freeformfuturecorp · Los Angeles, CA (On-site) · El Segundo, California, United States
<p><span style="font-size: 14pt;"><strong><span data-contrast="auto">SENIOR IT SYSTEMS ENGINEER</span></strong></span></p> <p><span data-contrast="auto">Freeform builds AI-native manufacturing systems that unify software, hardware, and physics to produce industrial-scale parts at the speed of human ideation. By treating manufacturing as a single integrated system, we unlock a new era of innovation where complex hardware is designed, built, and scaled without limits.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></p> <p><span data-contrast="auto">As a Senior IT Systems Engineer, you will build the systems that connect our people, our factory, and our data: identity and endpoints, servers and storage, cloud and Kubernetes, the network, and the security layer over all of it. IT here is part of the technology we build, so it gets the same appetite for custom solutions to problems nobody has solved yet. Freeform is scaling rapidly across headcount, locations, and new technology coming online, so we’re looking for someone who’s excited to move fast and build the plane as we fly it. We want someone with broad skills, a “no job too big or small” mentality, and a taste for building.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></p> <p data-renderer-start-pos="21026"><iframe style="width: 560px; height: 315px;" src="https://www.youtube.com/embed/sXfG6ssZ190?feature=shared" width="327" height="184"></iframe></p> <p data-renderer-start-pos="21026"><strong><span data-contrast="auto">Responsibilities:</span></strong><span data-ccp-props="{"201341983":0,"335559739":0,"335559740":240}"> </span></p> <ul> <li><span data-contrast="auto">Run Microsoft 365, Entra ID, and Azure in a hybrid setup with on-prem Active Directory, including Entra Connect, conditional access, RBAC, and licensing</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Manage the device fleet in Intune: enrollment, compliance, app deployment, Autopilot, and patching</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Build and maintain Windows Server (AD DS, DNS, DHCP, Group Policy, RADIUS/NPS) and hardened Ubuntu and Red Hat servers</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Run virtualization and SAN storage (Pure Storage, HPE 3PAR over iSCSI and NFS), from provisioning and replication to capacity planning</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Run and manage AWS infrastructure, including EKS, S3, IAM and VPC networking, with ownership of access control, monitoring and cost.</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Administer Kubernetes both on-prem and in EKS: cluster builds and upgrades, networking and ingress, storage, RBAC, and troubleshooting workloads.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li> <li><span data-contrast="auto">Design and maintain the Layer 2/3 network and own segmentation across user, server, management, OT, and guest zones</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Operate Defender XDR, Sentinel, and pfSense firewalls: tune detections, investigate incidents, and drive vulnerability remediation and least-privilege access</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Design and build custom solutions where off-the-shelf tools fall short, and automate repetitive work</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Act as the senior escalation point for infrastructure incidents and lead root-cause analysis</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Document what you build in runbooks and diagrams, and mentor junior IT staff</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> <li><span data-contrast="auto">Join the on-call rotation and planned after-hours maintenance windows</span><span data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335559738":0,"335559739":0,"335559740":240}"> </span></li> </ul> <p><strong><span data-contrast="auto">Basic Qualifications:</s