Senior Enterprise Systems Engineer

Senior Enterprise Systems EngineerGreenberg Traurig (GT), a global law firm with locations across the world in 15 countries, has an exciting employment opportunity for you. We offer competitive compensation and an excellent benefits package, along with the opportunity to work within an innovative and collaborative environment.Join our Technology Team as a Senior Enterprise Systems Engineer located in various offices.We are seeking a professional who thrives in a fast-paced, deadline-driven environment. The ideal candidate possesses strong problem-solving and decision-making abilities, ensuring efficiency and accuracy in every task. With a dedicated work ethic and a can-do attitude, you will take initiative and approach challenges with confidence and resilience. Excellent communication skills are essential for collaborating effectively across teams and delivering exceptional client service. If you are someone who demonstrates initiative, adaptability, and innovation, we invite you to join our team.This role can be based in various offices, on a hybrid basis. This role reports to the Enterprise Monitoring and Systems Management Supervisor.Position SummaryThe Senior Enterprise Systems Engineer is responsible for designing, implementing, securing, and maintaining enterprise-level systems, applications, services, and cloud platforms. This role proactively and reactively defends against security threats, troubleshoots and resolves complex technical issues, investigates and mitigates security incidents, and ensures the reliability, security, and performance of enterprise platforms. The engineer also supports ongoing modernization initiatives and collaborates with cross-functional teams to deliver stable and scalable technology services. This role requires a strategic thinker with deep hands-on technical expertise in IT infrastructure, security operations, automation, and cloud security. This role also requires individuals who are trustworthy, reliable, and uphold strict ethical standards in all professional dealings. Flexibility to work non-standard hours and participate in on-call rotation is required.Key ResponsibilitiesDesigns, implements, and optimizes enterprise IT infrastructure services across on-premises and cloud environments, including core identity, platform, and systems management servicesOversees implementation, management, and optimization of enterprise security and monitoring tools and systems (e.g. antivirus, EDR, ITDR, and FIM platforms)Oversees implementation, manages, and enhances privileged access management (PAM) systemMonitors, detects, and responds to security threats, leading incident response efforts, from detection to resolution and post-incident reviewsConducts regular audits and assessments of server security and application, system, and data access controls, vulnerability management, and implements security best practices and recommendations, to ensure compliance with security policies and standards, and to protect the firm's data and assetsPlans and implements system and application security updates and patches to remediate vulnerabilities in collaboration with IT, compliance, and vulnerability management teamsDesigns, implements, and manages security controls to protect against unauthorized access, data loss, and other security threats against the firm's on-prem infrastructure and cloud-based platformsMonitors system performance, troubleshoots complex issues, and ensures high availability of servers, appliances, and applicationsProvides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasksSecures and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governanceIdentifies opportunities for automation to improve system reliability and reduce manual effortDevelops and maintains automation and scripting solutions to automate administrative, security-related, and routine tasks and reporting to improve efficiency and reduce operational overheadLeverages APIs for integration, automation, and enhancement of monitoring and management across systems and toolsLeads IT infrastructure projects, migrations, upgrades, and new technology initiatives in collaboration with cross-functional teams and external partnersDrives major technology initiatives such as new technologies and solutions, upgrades, migrations, and integrations, recommending improvements to existing systems and processesDevelops and maintain disaster recovery strategies, documentation, and testing proceduresMaintains up-to-date knowledge of emerging trends and best practices in infrastructure modernization, security, monitoring, cloud platforms, and AI model infrastructure securityCreates and maintains documentation, diagrams, and standard operating procedures for infrastructure systems and processesMentors teammates and contributes to skill development, knowledge sharing, and best practice adoption across the teamQualificationsSkills & CompetenciesExpert level knowledge of Microsoft Windows Server, Active Directory, Entra ID, and AzureStrong working knowledge of virtualization and Microsoft 365Expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platformsStrong background in security operations, endpoint security, and incident responseStrong knowledge of public key infrastructure (PKI) and cryptographyProven expertise in Active Directory Domain Services and Entra ID managementAdvanced understanding of authentication and authorization flowsDeep understanding of identity and access management and role-based access control conceptsGood working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePointStrong working knowledge of networking concepts, including TCP/IP, DNS, DHCP, VPNStrong knowledge of and experience with single sign-on protocols (SAML, OIDC)Strong knowledge of multifactor authentication managementGood working knowledge of SQL and SSRS and ability to write and optimize queries and reportsSolid understanding and familiarity with Linux and MacOS systems preferredProficiency in PowerShell; expertise with equivalent scripting/programming languages (Python, Bash, etc.) is a plusStrong working knowledge of Microsoft Graph PowerShell and Microsoft Graph APISolid understanding and experience with API programming (REST, JSON, authentication mechanisms) and securityBasic understanding of AI model infrastructure securityExcellent analytical, critical thinking, and problem-solving skillsExcellent ability to troubleshoot and resolve system, application, security and performance issuesStrong communication, interpersonal, and cross-functional collaboration skillsAbility to articulate issues, risks, and proposed solutions to various levels of technology staff, management, and non-technical audiencesHigh degree of attention to detail and accuracyAbility to document and maintain security and monitoring policies, procedures, and configurationsAbility to multitask efficiently yet prioritize and organize competing work demandsDemonstrated integrity and commitment to strict ethical standards in all professional dealingsProven record of reliability and dependabilityCandidate must be a self-starter and independent, yet function as an integral part of a teamProven ability to work independently and collaboratively in a fast-paced, and security-conscious environmentCandidate must demonstrate a high degree of initiative and motivationAbility to work flexible hours and be on-callEducation & Prior ExperienceBachelor's degree in Computer Science, Information Systems, or related field, or equivalent work experience10+ years of professional experience managing medium-to-large enterprise Microsoft Windows environments, preferably in a law firm or similar environment8+ years of experience in systems engineering, systems administration, or similar technical rolesExtensive experience with Microsoft Windows Server 2012-2025 and Windows 11Strong experience with cloud platforms such as Microsoft Azure, AWS, and GCPHands-on experience with Azure/Entra ID cloud security, including, but not limited to conditional access, Defender for Endpoint, Defender for Cloud, and Defender for IdentityHands-on experience managing a Privileged Access Management systemExtensive experience managing all aspects of Active Directory Domain ServicesProven troubleshooting and complex technical issue resolution experienceExperience with WMI, Syslog, and Performance MonitorExperience managing secure file transfer toolsDemonstrated experience implementing security best practicesExperience with automation/orchestration tools, such as System Center