Job description

Vast is developing next-generation space stations and space infrastructure using an incremental, hardware-rich, and low-cost approach. Vast is rapidly developing its multi-module Haven Station to ensure a continuous human presence in space for America and its allies, enabling advanced microgravity research and manufacturing, and unlocking a new space economy for government, corporate, and private customers. Haven Demo’s 2025 success made Vast the only operational commercial space station company to fly and operate its own spacecraft. Next, Haven-1 is expected to become the world’s first commercial space station when it launches in 2027, followed by additional Haven modules. Additionally, the company recently announced Vast Satellite , a high-power satellite product line leveraging its space station components and the heritage of Haven Demo. Headquartered in Long Beach, California , and with more than 1,000 employees and over a billion dollars in private capital, Vast has built the facilities required to manufacture and operate America’s next space station. The company plans to develop future habitats and systems for the Moon and Mars, dedicated space stations for government partners, and other crewed systems that will unlock the expanding long-term space economy. Vast is looking for a Senior IT System Administrator , reporting to the System Administrator Manager, to support the development of the systems that will be required for the design and build of human-rated space stations. As a Senior IT System Administrator, you will be responsible for the management, support, and enhancement of the IT infrastructure, IT service delivery, and end-user IT experience. This role ensures the reliable operation and performance of our IT infrastructure and solutions for the site and beyond, playing a pivotal role in managing and overseeing IT systems. You will install and maintain user endpoint devices and support infrastructure managed by other IT teams while training users on complex systems and computer functions. This will be a full-time , exempt position located in our Long Beach location. Responsibilities: Enterprise Infrastructure Architecture & Design Design, architect, and implement enterprise-scale Windows Server infrastructure (2016/2019/2022) supporting 500+ endpoints and mission-critical operations. Lead the architecture and optimization of Active Directory Domain Services, including multi-forest/multi-domain design, trust relationships, site topology, and replication strategies. Design and implement Group Policy architecture at scale, including inheritance models, WMI filtering, security filtering, and loopback processing. Advanced Identity & Access Management Architect and maintain complex Active Directory environments, including forest/domain design, schema modifications, FSMO role management, and disaster recovery strategies. Design and enforce role-based access control (RBAC), privileged access management (PAM), and least-privilege security models. Optimize Active Directory performance including replication monitoring, database maintenance, and tombstone management. Enterprise Endpoint & Device Management Architect and manage enterprise endpoint solutions using Group Policy, Configuration Manager (SCCM), and endpoint management platforms Develop comprehensive endpoint security baselines aligned with CIS benchmarks, NIST 800-53, and CMMC requirements. Provide architectural guidance for cross-platform management (macOS via JAMF, Linux) in heterogeneous environments. Patch Management & Compliance Engineering Design and implement enterprise patch management architecture for servers and endpoints. Manage patch ring strategies, pilot groups, and phased deployment models to minimize operational risk. Coordinate patching schedules across production, staging, and development environments. Minimum Qualifications: 4+ years of experience in IT system administration in an enterprise environment. 4+ years of experience with endpoint management tools (e.g., JAMF, Intune, GPO). Demonstrable experience in patch management across diverse environments. Solid understanding of server operating systems (Windows Server, Linux) and virtualization platforms (e.g., VMware, Hyper-V). Experience with scripting languages like PowerShell, Python, or Bash for task automation and installation. Working knowledge of networking fundamentals (subnets, VLANs, routing). Preferred Skills & Experience: Proficiency in administering and managing endpoint and server automation systems. Hands-on experience with enterprise-grade patch management tools (e.g., WSUS, Ivanti, or Automox). Strong understanding of SaaS solutions and their integration into existing IT infrastructure. Experience working within regulatory frameworks (ITAR, NIST, FedRAMP) and maintaining compliance. Proven ability to independently manage complex IT projects with cross-functional impact. Additional Requirements: Willingness to work evenings and/or weekends to support critical mission milestones Ability to lift up to 25lbs unassisted Pay Range: California $123,000 — $180,000 USD We calibrate level and compensation to the selected candidate's experience and demonstrated capability. We welcome applicants across a range of experience levels to apply. COMPENSATION AND BENEFITS Base salary will vary depending on job-related knowledge, education, skills, experience, business needs, and market demand. Salary is just one component of our comprehensive compensation package. Full-time employees also receive company equity, as well as access to a full suite of compelling benefits and perks, including: medical, dental, and vision coverage for employees and dependents, generous paid time off; up to 20+ days of vacation for exempt staff and up to 10+ days of vacation for non-exempt staff with the ability to cash-out unused vacation annually, paid parental leave, short and long-term disability insurance, life insurance, access to a 401(k) retirement plan, ClassPass credits, personalized mental healthcare through Spring Health, and other discounts and perks. We also take pride in offering exceptional food perks, with snacks, drip coffee & onsite barista, cold drinks, and dinner meals remaining free of charge, and lunch subsidized as part of Vast’s ongoing commitment to providing high-quality meals for employees. EQUAL OPPORTUNITY Vast is an Equal Opportunity Employer; employment with Vast is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Requirements

Must-haves

This will be a full-time , exempt position located in our Long Beach location.
Enterprise Infrastructure Architecture & Design
Design, architect, and implement enterprise-scale Windows Server infrastructure (2016/2019/2022) supporting 500+ endpoints and mission-critical operations.
Lead the architecture and optimization of Active Directory Domain Services, including multi-forest/multi-domain design, trust relationships, site topology, and replication strategies.
Design and implement Group Policy architecture at scale, including inheritance models, WMI filtering, security filtering, and loopback processing.
Advanced Identity & Access Management
Architect and maintain complex Active Directory environments, including forest/domain design, schema modifications, FSMO role management, and disaster recovery strategies.
Design and enforce role-based access control (RBAC), privileged access management (PAM), and least-privilege security models.
Optimize Active Directory performance including replication monitoring, database maintenance, and tombstone management.
Enterprise Endpoint & Device Management
Architect and manage enterprise endpoint solutions using Group Policy, Configuration Manager (SCCM), and endpoint management platforms
Develop comprehensive endpoint security baselines aligned with CIS benchmarks, NIST 800-53, and CMMC requirements.
Provide architectural guidance for cross-platform management (macOS via JAMF, Linux) in heterogeneous environments.
Patch Management & Compliance Engineering
Design and implement enterprise patch management architecture for servers and endpoints.
Manage patch ring strategies, pilot groups, and phased deployment models to minimize operational risk.
Coordinate patching schedules across production, staging, and development environments.
4+ years of experience in IT system administration in an enterprise environment.
4+ years of experience with endpoint management tools (e.g., JAMF, Intune, GPO).
Demonstrable experience in patch management across diverse environments.
Solid understanding of server operating systems (Windows Server, Linux) and virtualization platforms (e.g., VMware, Hyper-V).
Experience with scripting languages like PowerShell, Python, or Bash for task automation and installation.
Working knowledge of networking fundamentals (subnets, VLANs, routing).
Proficiency in administering and managing endpoint and server automation systems.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off

Parental Leave