Sr Systems Engineer

Job TitleArchitects, engineers, and administrates cloud and on-premises system solutions. Primary responsibilities will be supporting identity and access management (IAM) systems, Microsoft 365 solutions, virtualized server infrastructure, storage area network (SAN) environments, and operating systems.Major Responsibilities & DutiesSupports and ensures integrity and security for identity management and security systemsDeploys, maintains, upgrades, and resolves issues with Active Directory, Entra ID, and Identity and Access Management Systems for HR System integration to include support for joiner, mover, & termination processes, as well as role-based access and other automated processes.Supports Identity Management for 3rd party applications, Azure Enterprise Applications, to include securing access using conditional access and MFA (Multi Factor Authentication) systems.Designs and supports authentication methodologies including Radius, LDAPS, SAML, Kerberos, PAM (Privileged Access Management), and certificate-based authentication.Designs, installs, and maintains the enterprise certificate environment.Works with Information Security to implement proper controls and security measures to protect local and cloud-based data.Deploys and Supports Microsoft 365, MS Modern Desktop, and Other SaaS SolutionsConfigures and supports Microsoft SaaS systems such as Exchange, SharePoint, and Teams.Architects the migration of on-premises files and data to SharePoint Online and OneDrive. Supports and secures data in SharePoint and OneDrive.Implements DLP (Data Loss Prevention), sensitivity, and retention labeling to maintain integrity and security of data with guidance from Information Security.Serves as the senior administrator for one or more Microsoft 365 tenants, with direct responsibility for tenant configuration, security posture, licensing management, and service health across the M365 suite including Exchange Online, SharePoint Online, Teams, OneDrive for Business, and Intune.Manages M365 identity and access governance including role-based access control (RBAC), privileged identity management (PIM), guest/external access policies, and cross-tenant collaboration settings.Oversees Exchange Online administration including mail flow rules, connectors, anti-spam/anti-phishing policies, shared mailboxes, distribution groups, and hybrid mail routing where applicable.Administers Microsoft Teams governance including team lifecycle policies, meeting configurations and compliance recording where required.Monitors tenant health, service incidents, and adoption metrics through the M365 Admin Center and Defender portals, driving proactive resolution of issues and escalating with Microsoft Support as warranted.Supports System Administrators with Endpoint Management and Security solutions for Windows workstation and servers, Android, and iOS devices.Assists System Engineers in the design and implementation of systems to manage security at the server operating system level, including hardening and patches.Responsible for Azure, AWS, and GCP Public Cloud platforms including identity, security, policy management, and cost allocation.Designs, implements, and manages other cloud SaaS Systems to reduce enterprise costs & complexity, while increasing reliability.Manages Active Directory and On-Premises Identity InfrastructureOwns and administers the on-premises Active Directory environment, including domain and forest architecture, domain controller deployment and health, AD sites and services, replication topology, and Group Policy infrastructure.Designs and maintains Group Policy Objects (GPOs) for security baselines, software deployment, user environment management, and compliance enforcement across workstations and servers.Manages AD trust relationships, organizational unit (OU) structure, delegation of control, and role-based administrative access in alignment with least-privilege principles.Administers and maintains Microsoft Entra ID (Azure AD) Connect, overseeing hybrid identity synchronization, password hash sync or pass-through authentication, and seamless SSO configurations between on-premises AD and M365.Leads identity lifecycle management processes including provisioning, de-provisioning, access reviews, and privileged account governance spanning both on-premises AD and Entra ID.Monitors AD health and security through tools such as Microsoft Defender for Identity, ensuring detection and response to suspicious authentication activity, lateral movement, or privilege escalation attempts.Maintains AD disaster recovery capabilities including authoritative and non-authoritative restore procedures, domain controller backup validation, and documented recovery runbooks.Manages and Supports Virtualized Server EnvironmentServes as the primary subject matter expert and administrator for a hybrid virtualized environment spanning both VMware vSphere/ESXi and Microsoft Hyper-V platforms, ensuring high availability, performance, and security across all hypervisor hosts and guest workloads.Designs, deploys, and maintains VMware vSphere clusters including vCenter Server, ESXi hosts, vMotion, High Availability (HA), Distributed Resource Scheduler (DRS), and Fault Tolerance configurations.Administers Microsoft Hyper-V environments including failover clustering, Live Migration, Hyper-V Replica, and integration with System Center Virtual Machine Manager (SCVMM) where applicable.Leads capacity planning efforts across both platforms, analyzing resource utilization trends and making recommendations for infrastructure scaling, consolidation, or refresh.Develops and enforces standards, policies, and procedures for VM provisioning, template management, snapshot governance, and lifecycle management across VMware and Hyper-V environments.Administers vSAN and Fibre Channel SAN Storage InfrastructureArchitects, deploys, and administers VMware vSAN clusters, including disk group configuration, storage policies, deduplication and compression settings, fault domain design, and health monitoring.Manages and maintains Fibre Channel SAN infrastructure end-to-end, including zoning, LUN provisioning and masking, HBA configuration, and fabric switch administration (Brocade/Cisco MDS).Oversees SAN connectivity for both VMware and Hyper-V hosts, ensuring proper multipathing (VMware NMP/PSP policies and Windows MPIO), path redundancy, and failover validation.Monitors SAN and vSAN performance, diagnoses and resolves storage latency, throughput, and connectivity issues, and coordinates with vendors on hardware support and firmware management.Maintains storage architecture documentation including SAN fabric topology, zoning configurations, LUN mappings, and vSAN cluster layouts.Configures and Maintains Base Network Infrastructure for Virtualized EnvironmentsConfigures and manages virtual networking components within both VMware (vSphere Standard and Distributed Switches, port groups, uplink teaming policies) and Hyper-V (Virtual Switches, NIC teaming, SR-IOV) environments.Collaborates with network engineering teams on the integration of virtual infrastructure with physical switching, routing, and Fibre Channel fabric to ensure end-to-end connectivity and redundancy.Installs and troubleshoots TCP/IP support infrastructure including DHCP, DNS (Domain Name System), and other IP-based technologies.Designs and Implements System SolutionsCollaborates with operation staff to ensure smooth and reliable operation of software and systems for fulfilling business objectives and processes; works with executive team members, decision makers, and stakeholders to define business requirements and systems goals, and to identify and resolve business systems issues.Builds and maintains complex real time monitoring systems to monitor critical business applications, alert key personnel in the event of failure, and perform trending and capacity analysis.Participates in Business Continuity and Disaster Recovery design, implementation, and testing.Creates and maintains documentation as it relates to system configuration, mapping, processes, and service records.Maintains technical adherence to external compliance mandates and assists in the development of policies and procedures.Drives infrastructure automation and operational efficiency through scripting (PowerCLI, PowerShell) and integration with infrastructure-as-code or orchestration toolsets.Mentors junior systems staff on virtualization best practices, storage fundamentals, and operational procedures.Knowledge, Skills & AbilitiesKnowledge of the practical application of engineering science and technology, including applying principles, techniques, procedures, and equipment to the design and production of technologies.Knowledge of applicable data privacy and security practices and laws.Ability to follow existing practices and develop new best practices and prescribed development methodologies in the performance of the above duties.Ability to