System Security Administrator

About Helion

We are a fusion power company based in Everett, WA, with the mission to build the world's first fusion power plant, enabling a future with unlimited clean electricity. Our vision is a world with clean, reliable, and affordable energy for everyone.

Since Helion's founding in 2013, we have raised over $1 billion from long-time investors such as Sam Altman, Mithril, and Capricorn Investment Group and new investors SoftBank and Lightspeed to propel us forward. Our last prototype, Trenta, completed 10,000 high-power pulses and reached plasma temperatures of 100 million degrees Celsius (9 keV). Now, we're turning up operations for Polaris, working towards delivering the world's first fusion power plant. 

More than ever, it's a pivotal time to join us and have the opportunity to solve real challenges to create a better energy future. You will see first-hand how we value urgency, rigor, ownership, and hard truths, knowing it will take each to do what no one has before. Joining us, you will push the boundaries of what's possible and transform humanity for the better - because the world can't wait.

What you will be doing: 

In this role, you will work within a small team to maintain, update, and manage our system software and hardware. You’ll communicate with teams and users of varying levels of technical knowledge to diagnose and resolve problems patiently and efficiently. This role is responsible for setting up and maintaining a system or specific components of a system including installing, configuring, and updating hardware and software; establishing and managing user accounts; overseeing or conducting backup and recovery tasks; implementing operational and technical security controls; and adhering to organizational security policies and procedures. 

You Will:  

• Manage Windows\Linux Servers and Microsoft 365 Administration - Ensure performance and availability across all Microsoft 365 services, implement and manage Group Policies and Active Directory administration, Support and optimize virtualization technologies, and perform server and updates to ensure stability and security 
• Ensure Security, Governance, and Regulatory Compliance - Harden environments and implement security best practices and compliance guidelines by implementing conditional access policies, DLP, RBAC, MFA, and email security protections. Conduct regular system audits to monitor adherence to security policies, validate security controls, mitigate vulnerabilities, and increase operational efficiency. Support incident response efforts related to system security, email security, and cloud identity threats 
• Endpoint & Patch Management - Manage OS deployments, application packaging, patch management, and lifecycle automation. Manage and troubleshoot patch management solutions for synchronization and identity federation. Develop and maintain scripts and tools for managing configurations, monitoring, and software deployment across endpoints. 
• Build Infrastructure Monitoring & Automation - scale and improve monitoring solutions to track system availability, resource utilization, and security compliance. Develop PowerShell scripts and automation tools to improve efficiency, reduce manual tasks, and enforce consistency. Use RMM (Remote Monitoring & Management) tools for system performance tracking, endpoint monitoring, and reporting 
• Collaborate Cross-functionally – work closely with teams across the business to ensure performance, provide technical leadership and mentoring to IT support staff, participate in on-call rotations and respond to emergency system incidents, and assist with managing and supporting workloads in Azure and AWS as needed 

Required Qualifications: 

• 5+ years of experience in Windows Server administration, Office 365/Entra ID management, and infrastructure automation including experience with active Directory (on-prem and Entra ID), Group Policy, and Windows Server hardening 
• PowerShell scripting experience for system automation, including automating Windows Server, Office 365, and Entra ID tasks 
• Experience with RMM tools for infrastructure monitoring, patch management, and endpoint management 
• Experience in Linux Administration 
• Knowledge of virtualization technologies (VMware, Hyper-V, or equivalent) and system monitoring tools (e.g., SolarWinds, PRTG, Nagios, or similar) 
• Strong troubleshooting skills, a proactive approach to problem-solving, and ability to manage multiple tasks effectively in a fast-paced environment 

#LI-ONSITE #LI-AM1

Compensation and Benefits

At Helion, we are committed to fostering a fair and equitable environment in every aspect of our operations, including compensation. We ensure all our roles are competitively benchmarked and our total compensation package includes a base salary, comprehensive benefits, and equity grants, giving you a true stake in Helion's success. Final compensation is determined through a holistic evaluation of your experience, qualifications, and our commitment to maintaining internal equity, ensuring fairness and transparency across our teams.

This is an exempt salaried role.

Annual Base Pay$105,000—$140,000 USD

Benefits

Our total compensation package includes benefits, including but not limited to: 

• Medical, Dental, and Vision plans for employees and their families 
• 31 Days of PTO (21 vacation days and 10 sick days) 
• 10 Paid holidays, plus company-wide winter break 
• Up to 5% employer 401(k) match 
• Short term disability, long term disability, and life insurance 
• Paid parental leave and support (up to 16 weeks) 
• Annual wellness stipend  

NOTE: Underrepresented people are less likely to apply unless they meet 100% of the job's requirements. We believe in hiring people, not checklists, and encourage you to apply even if you do not check all of the boxes. If this job isn't the one, we have many other openings that may be a fit.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. If we reach out to you to begin an interview process, we will also ask if you require any reasonable accommodation at that time.