System Security Administrator

About Helion We are a fusion power company based in Everett, WA, with the mission to build the world's first fusion power plant, enabling a future with unlimited clean electricity. Our vision is a world with clean, reliable, and affordable energy for everyone. Since Helion's founding in 2013, we have raised over $1 billion from long-time investors such as Sam Altman, Mithril, and Capricorn Investment Group as well as new investors SoftBank and Lightspeed to propel us forward. Our last prototype, Trenta, completed 10,000 high-power pulses and reached plasma temperatures of 100 million degrees Celsius (9 keV). We are now operating Polaris, our next prototype on the path to the world's first fusion power plant. This is a pivotal time to join Helion. You will tackle real-world challenges with a team that prizes urgency, rigor, ownership, and a commitment to delivering hard truths – values essential to achieving what no one has before. Together, we will change the future of energy, because the world can't wait. What You Will Be Doing: In this role, you will work within a small team to maintain, update, and manage our system software and hardware. You’ll communicate with teams and users of varying levels of technical knowledge to diagnose and resolve problems patiently and efficiently. This role is responsible for setting up and maintaining a system or specific components of a system including installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures. You Will: - Manage Windows\Linux Servers and Microsoft 365 Administration - Ensure performance and availability across all Microsoft 365 services, implement and manage Group Policies and Active Directory administration, Support and optimize virtualization technologies, and perform server and updates to ensure stability and security - Ensure Security, Governance, and Regulatory Compliance - Harden environments and implement security best practices and compliance guidelines by implementing conditional access policies, DLP, RBAC, MFA, and email security protections. Conduct regular system audits to monitor adherence to security policies, validate security controls, mitigate vulnerabilities, and increase operational efficiency. Support incident response efforts related to system security, email security, and cloud identity threats - Endpoint & Patch Management - Manage OS deployments, application packaging, patch management, and lifecycle automation. Manage and troubleshoot patch management solutions for synchronization and identity federation. Develop and maintain scripts and tools for managing configurations, monitoring, and software deployment across endpoints. - Build Infrastructure Monitoring & Automation - scale and improve monitoring solutions to track system availability, resource utilization, and security compliance. Develop PowerShell scripts and automation tools to improve efficiency, reduce manual tasks, and enforce consistency. Use RMM (Remote Monitoring & Management) tools for system performance tracking, endpoint monitoring, and reporting - Collaborate Cross-functionally – work closely with teams across the business to ensure performance, provide technical leadership and mentoring to IT support staff, participate in on-call rotations and respond to emergency system incidents, and assist with managing and supporting workloads in Azure and AWS as needed Required Qualifications: - 5+ years of experience in Windows Server administration, Office 365/Entra ID management, and infrastructure automation including experience with active Directory (on-prem and Entra ID), Group Policy, and Windows Server hardening - PowerShell scripting experience for system automation, including automating Windows Server, Office 365, and Entra ID tasks - Experience with RMM tools for infr