On‑site Systems Administrator / Lab Manager

About the role

VulnCheck is seeking a hands‑on Systems Administrator and Lab Manager to build, maintain, and operate a dedicated research lab that supports vulnerability discovery and exploit validation. The role blends on‑site hardware management with remote infrastructure administration, ensuring researchers have reliable, secure, and reproducible environments.

Key responsibilities

• Design, build, and maintain physical and virtual lab infrastructure for the vulnerability research team.
• Procure, configure, and manage networking gear (routers, switches, firewalls, wireless APs) and IoT/OT devices used for security testing.
• Implement lab network architecture, including segmentation, VLANs, out‑of‑band management, and isolated test zones.
• Administer Linux and Windows servers, hypervisors, and virtualization platforms such as VMware, Proxmox, and KVM.
• Maintain firmware libraries and device inventories to provide specific hardware/software versions.
• Provide remote access (VPN, jump hosts, console access) for distributed team members.
• Automate provisioning, configuration management, and lab reset workflows with tools like Ansible and Terraform.
• Monitor lab systems for availability, performance, and security, responding promptly to incidents.
• Collaborate with researchers to anticipate upcoming targets and prepare required environments.
• Manage vendor relationships for procurement, warranties, and RMA processes.
• Document lab architecture, procedures, and runbooks.

Required profile

• 8+ years of experience in systems administration, lab operations, or infrastructure engineering.
• Proven experience managing physical lab infrastructure remotely, including out‑of‑band management (IPMI, iLO, iDRAC).
• Ability to work on‑call, including off‑hours and weekends, to support lab availability.

Required skills

• Linux administration
• Windows Server administration
• VMware, Proxmox, KVM virtualization
• Networking equipment (routers, switches, firewalls, wireless APs)
• VLAN design and segmentation
• VPN and remote console access
• Ansible, Terraform
• IPMI, iLO, iDRAC out‑of‑band management
• IoT and OT device handling