Senior System Engineer

Job Description

Position Overview

\n

A financial services firm needs a hands-on Senior Systems Administrator to own its Windows, Microsoft 365, network, and security infrastructure. You'll be the team's senior escalation point, run IT controls in an audited environment, and lead infrastructure projects with internal teams and vendors.

\n

\n

Key Responsibilities

\n

\n
• Administer Active Directory, Entra ID, and service accounts (SPNs, app registrations, credential rotation), plus MFA and conditional access
\n
• Build and maintain Windows Server on VMware vSphere, including physical hardware and file servers across multiple sites
\n
• Manage Microsoft 365 and Exchange Online, including mail security, DLP, and retention
\n
• Run networking and firewalls (TCP/IP, DNS, DHCP, VLANs) and manage ISP and telecom vendors
\n
• Administer endpoint protection, data governance, and email security tools, and run phishing simulations
\n
• Own IT controls and compliance: monthly access and config reviews, change logs, exception tracking, and DDQ support
\n
• Handle eDiscovery and legal hold searches with Legal and Compliance
\n
• Manage software licensing, renewals, and vendor relationships
\n
• Automate with PowerShell and Python
\n
• Lead infrastructure and security projects end to end, including a planned PBX outsourcing transition
\n
• Coordinate server room power, cooling, and facilities vendors
\n
• Mentor junior staff and serve as the escalation point for IT support
\n

\n

\n

Required Qualifications

\n

\n
• 7+ years of hands-on enterprise systems administration
\n
• Fully onsite in the NYC metro / Connecticut area, with travel between offices and a DR site as needed
\n
• Available for occasional scheduled after-hours patching and recovery testing
\n
• Able to move and install equipment and work in server rooms and wiring closets
\n
• Deep Windows Server, AD, M365, and VMware vSphere experience
\n
• Hands-on non-human identity management (service accounts, SPNs, Entra ID app registrations)
\n
• Secure email gateway experience (Proofpoint, Mimecast, or similar)
\n
• Endpoint and data-governance tools (CrowdStrike, Varonis, or similar)
\n
• Strong networking and firewall management skills
\n
• PowerShell proficiency
\n
• Experience operating and evidencing IT controls in a regulated or audited environment
\n
• Proven project leadership across internal teams, MSPs, and vendors
\n

\n

\n

Preferred Qualifications

\n

\n
• Bachelor's in CS, IT, or related field (or equivalent experience)
\n
• Financial services background
\n
• eDiscovery or legal hold experience
\n
• AWS or Azure
\n
• Ansible or PowerShell DSC
\n
• Bloomberg or Avaya PBX administration
\n