About CyberClan
Founded in 2006, CyberClan is a global leader in cybersecurity and incident response. We help organisations recover quickly and securely from cyber incidents, ensuring minimal disruption and maximum resilience. With expert teams located across multiple time zones, we provide support and solutions around the clock, ensuring our clients receive continuous care and expertise whenever they need it.
About the Role
We’re seeking a skilled and proactive System Administrator to join our Post-Breach Remediation team. This role offers the opportunity to work within a cybersecurity-focused environment, supporting clients in restoring and strengthening their IT infrastructure following incidents.
You’ll be involved in a wide range of technical activities — from designing and deploying systems to hands-on infrastructure work such as server installation and configuration. The role spans both on-site and remote support and requires frequent travel across the US, occasionally at short notice.
Key Responsibilities
- Rapidly assess and restore client environments impacted by cybersecurity incidents, including ransomware encryption or data exfiltration.
- Build, configure, and maintain physical, virtual, and cloud-based servers, ensuring secure and stable operations.
- Design and implement tailored IT infrastructure recovery plans based on the unique needs and technologies of each client.
- Restore functionality across the full technology stack — from hypervisors and servers to desktops, laptops, and network devices.
- Work at the network, infrastructure, and user level to bring systems back online safely, securely, and efficiently.
- Manage and recover core services including Active Directory, DNS, DHCP, GPO, and remote access tools.
- Collaborate closely with client teams, adapting to their environments and tools while bringing expert-level knowledge and professionalism.
- Maintain and restore backup and disaster recovery solutions, ensuring data integrity and minimal downtime.
- Participate in an on-call rotation to provide critical infrastructure support during high-pressure recovery scenarios.
Essential Experience
Helpdesk Support – providing frontline assistance and resolving user issues3rd Line Support – handling complex escalations and advanced troubleshootingField Engineer – delivering on-site technical support and installationsBackup Engineer – managing data protection, recovery, and continuity solutionsServer Engineer – building, configuring, and maintaining server infrastructureInfrastructure Engineer – designing and supporting core IT systems and networksCloud Engineer – deploying and managing services across platforms such as Azure, AWS, and Microsoft 365System Administrator – overseeing daily operations, system health, and performanceThis role suits someone who has progressed through a variety of technical positions and is confident working across both physical and virtual environments.
Essential Technical Skills
Windows Server 2008–2025Active Directory, DNS, DHCP, GPORemote Desktop Services, RDP and 3rd party Remoting tools.Virtualisation platforms (Hyper-V, VMware)Microsoft 365, Azure, AWSBackup solutions (e.g., Veeam, BackupExec)Desktop imaging tools (MDT, SCCM, Intune)Networking fundamentals (IP, routing, switching, firewalls)PowerShell scripting and automationWeb and Email filteringDesirable Skills & Experience
Familiarity with cybersecurity environments or incident responseExperience with :Security hardening (VPNs, firewalls, group policies)Security monitoring tools (e.g., SIEM)Linux / MacOS platformsSQL DBSoft Skills
Excellent communication and interpersonal abilitiesCalm and confident in high-pressure situationsStrong organisational and time management skillsWillingness to travel frequently and work on-siteSelf-driven and adaptable to evolving prioritiesSupportive team player with mentoring capabilitiesQualifications
Degree in Information Technology, Computer Science, or a related field (or equivalent experience)Preferred certifications :CompTIA Network+, Server+, Security+Microsoft MCSA / MCSEMicrosoft AZ-900 / AZ-104Cisco CCNA / CCNPITIL, PRINCE2, or PMICISSP, OSCP, GCIH, GCFA (desirable)Job Type
Full-time / Exempt
Preferred Location
Illinois, Wisconsin, Indiana, and Michigan
%of Travel Required
Up to 70%
Physical Requirements
Prolonged periods of sitting at a desk and working on a computer.
CyberClan is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status