JOB DESCRIPTION

Position Title:

System & Network Administrator (Administrator II)

Executive Leadership:

Chief Information Officer

Leadership:

VP Infrastructure & Engineering Operations

Team Membership:

Information Technology

Location:

Exton, PA Office (620 Pennsylvania Drive, Exton, PA 19341) Or Remote

Job Status:

Exempt (Salaried)

Supervisory Responsibility:

None

Position Summary:

The System & Network Administrator keeps World Travel, Inc.'s servers, networks, identity platform, and cloud services secure, available, and well documented. This mid-level role spans on-premises and cloud (hybrid) infrastructure, serves as a Tier 2/3 escalation point for infrastructure issues, and treats automation and zero-trust security as everyday practice rather than special projects.

Essential Duties and Responsibilities:

Systems Administration

• Install, configure, patch, and monitor Windows Server and Linux (RHEL, Ubuntu etc) systems, both physical and virtual.
• Manage virtualization platforms (VMware vSphere, Hyper-V, Proxmox, or Nutanix) and container hosts where used.
• Administer identity and access, including Active Directory, Microsoft Entra ID, SSO, and multi-factor authentication.
• Maintain Microsoft 365, including email security, licensing, and data retention.
• Run backup and disaster recovery following the 3-2-1-1-0 rule, with immutable copies and quarterly restore tests.

Network Administration

• Design, configure, and maintain switches, routers, firewalls, VPN, and wireless (Wi-Fi 6/6E/7) networks.
• Manage VLANs, routing (OSPF, BGP), DHCP, DNS, NAC, and IPv4/IPv6 addressing.
• Support SD-WAN and secure remote access, moving toward ZTNA/SASE where adopted.
• Monitor performance and capacity with tools such as PRTG, Zabbix, LibreNMS, or Datadog.

Cloud and Hybrid Infrastructure

• Administer workloads in Azure, AWS, or Google Cloud, including virtual networks, IAM, and cost tracking.
• Maintain hybrid connectivity (site-to-site VPN, ExpressRoute, or Direct Connect) and hybrid identity sync.

Security and Compliance

• Apply zero-trust principles: least privilege, MFA everywhere, network segmentation, and conditional access.
• Manage endpoint protection (EDR/XDR), vulnerability scanning, and timely patching of critical CVEs.
• Forward logs to the SIEM and support incident response, including tabletop exercises.
• Support controls aligned with NIST CSF 2.0, CIS Controls v8.1, PCI and ISO 27001 or SOC 2 audits where applicable.

Automation and Documentation

• Automate routine work with PowerShell, Bash, or Python, and manage configuration as code (Ansible, Terraform) in Git.
• Use AI-assisted tools responsibly for scripting and troubleshooting, following company data policies.
• Keep network diagrams, runbooks, asset inventory, and change records current.

Support and Operations

• Serve as Tier 2/3 escalation for infrastructure incidents and work within ITIL-aligned change and problem management.
• Participate in an on-call rotation and planned after-hours maintenance windows.
• Evaluate vendors, manage licenses and hardware lifecycle, and mentor junior IT staff.

Qualifications:

Required Qualifications

• 3+ years administering servers and networks in a production environment, or an associate's/bachelor's degree in IT or a related field plus 2+ years.
• Solid working knowledge of Windows Server, Active Directory/Entra ID, and at least one Linux distribution.
• Hands-on experience with enterprise switching, routing, and firewalls (e.g., Cisco, Juniper, Aruba, Fortinet, Palo Alto).
• Strong grasp of TCP/IP, DNS, DHCP, VLANs, VPNs, and wireless networking.
• Experience with at least one public cloud platform (Azure, AWS, or GCP).
• Scripting ability in PowerShell, Bash, or Python.
• Working knowledge of backup, patching, endpoint security, and MFA practices.
• Ability to pass a background check and to work occasional after-hours maintenance and on-call shifts.

Preferred Qualifications and Certifications

• Networking: Cisco CCNA or CCNP, Juniper JNCIA, CompTIA Network+; experience with SD-WAN, ZTNA/SASE, and Wi-Fi site surveys.
• Systems: Microsoft Certified: Azure Administrator (AZ-104), RHCSA, CompTIA Server+ or Linux+; VMware, Hyper-V, or Nutanix administration.
• Cloud: AWS Certified SysOps Administrator or Solutions Architect Associate; hybrid identity and cloud cost management.
• Security: CompTIA Security+, Microsoft SC-300 or AZ-500; SIEM, EDR/XDR, and vulnerability management.
• Automation: HashiCorp Terraform Associate; Ansible, Git, and CI/CD pipelines.
• Operations: ITIL 4 Foundation; change management and audit support (SOC 2, ISO 27001).

Soft Skills and Competencies:

• Methodical troubleshooting: isolates root causes under pressure and documents the fix.
• Clear communication: explains technical issues to non-technical colleagues and writes usable runbooks.
• Security mindset: questions defaults, follows change control, and reports risks early.
• Ownership: sees tasks through, follows up on tickets, and keeps stakeholders informed.
• Continuous learning: keeps current with vendor changes, threats, and new tooling.
• Collaboration: works well with the help desk, developers, security, and outside vendors.

Education and Experience Requirements

Associate's or bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent hands-on experience.

3+ years administering servers and networks in a production enterprise environment (or 2+ years with a related degree).

Industry certifications preferred but not required: CCNA/CCNP, Network+, Security+, AZ-104, RHCSA, ITIL 4 Foundation, etc.

Physical Factors/Environment:

• Must be able to sit for long periods of time.
• Must be able to lift equipment up to 50 pounds (23 kg) and work in server rooms, data centers, and wiring closets.
• Must be able to work odd/off-shift hours, including very late at night and/or weekends to meet company and project needs.
• Must participate in a rotating on-call schedule and scheduled after-hours maintenance windows.
• Must be able to work more than 40 hours per work week.
• Work is performed in office, data center, and remote settings, with occasional travel to company sites.

If you need an accommodation, please reach out to People Operations Department.