System Engineer Manager

OVERVIEW

We are seeking a player-coach Systems Engineer Manager to lead a small high-impact team of system engineers while actively executing on core technical initiatives. This role requires a 60% hands-on engineering / 40% team management split. The ideal candidate will possess a strong technical background proven leadership abilities and a passion for delivering innovative solutions.

REPORTS TO

The Systems Engineer Manager reports to the Director Technology Operations in the Technology department.

The ideal candidate is a deeply technical practitioner who thrives on solving complex system engineering challenges driving backlog execution and modernizing legacy systems into cloud-first AI-augmented solutions. You will own our identity boundaries endpoint management pipelines workspace infrastructure and edge services while serving as a champion for AI-driven IT operations.

ESSENTIAL DUTIES

The essential duties for this role include but are not limited to: 

Team Management & Operational Leadership (40%)

• Team Management:  Lead mentor and manage a team of 23 system engineers ensuring the highest standards of quality and efficiency.
• Agile/Kanban Delivery & Metrics: Manage team backlog using Agile/Kanban best practices to establish clear priorities maximize throughput and maintain predictable delivery schedules. Track and maintain key operational metrics for monthly leadership reporting and capacity planning.
• Cross-Functional Partnership: Collaborate with leaders across Service Desk Enterprise Applications and DevOps to execute multi-departmental technical initiatives establish seamless escalation paths and drive shared operational efficiencies.
• Vendor Management & Managed Services Oversight: Direct operational and contract management for primary IT infrastructure partnersspecifically YellowDog Networks (co-managed office networking Palo Alto firewalls switches) and core endpoint/identity vendors (e.g. Okta JAMF NinjaOne). Track vendor SLA compliance oversee change validation protocols manage contract renewals and optimize licensing spend. 

Hands-On Technical Execution (60%)

• Identity & Access Control (IAM): Architect deploy and maintain identity infrastructure across Active Directory (ADUC/GPO) Azure hybrid environments Okta (SSO Workflows SAML MFA) and Google Workspace (GSuite Gemini access controls Vault GCPGAM API integrations) to enforce strict HIPAA-compliant RBAC and zero-trust access controls. 
• Endpoint & Workspace Systems Engineering: Own the lifecycle system design and security of physical and virtual endpoints (Windows and macOS) using NinjaOne JAMF PDQ SmartDeploy WSUS and AWS WorkSpaces. Modernize legacy deployment workflows into cloud-first solutions.
• AI-First Automation & Modernization: Actively write and maintain scripts (PowerShell Bash Python) using AI-assisted development platforms (e.g. Cursor) to eliminate manual IT toil automate patch pipelines and refactor legacy administrative processes. 
• Network Access & Infrastructure Administration: Administer user-facing access policies and services including Active Directory-integrated Radius Auth GlobalProtect VPN user provisioning/client software internal DNS PKI/Certificate Authorities AWS FSx / AWS File Gateway local storage and Cisco voice/Jabber services. Partner with managed network providers (YellowDog Networks) to review test and validate global office network and Palo Alto firewall updates. 
• Systemic Security & Vulnerability Remediation: Execute workstation endpoint encryption (BitLocker/JAMF) and proactively remediate endpoint OS and application vulnerabilities in close coordination with Information Security.
• Complex Cross-System Troubleshooting: Act as a primary technical escalation point. Lead root-cause analysis and resolution for complex heavily integrated multi-departmental systems to minimize operational downtime. 

Qualifications :

Technical Expertise

• 8 years of hands-on experience in systems engineering endpoint management and identity infrastructure with at least 2 years in a management or lead capacity.
• Identity & Directory Services: Deep expertise in Active Directory GPO Azure AD Sync Okta (SAML Workflows MFA) and Google Workspace Administration (OU management VaultGCP GAM security configurations and user provisioning for enterprise tools like Gemini).
• Endpoint & VDI: Proven experience managing Windows and macOS environments at scale using JAMF NinjaOne PDQ SmartDeploy and AWS WorkSpaces.
• Scripting & AI Tooling:  Strong proficiency in PowerShell Bash Python or similar scripting languages with demonstrated experience using AI-assisted coding platforms (e.g. Cursor GitHub Copilot) to accelerate scripting and automation.
• Network & Storage: Solid understanding of DNS PKI/Certificate Authorities AWS FSx AWS File Gateway and core networking principles.

Leadership & Soft Skills

• Proven ability to operate effectively as a player-coach on a small team balancing high-level planning with direct technical execution.
• Strong commitment to emotional intelligence transparent communication and collaborative problem-solving across teams.
• Experience managing IT projects via Jira/Confluence using Agile or Kanban frameworks.

Preferred Qualifications

• Certifications in relevant technologies (e.g. Okta Certified Administrator Jamf Certified Admin AWS Certified Solutions Architect Microsoft Certified: Identity and Access Administrator).
• Experience in healthcare or regulated environments subject to HIPAA compliance.

Additional Information :

• Competitive compensation Medical Dental and Vision benefits after a short waiting period
• 401k matching program
• Generous paid time off program with an additional company break during the holidays
• Annual Volunteer Time Off (VTO) and a donation matching program
• Life Insurance Employee Assistance Program (health & well-being on and off the job) Rewards and Recognition
• Maternity and Parental Leave Training program and ongoing support throughout your entire Spring Venture Group career
• Diverse inclusive & welcoming culture
• Optional enrollment options include HSA/FSA AD&D Spousal/Dependent life insurance Short Term/Long Term Disability Travel Assist and Legal plans

Spring Venture Group is an Equal Opportunity Employer

Spring Venture Group is an Equal Opportunity Employer

Remote Work :

No

Employment Type :

Full-time