Senior Systems Engineer (Azure & On-Premises Infrastructure)

Azure Systems EngineerCapstone IT is helping our client find a Senior Systems Engineer who will design, deploy, integrate, and support secure Microsoft Azure and on-premises infrastructure for mission-critical systems. This is a hands-on engineering position focused on building secure, scalable, and highly available environments while maintaining enterprise identity, networking, and security infrastructure. The engineer will work across development, testing, and production environments, troubleshoot complex technical issues, and support systems operating under strict government and defense security requirements.Top 4 Must-Have SkillsMicrosoft Azure Cloud Engineering: Designing, deploying, securing, and maintaining enterprise Azure infrastructure, including networking, virtual machines, security services, and Azure Landing Zones.Windows Server & Hybrid Infrastructure: Managing enterprise Windows Server environments, virtualization, on-premises systems, and hybrid cloud connectivity.Active Directory & Microsoft Entra ID: Enterprise identity management, directory services, authentication, RBAC, and integration between cloud and on-premises environments.PowerShell Scripting: Automating infrastructure administration, system configuration, deployment, and operational tasks.ResponsibilitiesAzure & Infrastructure EngineeringDesign, deploy, and maintain secure Microsoft Azure and on-premises environments.Configure and support Azure Virtual Machines, Storage, Key Vault, Monitor, Firewall, Front Door, and Application Gateway.Implement secure Azure Landing Zones and support cloud migrations.Administer Windows Server, Active Directory, DNS, DHCP, PKI, and virtualization platforms.Support infrastructure across development, test, staging, and production environments.Security & Identity ManagementImplement Zero Trust security principles and defense-in-depth controls.Configure Microsoft Entra ID, privileged access controls, and RBAC.Support PKI, certificates, smart cards, HSMs, and secure authentication.Perform security assessments, vulnerability remediation, system hardening, and compliance validation.Support incident response and security investigations.Systems IntegrationIntegrate Active Directory, LDAP, PKI, SCCM, Splunk, SQL Server, and third-party systems.Troubleshoot issues involving infrastructure, authentication, connectivity, and security.Support system testing, performance optimization, and disaster recovery.Technical Support & DocumentationProvide Tier III engineering support.Create architecture diagrams, runbooks, deployment guides, and technical documentation.Support system implementations and ongoing operations.QualificationsRequired8+ years of professional experience in systems, infrastructure, or cloud engineering.5+ years of hands-on Microsoft Azure engineering experience.Strong experience supporting hybrid cloud and on-premises infrastructure.Expertise with Azure, Windows Server, Active Directory, Microsoft Entra ID, and PowerShell.Strong understanding of networking, infrastructure security, and secure system design.Experience supporting government, defense, or similarly regulated environments.Active Secret security clearance.Willingness and ability to travel internationally.Nice to HaveActive Top Secret clearance.Identity and Access Management (IAM) platforms.PKI, certificate lifecycle management, and HSMs.Azure Landing Zones and Microsoft Defender.Splunk and DevSecOps practices.Experience supporting classified or mission-critical systems.This position supports an organization responsible for deploying and sustaining secure, mission-critical technology environments. The engineer will be responsible for ensuring systems operate reliably across both Azure cloud infrastructure and traditional on-premises environments.Based on the job description, the work centers on four areas:Secure infrastructure deployment: Building and integrating enterprise systems across multiple environments while meeting government or defense security requirements.Hybrid identity and connectivity: Ensuring Azure, Windows Server, Active Directory, Entra ID, and authentication services work together securely.Security engineering: Applying access controls, certificate-based authentication, vulnerability remediation, and infrastructure hardening.Operational continuity: Providing senior-level troubleshooting, Tier III support, documentation, testing, and disaster recovery support.This is primarily a hands-on infrastructure engineering role rather than an architecture-only position or a general cloud support job.