Senior Enterprise Systems Engineer

Senior Enterprise Systems Engineer

Greenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment.

Join our Technology Team as a Senior Enterprise Systems Engineer located in our Warsaw Center of Excellence office (remote).

This role reports to the Enterprise Monitoring and Systems Management Supervisor and requires availability to work in the afternoons (5:00 p.m. to 2:00 a.m.)

Position Summary

The Senior Enterprise Systems Engineer is responsible for designing, implementing, securing, and maintaining enterprise-level systems, applications, services, and cloud platforms. This role proactively and reactively defends against security threats, troubleshoots and resolves complex technical issues, investigates and mitigates security incidents, and ensures the reliability, security, and performance of enterprise platforms. The engineer also supports ongoing modernization initiatives and collaborates with cross-functional teams to deliver stable and scalable technology services. This role requires a strategic thinker with deep hands-on technical expertise in IT infrastructure, security operations, automation, and cloud security. This role also requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings. Flexibility to work non-standard hours and participate in on-call rotation is required.

Key Responsibilities

• Designs, implements, and optimizes enterprise IT infrastructure services across on-premises and cloud environments, including core identity, platform, and systems management services
• Oversees implementation, management, and optimization of enterprise security and monitoring tools and systems (e.g. antivirus, EDR, ITDR, and FIM platforms)
• Oversees implementation, manages, and enhances privileged access management (PAM) system
• Monitors, detects, and responds to security threats, leading incident response efforts, from detection to resolution and post-incident reviews
• Conducts regular audits and assessments of server security and application, system, and data access controls, vulnerability management, and implements security best practices and recommendations, to ensure compliance with security policies and standards, and to protect the firm's data and assets
• Plans and implements system and application security updates and patches to remediate vulnerabilities in collaboration with IT, compliance, and vulnerability management teams
• Designs, implements, and manages security controls to protect against unauthorized access, data loss, and other security threats against the firm's on-prem infrastructure and cloud-based platforms
• Monitors system performance, troubleshoots complex issues, and ensures high availability of servers, appliances, and applications
• Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasks
• Secures and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governance
• Identifies opportunities for automation to improve system reliability and reduce manual effort
• Develops and maintains automation and scripting solutions to automate administrative, security-related, and routine tasks and reporting to improve efficiency and reduce operational overhead
• Leverages APIs for integration, automation, and enhancement of monitoring and management across systems and tools
• Leads IT infrastructure projects, migrations, upgrades, and new technology initiatives in collaboration with cross-functional teams and external partners
• Drives major technology initiatives such as new technologies and solutions, upgrades, migrations, and integrations, recommending improvements to existing systems and processes
• Develops and maintain disaster recovery strategies, documentation, and testing procedures
• Maintains up-to-date knowledge of emerging trends and best practices in infrastructure modernization, security, monitoring, cloud platforms, and AI model infrastructure security
• Creates and maintains documentation, diagrams, and standard operating procedures for infrastructure systems and processes
• Mentors teammates and contributes to skill development, knowledge sharing, and best practice adoption across the team

Qualifications

Skills & Competencies

• Expert level knowledge of Microsoft Windows Server, Active Directory, Entra ID, and Azure
• Strong working knowledge of virtualization and Microsoft 365
• Expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platforms
• Strong background in security operations, endpoint security, and incident response
• Strong knowledge of public key infrastructure (PKI) and cryptography
• Proven expertise in Active Directory Domain Services and Entra ID management
• Advanced understanding of authentication and authorization flows
• Deep understanding of identity and access management and role-based access control concepts
• Good working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePoint
• Strong working knowledge of networking concepts, including TCP/IP, DNS, DHCP, VPN
• Strong knowledge of and experience with single sign-on protocols (SAML, OIDC)
• Strong knowledge of multifactor authentication management
• Good working knowledge of SQL and SSRS and ability to write and optimize queries and reports
• Solid understanding and familiarity with Linux and MacOS systems preferred
• Proficiency in PowerShell; expertise with equivalent scripting/programming languages (Python, Bash, etc.) is a plus
• Strong working knowledge of Microsoft Graph PowerShell and Microsoft Graph API
• Solid understanding and experience with API programming (REST, JSON, authentication mechanisms) and security
• Basic understanding of AI model infrastructure security
• Excellent analytical, critical thinking, and problem-solving skills
• Excellent ability to troubleshoot and resolve system, application, security and performance issues
• Strong communication, interpersonal, and cross-functional collaboration skills
• Ability to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiences
• High degree of attention to detail and accuracy
• Ability to document and maintain security and monitoring policies, procedures, and configurations
• Ability to multitask efficiently yet prioritize and organize competing work demands
• Demonstrated integrity and commitment to strict ethical standards in all professional dealings
• Proven record of reliability and dependability
• Candidate must be a self-starter and independent, yet function as an integral part of a team
• Proven ability to work independently and collaboratively in a fast-paced, and security-conscious environment
• Candidate must demonstrate a high degree of initiative and motivation
• Ability to work flexible hours and be on-call
• Availability to work in the afternoons (5:00 p.m. to 2:00 a.m.)

Education & Prior Experience

• Bachelor's degree in Computer Science, Information Systems, or related field, or equivalent work experience
• 10+ years of professional experience managing medium-to-large enterprise Microsoft Windows environments, preferably in a law firm or similar environment
• 8+ years of experience in systems engineering, systems administration, or similar technical roles
• Extensive experience with Microsoft Windows Server 2012-2025 and Windows 11
• Strong experience with cloud platforms such as Microsoft Azure, AWS, and GCP
• Hands-on experience with Azure/Entra ID cloud security, including, but not limited to conditional access, Defender for Endpoint, Defender for Cloud, and Defender for Identity
• Hands-on experience managing a Privileged Access Management system
• Extensive experience managing all aspects of Active Directory Domain Services
• Proven troubleshooting and complex technical issue resolution experience
• Experience with WMI, Syslog, and Performance Monitor
• Experience managing secure file transfer tools
• Demonstrated experience implementing security best practices
• Experience with automation/orchestration tools, such as System Center Orchestrator, Azure Automation)
• Relevant Microsoft certifications: Azure Administrator Associate, Azure Security Engineer Associate and Identity and Access Administrator Associate, or equivalent are preferred
• Industry certifications: CEH, CISSP,