Senior System Engineer

Job Description

Position Summary:

\n

Sapient Logic is seeking a Senior Systems Engineer to support a joint mission system program in San Diego, CA. This position requires an expert-level engineer with strong expertise of Windows Server, Active Directory, RBAC, along with experience in Linux, and automation frameworks used to deploy and sustain enterprise domains across multiple environments (on-premises and cloud). The ideal candidate will lead complex system integrations, design domain architectures, and ensure secure, policy-compliant operations in line with DoD Zero Trust principles.

\n

\n

Responsibilities:

\n

\n
• Architect, deploy, and maintain Windows Server (2019/2022) across multi-site, multi-domain architectures.
\n
• Lead configuration and management of Active Directory, DNS, DHCP, and Group Policy (GPOs).
\n
• Implement Role-Based Access Control (RBAC) and least-privilege models.
\n
• Design and administer Active Directory Certificate Services (AD CS), PKI, and Kerberos authentication.
\n
• Manage RADIUS authentication for network devices and infrastructure systems.
\n
• Administer SCCM/MECM and WSUS for patch management, software deployment, and configuration compliance.
\n
• Develop and maintain PowerShell, Python, and Ansible automation for system provisioning, configuration, application installation, deployment, monitoring, and infrastructure management.
\n
• Build automation utilities using JavaScript (Node.js) for cross-system orchestration and integration.
\n
• Collaborate with Linux and Network Engineering teams to ensure secure interoperability (Kerberos, LDAP, RADIUS).
\n
• Perform system hardening and validation in compliance with DoD STIGs, CIS Benchmarks, and Zero Trust frameworks.
\n
• Design and oversee SQL Server deployments for integrated Windows services.
\n
• Create and maintain detailed technical documentation, including configuration guides, design diagrams, and test procedures.
\n
• Provide technical mentorship and oversight across enterprise Windows projects.
\n
• Support systems integration, infrastructure engineering, automation, and deployment activities across classified multi-domain environments. 
\n
• Engineer and maintain virtualized Operating Environment infrastructure using KVM and EC2 on on-premise infrastructure and cloud environments. 
\n
• Develop Infrastructure-as-Code and configuration automation using Ansible, PowerShell, and Python across Windows Server and Linux/RHEL environments. 
\n
• Automate system configuration, software installation, task sequencing, provisioning, and deployment workflows. 
\n
• Support infrastructure architecture, system design, interface planning, and requirements-driven implementation using architecture and engineering artifacts. 
\n
• Partner with software, infrastructure, cybersecurity, Linux, and network engineering teams to troubleshoot complex system integration and deployment issues. 
\n

\n

\n

Required Qualifications:

\n

\n
• Bachelor’s degree in Computer Science, Information Technology, or related field (Master’s preferred) with 12+ years of progressive experience designing and maintaining enterprise Windows environments; OR an Associates degree and 14 years of IT Networking experience; OR a High School Diploma/GED and 16 years of IT Networking experience is required.
\n
• Expert knowledge of Active Directory, DNS, DHCP, and GPOs.
\n
• Expertise in RBAC, AD CS, PKI, Kerberos, and RADIUS authentication integration.
\n
• Experience with Windows Server 2019/2022 configuration and hardening.
\n
• Proficiency managing SCCM/MECM and WSUS for enterprise patching and software deployment.
\n
• Automation with PowerShell and Ansible; experience with Git/CI-CD for Infrastructure-as-Code.
\n
• Familiarity with Linux interoperability and cross-domain authentication.
\n
• Knowledge of DoD cybersecurity frameworks (STIGs, CIS, Zero Trust).
\n
• IAT Level II (e.g., Security+ CE) and OS/Computing Environment certification.
\n
• Active DoD Top Secret clearance required.
\n
• U.S. Citizenship required.
\n

\n

\n

Microsoft Certifications:

\n

\n
• Microsoft Certified: Windows Server: Administrator Associate – strongly preferred.
\n
• Microsoft Certified: Azure Administrator Associate (AZ-104) – preferred.
\n
• Microsoft Certified: Identity and Access Administrator Associate (SC-300) – preferred.
\n

\n

\n

Desired Skills:

\n

\n
• Experience with Azure, AWS, or GCP cloud environments.
\n
• Understanding of Docker, Kubernetes, and microservices architectures.
\n
• Strong analytical, leadership, and documentation skills.
\n
• Proficiency using Jira, Confluence, and GitLab for Agile collaboration.
\n
• Experience with virtualization technologies, including KVM.
\n
• Proficiency with Python for infrastructure and systems automation.
\n
• Experience supporting Windows and Linux/RHEL systems in classified or mission-critical environments.
\n
• Experience with systems architecture/modeling tools such as Cameo and Visio.
\n
• Experience developing Infrastructure-as-Code and automated deployment solutions.
\n
• Experience presenting system status, technical risks, architecture, and engineering solutions to technical and program leadership.
\n

\n

\n

Benefits:

\n

\n
• 401(k) with company match
\n
• Health, dental, and vision insurance
\n
• Health savings and flexible spending accounts
\n
• Paid time off and parental leave
\n
• Life insurance
\n
• Professional development assistance
\n
• Employee referral and assistance programs
\n

\n

\n

Schedule:

\n

Monday to Friday

\n

8-hour shift

\n

\n

Job Type:

\n

Full-Time

\n

\n

Location:

\n

San Diego, CA

\n

\n

Salary Range:

\n

$180,000 – $200,000