IT Systems Administrator (Cloud, Identity, Endpoint & Security)

Maintain Windows PCs (deployment, patching, troubleshooting, device encryption, local admin controls, endpoint security).

Maintain Ubuntu/Linux laptops (user access, updates, disk encryption where applicable, security hardening, troubleshooting).

Standardize device setup using repeatable processes (imaging, configuration scripts, endpoint policies).

Maintain endpoint inventory (hardware specs, ownership, lifecycle, warranty, status).

Implement and administer an MDM solution to enforce device security, configuration, and compliance.

Examples: Microsoft Intune, Jamf, Kandji, or equivalent (choose what fits your environment).

Define and enforce device baselines (PIN/biometrics, encryption, auto-lock, OS update requirements, remote wipe).

Manage BYOD vs corporate-owned policies, and align with privacy/responsible monitoring expectations.

Ensure smooth enrollment and support for iOS/Android and laptops where supported.

Administer AWS accounts and foundational services used by the company, such as:

IAM (users/roles/policies), security groups, VPC basics, EC2, S3, RDS (as applicable), CloudWatch/logging.

Improve AWS security posture (least-privilege IAM, MFA for privileged access, key/secret hygiene).

Support backups, monitoring/alerting, and incident response procedures for cloud workloads.

Assist with cost visibility and optimization (tagging, budgets, alerts, rightsizing recommendations).

Help define, implement, and maintain company cybersecurity policies and standards, such as:

Acceptable use, password/MFA, endpoint security, patching, backups, access control, vendor access, secure sharing.

Implement practical security controls aligned with the company’s risk level: Endpoint protection, encryption, vulnerability management, audit logging, least privilege, secure onboarding/offboarding.

Run security awareness basics (phishing awareness, secure handling of data, reporting procedures).

Support security incident response: triage, containment, remediation, post-incident improvements.

Coordinate with external security vendors (pentest, audits, SOC/SIEM support) if applicable.

Experience with Microsoft security tooling (e.g., Defender for Endpoint, Defender for Office 365) or equivalent.

Familiarity with compliance frameworks (e.g., ISO 27001 concepts, SOC 2 readiness, GDPR awareness) as applicable.

Experience with automation/scripting: PowerShell (Windows/M365), Bash (Linux), Python (optional), and/or Ansible for configuration management.

Basic networking skills: DHCP/DNS/VPN/Wi‑Fi management, firewall concepts, zero-trust principles.

Experience with ticketing systems (Jira Service Management, Zendesk, Freshservice, etc.).

Experience building policies and controls in a startup/SMB environment with pragmatic constraints.

Microsoft 365 Admin Center, Exchange Admin, Entra ID, Intune (or Jamf/Kandji/other MDM)

AWS Console + IAM + CloudWatch (and IaC tools if applicable)

Windows 10/11, Ubuntu/Linux

Endpoint security tooling (Defender/CrowdStrike/SentinelOne, etc.)

Password manager and/or SSO provider integrations

Ticketing + asset management system

Ready to help transform 800,000 hectares of greenhouses into fully automated food production sites? If you’re excited to build the IT and security foundation that lets a robotics team ship safely and move fast, we’d love to hear from you.

We’re committed to building a diverse and inclusive team. We encourage applications from candidates of all backgrounds.

eternal.ag is building fully automated food production sites that can sustainably produce fresh food year-round. Backed by world-class investors and partnering with leading agricultural companies, we're turning the vision of fully-autonomous greenhouses into reality.