Systems Administrator

Andrews & Associates IT Solutions, LLC 6117 W Amarillo Blvd, Amarillo, TX Full-time, in-office with field and project work Compensation is set based on education, experience, and certifications.

THE SHORT VERSION

This is the seat where the standards get set. You will own the design of the environments our clients run on, take on the escalations nobody else can close, and decide what "done right" looks like for the rest of the team to build against.

This is the top of our technical ladder. There is no senior engineer above you to catch the call you got wrong, and no architect handing you a design to implement. You are that person. If that reads as a risk rather than as the reason to apply, this is not your seat.

If you are already administering environments somewhere else, understand this up front: you will inherit systems and problems you had no part in creating. That is the nature of the work. What is different here is that you are expected to replace them with something durable, document it, and make it repeatable across a client base rather than fixing it one site at a time. You will help build the plans that enable our clients' success and longevity, not just keep them running until the next problem.

You are also the person our junior administrators and technicians learn from. Not as a side duty. It is part of the job.

WHO WE ARE

Andrews & Associates is a managed services provider in Amarillo supporting law firms, medical practices, banks and insurance agencies, county and municipal government, and agriculture and energy operations across the Texas Panhandle and eastern New Mexico. Our clients operate in regulated industries, which means the work we do carries real consequences and real standards. We take that seriously and we expect the people we hire to do the same.

We are a relationship-first, customer service-centered organization. Our clients are not accounts and they are not ticket volume. They are people running businesses that depend on the systems we maintain, and they deserve nothing less than our best effort and the full leverage of our talent applied to their problems and their goals. Care and empathy for the client are not soft skills here. They are the job.

We promote from within. This is the senior technical seat at our company. The step up from here is management, and it is real for the people who want it.

WHAT YOU WILL ACTUALLY DO

Serve as the last internal escalation point. What reaches you gets closed, or it goes to the vendor with the diagnostic work already done and the case built

- Design and administer cloud identity and endpoint management at scale: conditional access, compliance policies, automated enrollment, app deployment, and device configuration profiles

- Design and administer Active Directory: group policy, DNS, DHCP, sites and services, delegation, and hybrid identity

- Design and maintain firewalls: policy, NAT, VPN tunnels, content filtering, and remote access

- Design, deploy, and optimize wireless and network infrastructure, including VLAN segmentation, switching, and coverage planning

- Implement and advance zero trust work: least privilege, conditional access, device compliance, MFA enforcement, application control, and identity protection

- Build and maintain the standards the rest of the team works to: baseline configurations, policy templates, monitors, and automation that apply across clients rather than to one site at a time

- Participate in planning our clients' networks and systems: assess what is there, recommend what should change, and help shape the roadmap rather than only executing it

- Lead client projects: migrations, deployments, network builds, and refresh cycles, including scoping, scheduling, and change communication

- Own backup and recovery design, and lead restore and disaster recovery testing

- Respond to security alerts, investigate, remediate within our incident procedures, and fix whatever let it happen

- Document configurations, standards, and changes so the environment is legible to everyone who touches it after you

- Review the work of junior administrators and technicians, and raise the floor of what the team can do without you

Our doctrine is simple: fix the customer, then fix the problem. If a client is frustrated, that gets addressed before the keyboard does.

At this level, solution durability is the whole job. A technician's mistake affects one user. An administrator's mistake affects an entire client. A bad standard affects every client it touches, and it will be found by someone else at the worst possible time. Plan the change, know the rollback, test before you call it done, and build to a standard rather than to whatever solves today. Every one-off configuration left behind becomes a problem someone else inherits.

WHAT YOU NEED

- Six or more years in IT with substantial time in an administrative seat. This is not an entry point into administration

- Design and administration of cloud identity and endpoint management in production, including conditional access and compliance policy you built rather than inherited

- Windows Server and Active Directory administration at depth, including group policy design, hybrid identity, and migration work

- Firewall and network design, including VPN, segmentation, routing, switching, and how wireless actually behaves in real buildings

- PowerShell you write, not PowerShell you paste. Automation is how we scale, and manual one-off work does not

- Judgment about tradeoffs. You will be asked what a change costs, what it breaks, and what it saves, and you are expected to have an answer

- Initiative. Noticing a problem and documenting it is table stakes. We are looking for the person who then proposes the fix and drives it to done

- Change discipline. You plan the work, communicate it, stage it, and know how to undo it

- Genuine care for the people you are helping. Empathy is a requirement of this role, not a bonus. Most of the clients affected by your work will never meet you, and they deserve the same standard as the ones who do

- Professional appearance and conduct in client environments. You will be in law offices, exam rooms, bank branches, and county buildings

- A valid Texas driver's license, an acceptable driving record, and reliable transportation

- Must pass a criminal background check, including fingerprinting. Approval under the FBI CJIS Security Policy is a prerequisite for an offer. If you cannot be cleared, we cannot hire you, regardless of technical ability

- Ability to lift 50 pounds and work in server rooms, ceiling spaces, and other cramped or non-ergonomic areas

- Availability for an on-call rotation and after-hours maintenance windows, which is when most administrative change happens

WHAT HELPS YOU STAND OUT

- Microsoft certifications such as AZ-104, SC-300, MS-102, or MD-102 - CompTIA Network+ or Security+, or CCNA

- Experience with enterprise firewall, wireless, endpoint protection, remote monitoring, application control, or backup platforms

- Scripting and automation beyond the basics, including configuration as code

- Multi-tenant or MSP administration experience, particularly standardizing an inconsistent client base

- Familiarity with HIPAA, GLBA, CJIS, CMMC, or similar compliance frameworks and how they shape control decisions

- Familiarity with the identity and data protection controls behind client Copilot deployments, such as sensitivity labels, SharePoint permissions, and conditional access

- Experience mentoring or reviewing the work of other technical staff

WHAT WE OFFER

- Health, dental, and vision coverage

- Paid time off and paid holidays

- Retirement plan

- Company vehicles provided for field work

- Exam reimbursement for approved certifications upon successful completion

- Ownership of real systems for real clients, and the authority to decide how they get built

- Real project work, not a queue you never get out of

- A small team where your work is visible, your judgment is trusted, and you have a real say in how we do things

HOW TO APPLY

Send your resume and a short note about a standard or process you built that other people actually adopted, and what made it stick, to Sign in to view email. We read every one.

Questions? Call us at 806-242-1088.

• Andrews & Associates IT Solutions, LLC is an equal opportunity employer.