Junior System Administrator

** No sponsorship offered for this position ** ** No relocation benefits for this position ** Pay: $35.00–$45.00/hr Please note: This role requires in-office work in Temecula, CA, at least 4 days per week, and is not eligible for visa sponsorship or relocation assistance. About ASM At ASM, we build best-in-class products for health care administration and quality assurance. Since 1982, we’ve grown a strong team that serves more than 1,200 health care organizations worldwide on a modern technology stack. About the role This is an entry-level role for someone early in their IT career who wants to grow into a well-rounded systems engineer. You’ll work alongside our senior team to maintain and scale a modern SaaS hosting environment that spans Windows Server, VMware, Azure, and enterprise networking and security. You’ll also learn how a SOC 2 and HIPAA-compliant organization operates day to day. We don’t expect you to know everything on day one. We’re looking for someone curious, careful, and eager to learn, and we’ll help you get there. What you’ll do Manage user and group access in Microsoft Entra ID (formerly Azure AD) and Active Directory to ensure appropriate access Help maintain and document our infrastructure, including Windows servers, VMware vSphere/ESXi, Azure resources, Cisco switching, and [Palo Alto] firewalls Investigate and troubleshoot issues flagged by our monitoring systems or reported by users, and escalate when needed Support patch management for Windows Servers, VMware, and network devices, and help us automate more of it Help maintain system hardening standards and the policies, procedures, and documentation behind our SOC 2 and HIPAA compliance Assist with audits and security assessments, and occasionally help clients understand our security posture Take part in scheduled maintenance windows and, after onboarding, our on-call rotation What you’ll learn Hands-on administration of a production, compliance-driven SaaS environment Identity and access management in Microsoft Entra ID, including Conditional Access, MFA, and hybrid identity with on-prem Active Directory Azure, VMware, and enterprise networking and firewall management Automation with PowerShell How SOC 2 and HIPAA audits work from the inside Schedule and on-call During onboarding, you may be in the office up to 5 days per week. The role includes occasional evening and weekend maintenance work. After you’ve completed onboarding, you’ll join our 24/7 on-call rotation, which may include on-call shifts up to several times per week. Time spent handling after-hours calls is paid at standard overtime rates. Who thrives here You take pride in your work and think about security and availability by default. Before you make a change, you consider how it will affect end users. You enjoy digging into problems that don’t have obvious answers. You’re careful without being slow, you like being part of a team, and you’re happy to take on everything from routine tasks to complex projects. Required 0–2 years of experience in IT support, help desk, or system administration (internships, homelab projects, and coursework count) A solid grasp of computing fundamentals, including operating systems, file systems, and networking (TCP/IP, DNS, DHCP, VLANs) Familiarity with Windows Server, Active Directory, and Microsoft Entra ID Some exposure to PowerShell or another scripting language Strong attention to detail and a habit of documenting your work Strong written and verbal communication skills Nice to have Experience with Azure, VMware vSphere/vSAN, or Group Policy Experience with Microsoft IIS web servers, reverse proxies such as NGINX, or Azure Application Gateway and Azure Front Door Certifications such as CompTIA A+, Network+, or Security+, or Microsoft AZ-900, SC-900, or AZ-104 Exposure to a compliance framework such as HIPAA, SOC 2, or HITRUST Basic SQL Server knowledge Compensation: In accordance with California pay transparency requirements, the anticipated hourly pay range for this position is $35.00 to $45.00 per hour. Actual compensation will be determined based on factors such as experience, skills, and qualifications. A competitive PTO structure (non-accrual, granted immediately after the probationary period) 100% medical, dental, and vision coverage for all employees Several medical coverage options to choose from (free and at cost) Potential partial coverage for dependents (based on the plan chosen) Several supplemental benefit options (hospital confinement, accident insurance, disability, cancer insurance, etc.) FSA (Flexible Spending Account) DCFSA (Dependent Care Flexible Spending Account) 401(k) with employer match Weekly catered company lunches (Wednesdays) Summer and holiday parties A modern, regularly updated technology stack