Systems Administrator

San Francisco, CA Hybrid Full-time

DEADLINE TO APPLY IS SUNDAY, OCTOBER 25, 2026, AT 11:55 PM

FIRST ROUND INTERVIEWS ARE TENTATIVELY SCHEDULED FOR THURSDAY, NOVEMBER 5, 2026

IF YOU ARE INTERESTED, PLEASE APPLY IMMEDIATELY

A resume is required with your application

Be ready to rethink your assumptions about the public sector. Dedicated and motivated colleagues? Beautiful, high amenity building for on-site work and collaboration? Flexible schedules and hybrid work options? Yes, yes, and yes!

ABOUT THE ROLE

Under the direction of the Bay Area Toll Authority (BATA) Information Technology Manager, the Systems Administrator provides server, identity, and security administration in a primarily Microsoft Server and Azure environment with a small number of Linux systems. This is a broad role with an emphasis on identity, security, and automation. The position helps build a new configuration standards and automation program, and will support facility monitoring technology as new toll facilities come online.

This is one of two systems administrator positions on a seven-person IT infrastructure team within the Capital Delivery, Asset Management, and Roadside Tolling (CART) section, alongside network engineers and a technical project manager. Responsibilities are divided between the two administrators and reviewed as the work changes.

The systems supported by this position keep toll collection running across the Bay Area state-owned bridges and several of the region's Express Lane corridors, including equipment at toll plazas and roadside facilities. This is a 24/7 operation, though after-hours escalations are rare and have not required a rotating on-call schedule. The position is expected to respond to major system failures and security incidents when they occur.

Systems Administrator responsibilities include, but are not limited to, the following:

Administering identity and access platforms, including Active Directory, Entra, and Okta; managing account lifecycle, group membership, and multifactor authentication administration

Developing configuration standards, building automated compliance auditing against those standards, and maintaining systems infrastructure documentation

Administering endpoint security and file integrity monitoring platforms; performing vulnerability remediation and system hardening

Administering on-premises and cloud server infrastructure, storage, operating systems, and system software, including supporting migration of services to Azure

Monitoring system performance, capacity, availability, and security, and responding promptly to alerts and incidents

Managing patch and update cycles across the server and endpoint estate, and tracking platform lifecycle to plan replacement of systems approaching vendor end of support

Administering backup and recovery services, including backup design and scheduling, periodic restore testing and verification, and recovery documentation

Supporting facility technology systems as new toll facilities come online, including building management, environmental monitoring, camera and video, and physical access control

Supporting agency technology projects through infrastructure and security design review, requirements input, and technical coordination with vendors

Providing after-hours response for major system failures and security incidents, and performing occasional on-site work at toll plazas and roadside facilities

Performing other job-related tasks and duties as needed or assigned by the Section

KNOWLEDGE, SKILLS, AND ABILITIES

  • Experience administering enterprise identity platforms such as Okta or Entra, including hybrid integration with on-premises Active Directory
  • Experience with system hardening and configuration baselines
  • Proficiency with Microsoft PowerShell for system administration and automation

Experience administering Microsoft Azure

Experience administering enterprise backup and recovery, including restore testing and verification

Experience responding to security incidents and alerts from endpoint detection or SIEM platforms

Fundamental understanding of networking, including routing, switching, and firewalls

Fundamental understanding of common protocols (such as, but not limited to, LDAP, SMTP, TCP/IP, RADIUS, DNS, DHCP, SAML, and SSL/TLS)

Strong analytical and problem-solving skills, evidenced by a history of enhancing system performance and resolving complex technical issues

Valid California Class C driver's license and a safe driving record. This position requires occasional travel to toll plazas and roadside facilities, which are not served by public transit. Rental vehicles are available for planned site work; the position requires the ability to reach a site on short notice for unplanned or emergency response.

MINIMUM QUALIFICATIONS

Education & Experience: Equivalent to completion of the twelfth (12th) grade and five (5) years of increasingly responsible experience conducting needs and systems analysis and planning, design, development, implementation, configuration, and maintenance of information technology applications, systems, and/or infrastructure

Licenses or Certificates: Valid California Class C driver's license and a safe driving record.

PREFERRED QUALIFICATIONS

Experience

  • Experience with configuration management tooling such as Ansible, Puppet, or Chef
  • Experience using version control (Git) for infrastructure documentation or automation code
  • Experience with vulnerability management tooling and remediation workflows
  • Security certifications such as Security+, GSEC, or CISSP

Experience administering Linux systems

Experience with enterprise monitoring tools (SolarWinds, Splunk, or similar)

Experience with operational technology or building systems (building management, environmental monitoring, or physical security platforms)

Experience with Nutanix

Experience with LAN hardware including patch panels, switches, fiber optics, and Ethernet wiring

Job description provided by Metropolitan Transportation Commission.
View the original posting