System Administrator

Job description

**About Emesent** Emesent is a Brisbane-based world leader in autonomous LiDAR mapping and drone autonomy. Our flagship product, Hovermap, delivers autonomous LiDAR mapping in GPS-denied environments for the Mining and Defence sectors. Our newly launched GX1 brings high-performance handheld LiDAR to surveying and the built environment. Behind both sits a pipeline of future hardware products and a team that takes hard engineering problems from concept to the field. **Role Description** The System Administrator reports to the Director of IT & AI and sits within a small IT team. The role is responsible for the design, operation, security, and continuous improvement of the organisation's corporate IT environment. This spans on-premises and cloud infrastructure, Microsoft and Linux platforms, identity and access management, SaaS integrations, endpoint fleet management, and internal engineering compute clusters. The role is both hands-on and enabling, keeping day-to-day operations running reliably while helping engineering and business teams adopt new technologies, tools, and workflows safely. The successful candidate will act as a technical escalation point (L2/L3) for the service desk and will contribute to governance, disaster recovery, and cybersecurity initiatives across the business. **Key Responsibilities:** **Infrastructure & Operations** - Administer Windows Server environments, including Group Policy, DNS, DHCP, file and certificate services. - Provide L2/L3 operational support, resolving escalations from the Service Desk and complex infrastructure incidents. - Mentor and support L1/L2 Service Desk staff, building their technical capability. - Prioritise tickets in the infrastructure queue, ensuring incidents and requests are resolved within agreed SLAs. - Administer Microsoft 365, including Exchange, Teams, SharePoint, and Intune. - Manage endpoint provisioning and lifecycle for a globally distributed workforce across Windows, macOS, and Linux. - Administer VMware and Linux compute clusters and AWS environments, including capacity planning and performance management. - Maintain VPN infrastructure for remote and on-site personnel. - Administer network configuration for Brisbane HQ and remote sites (switching, routing, firewalls, wireless). - Own DR and business continuity initiatives, including backups, restore testing, and infrastructure resilience. - Enable teams to safely adopt new technologies and workflows, including internally developed tools. - Support the secure adoption and governance of AI tools and services across the business, including access controls, data protection, and integration with existing platforms. **Identity & Access Management** - Maintain Active Directory and Microsoft Entra ID, SSO, MFA, Conditional Access, and hybrid identity sync. - Improve access management through Entra ID integrations with SaaS platforms and AWS (SAML/OIDC/SCIM), including automated provisioning and deprovisioning. - Implement least-privilege RBAC and manage the joiner/mover/leaver process; conduct periodic access reviews. **Cybersecurity** - Enforce endpoint security policies across Windows, macOS, and Linux using Intune, Defender, and equivalent tooling. - Own patch management and vulnerability management across servers, endpoints, and network devices. - Maintain firewalls, email security (DMARC/DKIM/SPF), web filtering, and endpoint detection and response. - Monitor security alerts, investigate and contain incidents, and support penetration test remediation. - Harden systems against recognised baselines (CIS, Microsoft baselines, ASD Essential Eight). - Support cybersecurity governance, risk, and compliance initiatives. **Governance** - Maintain documentation, network topology, and the asset register. - Operate and improve change management, including risk assessment, approvals, and rollback planning. - Contribute to IT policies and standards and support audits and compliance. - Track licensing compliance, maintain the IT risk register, and contribute to DR/BC planning (RTO/RPO, DR exercises). - Contribute to and uphold the organisation’s AI policy. **Skills & Experience** - 5+ years in systems administration within a mixed Windows/Linux enterprise environment. - Windows Server, Active Directory, and Microsoft Entra ID, including Group Policy, DNS/DHCP, certificate services, Conditional Access, MFA, and hybrid identity. - Microsoft 365: Exchange Online, Teams, SharePoint, Intune. - Linux administration (Ubuntu and/or RHEL-based). - VMware vSphere/ESXi and AWS, including cluster and capacity management. - Networking and network security: TCP/IP, VLANs, routing, switching, firewalls, enterprise Wi-Fi, VPN. - Scripting and automation in PowerShell, Bash, or Python. - Clear written and verbal communication, including explaining technical issues and risks to non-technical stakeholders. - Strong documentation discipline: runbooks, network diagrams, change records. - Strong understanding of AI tools and their security, privacy, and data governance implications. **Desirable** - Relevant certifications, such as Microsoft (AZ-104, SC-300), AWS Solutions Architect, CCNA, or RHCSA. - Experience applying security baselines (CIS, Microsoft, ASD Essential Eight) in a compliance or audit context. - Experience supporting engineering or HPC compute environments. **The Perks** - 9-day fortnight — every second Friday off. - Employee Share Option Plan (ESOP) — share in Emesent's success. - Genuine learning and development opportunities, including LinkedIn Learning. - Flexible working arrangements and a casual dress code. - Employee Assistance Program and Qoctor online telehealth. - A full day of leave each year for your work anniversary. **Who we are** Emesent builds LiDAR mapping and autonomy technology for the world's most challenging environments. Founded in 2018 from Australia's CSIRO, our products — Hovermap, GX1, and the Aura software platform — capture spatial data in hazardous, GPS-denied, and hard-to-reach places for mining, survey, and infrastructure customers worldwide. With multiple product lines spanning hardware, desktop, and cloud, we're at an inflection point — and this role sits at the technical heart of it.