Senior IT Systems Engineer

Seattle, WA $150k – $180k Posted 6 weeks ago Role Overview BlackSky is hiring a Senior IT Systems Engineer. This is a full‑time hybrid role, based in Seattle. Part of BlackSky's Security hiring. The posted range is $150k to $180k. Full responsibilities, required qualifications, and the apply link are listed in the description below. Salary Context This role offers $150k-$180k. The median for Senior‑level Security roles is $120k-$170k (based on 64 listings). 14% above median. Job Description About Us: BlackSky is a real‑time intelligence company. We own and operate the world's most advanced space‑based intelligence platform and provide customers satellite imagery, automated analytics and high‑frequency monitoring of strategic locations, economic assets and events from around the globe. BlackSky is trusted by the most demanding allied military and intelligence organizations and commercial companies to deliver foresight into critical matters that affect national security and the economy. BlackSky's data enables governments and businesses to see, understand and anticipate change as it happens, giving them the ultimate strategic advantage so they can act quickly. Our global team works with cutting‑edge technology to make a difference around the world and prides itself on being people‑first, customer‑focused and fun. This is a hybrid role based out of Seattle, WA and will report to the Director of IT. As part of the IT team, you will provide advanced technical leadership across our on‑premises and cloud infrastructures. This role will guide the ongoing modernization of core identity, compute, and security services, support hybrid cloud operations in AWS GovCloud and Azure, and ensure our systems meet current regulatory and cybersecurity requirements. This position will serve as the senior technical resource for the team, overseeing the health, configuration, and interoperability of the enterprise environment, partnering with Information Security Engineering to drive secure configuration baselines, and supporting business operations across all locations. The engineer will also lead efforts related to infrastructure resiliency, system hardening, and compliance readiness while providing expert‑level support for servers, identity services, and cloud platforms. Responsibilities: Supports corporate infrastructure across U.S., as well as AWS GovCloud / MSFT Azure. Supports hybrid cloud for Active Directory and Entra ID identity services (ADDS, Entra Connect/Cloud Sync, etc.). Supports Windows Server 2019/2025 and Linux systems. Builds and supports Hyper‑V virtual environments. Identity & Access Management (including Conditional Access). Supports Microsoft 365. Supports authentication infrastructure (NPS, RADIUS, Kerberos, PRT/WAM, SAML/OpenID/OAuth for SSO, SCIM). Ensures systems meet NIST 800‑171 and FedRAMP Moderate requirements. Develops and maintains GPOs and secure configuration baselines. Provides day‑to‑day support for Servers, Windows 11, macOS, and Linux. Supports desktop and laptop imaging via Intune and Autopilot. Manages vendor relationships and internal cross‑functional collaboration. Remediation of vulnerabilities across infrastructure (Network and servers/clients). Supports AWS (EC2, Route 53, VPC, SGs, NACLs, and cloud security best practices). BCP/DR Planning and Implementation. Some after‑hours and weekend support may be needed. Required Qualifications: Bachelor's degree in a relevant field of study or relevant experience. At least seven (7) years of enterprise engineering experience. Must have in‑depth expertise in on prem AD, ADDS, PKI, DHCP, DNS, etc. Minimum of five (5) years of cloud IT engineering (AWS and Microsoft) experience. MCSE required. Basic to Intermediate Networking experience. RHCSA or Linux+ (or equivalent). Hands‑on experience implementing all 14 NIST 800‑171 families. Technical implementation of CMMC Level 2 readiness. At least five (5) years of PowerShell/Bash scripting experience. Available for after‑hours and weekend support. Preferred Qualifications: Experience with CrowdStrike (User/host troubleshooting, IT monitoring, and alerting purposes). Able to troubleshoot and correct user OS and application issues with Windows 11, Mac, Linux, iOS and Android. Strong ability to write clear technical documentation, from basic configuration documentation to service level agreements and operating level agreements, to standard operating procedures and complex infrastructure documents. Able to troubleshoot and correct wifi and wired networking issues. Troubleshoot and correct issues remotely, using remote management tools and methodologies. Able to work independently, with strong self‑direction and initiative, as well as within a team. Life at BlackSky for full‑time benefits eligible employees includes Medical, dental, vision, disability, group term life and AD&D, voluntary life and AD&D insurance BlackSky pays 100% of employee‑only premiums for medical, dental and vision and contributes $100/month for out‑of‑pocket expenses! 15 days of PTO, 11 Company holidays, four Floating Holidays (pro‑rated based on hire date), one day of paid volunteerism leave per year, parental leave and more 401(k) pre‑tax and Roth deferral options with employer match Flexible Spending Accounts Employee Stock Purchase Program Employee Assistance and Travel Assistance Programs Employer matching donations Mac or PC? Your choice! Awesome swag The anticipated salary range for candidates in Seattle, WA is $150,000 to $180,000 per year. The final compensation package offered to a successful candidate will be dependent on specific background and education. BlackSky is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer. All Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, disability, protected veteran status or any other characteristic protected by law. To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. #J-18808-Ljbffr TryApplyNow