Systems Engineer II

Systems Engineer IIUnder limited direction, the Systems Engineer II plans, engineers, implements, and sustains mission-critical technology systems supporting District operations. The classification provides senior-level technical leadership, handles complex escalations, leads projects, coordinates vendors, and mentors Systems Engineer I staff. This single classification accommodates two primary specialty tracks while preserving one title/grade:Track A — Network/Infrastructure (traditional IT): Enterprise platforms (servers, Hyper-V virtualization, storage, networking, identity, M365), endpoint management, cybersecurity and DR/BCP, end-user compute strategy, and AI-enabled automation.Track B — Transit Systems / Train Control (operational systems): Wayside/central/vehicle systems integration (e.g., PTC, signal & train control interfaces, SCADA/telemetry, CAD/AVL, real-time information, fare systems, station devices), operational networks, and safety/availability engineering.Distinguishing Characteristics This advanced position is distinguished by its technical leadership role, independent decision-making authority, and responsibility for complex system implementations. The role requires extensive experience with enterprise-level technologies and the ability to design solutions that meet organizational objectives.The Systems Engineer II serves as a subject matter expert and mentor, providing technical guidance to junior staff while managing high-priority projects and vendor relationships.Supervision Received and Exercised The Systems Engineer II reports to the Program Network Operations Manager for Track A and either Train Control Systems Manager or Transit Systems Manager for Tack B. The System Engineer II exercises functional supervision over Systems Engineer I positions. This role provides technical leadership and mentoring while maintaining accountability for project deliverables and system performance.Working Conditions Normal working conditions include office and field environments with regular travel between district facilities. Evening and weekend work is regularly required for system maintenance, upgrades, and emergency response. On-call availability for critical system issues is expected.Essential Functions Duties may include, but are not limited to:Lead end-to-end engineering for assigned systems: requirements, design, build, test, deploy, operate, and continual improvement.Own complex escalations and root-cause analysis; develop runbooks, standards, and diagrams.Plan and execute lifecycle/refresh, patching, vulnerability remediation, backups, and disaster recovery tests.Manage vendors/SOWs; evaluate technologies; develop budget and replacement recommendations.Create and maintain comprehensive technical documentation and DR/continuity procedures.Mentor Systems Engineer I; provide cross-functional coordination with Operations, Maintenance, Facilities, IT, and external partners.Specialty Duties by TrackTrack A — Network/InfrastructureEngineer and administer Windows Server environments; Active Directory (domains, sites, GPOs, trusts) and Entra ID, including hybrid identity synchronization; identity & access hardening, including conditional access and multi-factor authentication.Design/operate virtualization (Hyper-V and/or VMware vSphere), including host configuration and virtual machine provisioning, resource allocation, checkpoints, and lifecycle management, and enterprise storage (SAN/NAS); performance and capacity planning.Lead Microsoft 365 (Exchange Online, SharePoint, Teams, security/compliance) and endpoint management strategy; guide VDI-to-physical (or hybrid) transitions where applicable.Own the District's endpoint management platform (e.g., Microsoft Intune), including device enrollment, configuration profiles, application deployment, compliance policies, and automated provisioning; remediate endpoint issues at scale.Engineer LAN/WAN switching/routing, segmentation/VLANs, network security controls, and monitoring/telemetry.Configure and maintain switches, wireless access points, and routers; serve as secondary network resource to the Program Network Operations Manager, providing coverage during absences, after-hours events, and major incidents.Design and maintain the controls that tie devices, identity, and the network together, including device compliance, certificate-based authentication, 802.1X, and network access control; resolve cross-domain issues end to end.Implement enterprise backup/DR solutions with routine testing and audit-ready documentation.Coordinate endpoint protection, patch orchestration, and vulnerability management.Use District-approved AI tools to accelerate scripting, troubleshooting, documentation, and analysis, validating all AI-assisted output before production use; develop PowerShell and other automation that reduces repetitive manual work; contribute to departmental standards for responsible AI use.Track B — Transit Systems / Train Control SystemsIntegrate and sustain operational technology (OT) used for transit operations: PTC ecosystems, signal/train-control interfaces, wayside devices, interlockings, SCADA/telemetry, CAD/AVL, real-time passenger info, fare collection (TVMs/validators), station assets (PA, digital signage, CCTV), and operational databases.Engineer and support operational networks (wired/wireless, field radios, resilient backhaul, segmented OT networks) with high availability and deterministic performance appropriate to safety-critical systems.Implement systems monitoring and alarming aligned to operational control centers; establish failover/rollback and hot/warm standby strategies.Coordinate with Rail Operations/Maintenance for cutovers, test plans, field commissioning, configuration management, and post-incident reviews.Maintain configuration baselines, application/configuration files, and documentation for regulated systems; support audits and incident investigations.Education Preferred bachelor's in information technology, Computer Science, Electrical/Computer/Systems Engineering, or related field; or equivalent combination of education and experience.Experience (overall) Five (5) years of progressively responsible systems engineering experience aligned to the declared specialty focus, including project leadership and complex operations support.Technical Competencies Strong scripting/automation (e.g., PowerShell or equivalent). Backup/DR design and execution; monitoring/observability; documentation discipline. Network fundamentals (IP, routing, switching, VLANs, QoS, ACLs), security best practices, and change management.Preferred/Desirable by Track Track A: Advanced Microsoft certifications (e.g., Endpoint Administrator Associate, Identity and Access Administrator Associate, Windows Server Hybrid Administrator Associate, or Azure Administrator Associate), VMware VCP, enterprise storage/network certifications. Experience with identity governance and endpoint management at scale. Cisco Certified Network Associate (CCNA); CompTIA Security+ or equivalent. Experience with Hyper-V failover clustering, 802.1X/network access control, or certificate services. Experience building automation or workflows with AI tools in an enterprise setting.Track B: Prior work with PTC/signal interfaces, SCADA or telemetry, CAD/AVL, fare systems, and station systems. Experience on railroad/transit OT networks and control-center integrations.Knowledge Enterprise/Operational Technology systems architecture; high-availability patterns; security and compliance practices; vendor/scope of work management; ITIL-aligned service management.Certificates/Licenses Possess and maintain a California driver's license, Class C, with less than 6 points in the preceding 36 month period and no DUI's in the preceding 7 year period. Maintain compliance with the District's policy regarding Conflict of Interest and Ethics.General Requirements Ability to work independently with minimal supervision. Strong leadership and mentoring capabilities. Excellent project management and organizational skills. Advanced analytical and problem-solving abilities. Superior written and verbal communication skills. Ability to explain complex technical concepts to non-technical stakeholders. Strong vendor management and negotiation skills. Ability to work under pressure and manage multiple complex priorities. Physical ability to lift equipment up to 50 pounds and work in various environmental conditions including railway right-of-way areas.Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Ability to use computers and communication devices for extended periods, manual dexterity for technical tasks, and lifting of equipment up to 50 pounds. Ability to hear, see, and communicate verbally to exchange information. Ability to travel between district locations and work in various environmental conditions including outdoor railway environments. May be subject to fumes, odors, dusts, gases, and chemicals. Ability to walk, climb, balance, bend, carry, push, reach, sit, and stand for extended periods.Machines / Tools / Equipment Advanced proficiency with enterprise server and networking equipment. Expert-level operation of Microsoft Office Suite and administrative tools. Ability to operate specialized IT diagnostic and testing equipment. Proficiency with enterprise backup and monitoring systems. Ability to carry and operate mobile on-call devices.