, handle or feel, and reach with hands and arms. The employee frequently is required to stand, walk, stoop, kneel, crouch, talk and hear.Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and ability to adjust focus. May involve prolonged periods of magnified inspection (eye strain)Requires good hand-eye coordination, arm, hand, and finger dexterity, including ability to grasp.The job may involve prolong periods of standing.Highly repetitive work, usually in a fixed body position for a sustained period of time.The employee is frequently required to use the computer.May involve the use of oils and solvents.Subject to some soilage and irritation from cleaning solutions. (Lab Coats provided)Generally works in a clean environment and works to maintain the environment as such.Safety Glasses and hearing protection are requiredMay require area specific safety trainingThis position works in a manufacturing environment. The noise level in the work environment is usually loud. The employee is regularly exposed to moving mechanical parts and fumes or airborne paper particles.May work at different workstations as production needs require, or shifts from one station to another, during the production process. Disclaimer:This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed. Rochester Precision Optics is committed to leveraging the talent of a diverse workforce to create great opportunities for our business and our people. EOE/AA/Minority/Female/Disability/VeteranIn compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States, and to complete the required employment eligibility verification form upon hire. xijylhu   This role will be performed onsite at our West Henrietta, NY facility.Schedule: Monday - Friday, 7am - 3:30pmCompensation details: 8 Yearly SalaryPI74212 3

Apply Now