SENIOR SYSTEMS ENGINEER

Senior Systems Engineer For Enterprise Cloud Identity & SecurityThe Senior Systems Engineer for Enterprise Cloud Identity & Security owns the organization's identity, authentication, authorization, trust boundaries, and security posture across both cloud and hybrid identity systems. This role administers Entra ID users, groups, domains, privileged roles, identity governance, hybrid identity integration with Active Directory, and the full authentication and SSO architecture. They define cross-tenant trust controls, device identity posture, Intune policy enforcement, Conditional Access requirements, and the identity and security signals that downstream systems—including Microsoft 365 and Copilot—depend on. This role ensures only trusted users, devices, and external identities can authenticate and gain access under the correct security conditions, establishing the foundational perimeter that all applications rely on for secure operation.Applies and demonstrates mastery of the technical skills and knowledge of principles, theories and concepts and industry practices and standards to perform technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analysis for total systems. Essential Functions & Key Responsibilities:Azure AD / Entra ID administration — users, groups, admin roles, privileged identity management, domain management. Coordinating Identity governance with IT Security — delegated admin models (GDAP/DAP), access reviews, least-privilege role design, directory hygiene. Active Directory (on-prem) administration & synchronization — hybrid identity, provisioning, inter-directory sync (Entra Connect/Cloud Sync). Authentication architecture & SSO — SAML, federation, certificates, token lifecycles, claim mapping. B2B trust controls — cross-tenant access settings, default external collaboration posture, identity provider federation, inbound/outbound trust rules. Device identity posture: Maintain strong identity signals across Entra Join / Hybrid Join, device trust, stale device cleanup, and platform SSO. Ensure all devices provide trustworthy identity claims so Copilot and Security Copilot rely on secure, high-integrity identity, device, MFA, risk, and access posture. Intune policy and mobile device management (iOS, Android, Windows): Oversee the full Intune policy lifecycle across all managed endpoints, including configuration of MDM/MAM profiles, deployment of compliance policies, enforcing device and location controls, and ensuring compliance signals accurately feed Conditional Access. Secure cloud data flow exchange oversight to external platforms (e.g. HR, payroll, and benefits), ensuring correct provisioning mappings, Conditional Access protections, and compliance alignment for all cloud data exchanges. This role works in partnership with the Security team, which owns global compliance, DLP, MFA, SIEM, and SOC operations. Coordinating with other IT or business teams when necessary. Meets with IT leadership to assess and define the system requirements. Analyzes network data and infrastructure to determine inefficiencies and problems. Maintains expert operating efficiency and stability, ensure the security and integrity of all systems and data, and respond to complex outages and other issues. Manages project timelines, budgets, and documentation. Collaborates with project teams to enable them with infrastructure, system technology architecture, diverse and complex projects and products. Leverages tools and custom applications to monitor the operational status of applications, infrastructure, networks, databases to optimize system performance. Troubleshoots technical issues and prepares root cause analysis of service interruptions, recovery and creating preventative measures. Prepares network analytics, data reports, and operational manuals. Keeping abreast of the latest advancements in technology, protocols, and best practices. Coordinates with department leadership to plan, design, and schedule the release of all software, hardware, and operating system updates. Develops and enhances processes and technical documentation, create back-up procedures, test plans, and reports. Provides coverage in a rotating, on-call after hours schedule. Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.Education RequirementsMinimum Other. Computer Science or related technical degreeIf applicable, a combination of experience and training may be substituted for the education requirement.Experience Requirements4-8 or more years experience year(s) Experience with Microsoft systems and solutions, on premise and in the cloudyear(s) Experience in a global networked environment(s) as well as experience in aerospace industry strongly desired.year(s) Experience in creating and managing project plans and implementations and assisting with other teammates' projects, providing technical guidance and support.year(s) Experience in administering and assisting with planning, implementing and executing incident response and disaster recovery procedures.year(s) Experience with Windows server environment both on premise and cloud based; solid understanding of Storage and Virtualization management.Skills and CompetenciesCommunicates effectively using electronic media and in written and verbal forms. Excellent verbal and written skills and the ability to develop and deliver executive level presentations. Operates standard office equipment and demonstrates competence in the use of standard software applications such as Microsoft Word, Excel and Power Point. Interpersonal and team building skills and the ability to transform that data into new business processes using analytical, problem identification, and resolution skills. Desire to work closely with IT and Business teams to deliver top tier customer service to all. Knowledge of IT Security best practices and keeping that at the front of all projects. Expert working knowledge in Product Lifecycle Management/Product Data Management (PLM/PDM) concepts and administration. Solid analytical, problem identification and resolution skills to quickly resolve system failures to minimize outages and network interruptions in a 24X7X365 LAN/WAN.Physical Requirements Must be able to work in excess of eight (8) hours per day and five (5) days per week, if required. Additionally, those who work at NORDAM Repair Division must be able to ascend and descend stairs. Demand - Frequency Walk - Frequent Use hands to handle or feel or manipulate - Frequent Reach with hands and arms - Frequent Stoop, kneel, crouch, or crawl - Occasional Talk and hear - Frequent Use close vision, depth perception, and ability to adjust - Constant Travel between facilities (drive) - Occasional Stand - Occasional Climb Stairs - Occasional Weight - Frequency 25 pounds - Occasional Work Environment While performing the duties of this job, the Stakeholder is occasionally exposed to moving mechanical parts, fumes or airborne particles, toxic or caustic chemicals, and outside weather conditions. The noise level in the work environment is usually moderate.SupervisionWorks under general direction. Receives guidance as to results expected and to resolve complex and unusual problems. Exercises latitude in determining activities and approaches within wide parameters.The NORDAM Group LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.