Senior System Engineer

Position OverviewA financial services firm needs a hands-on Senior Systems Administrator to own its Windows, Microsoft 365, network, and security infrastructure. You'll be the team's senior escalation point, run IT controls in an audited environment, and lead infrastructure projects with internal teams and vendors.Are you ready to apply Make sure you understand all the responsibilities and tasks associated with this role before proceeding.Key ResponsibilitiesAdminister Active Directory, Entra ID, and service accounts (SPNs, app registrations, credential rotation), plus MFA and conditional accessBuild and maintain Windows Server on VMware vSphere, including physical hardware and file servers across multiple sitesManage Microsoft 365 and Exchange Online, including mail security, DLP, and retentionRun networking and firewalls (TCP/IP, DNS, DHCP, VLANs) and manage ISP and telecom vendorsAdminister endpoint protection, data governance, and email security tools, and run phishing simulationsOwn IT controls and compliance: monthly access and config reviews, change logs, exception tracking, and DDQ supportHandle eDiscovery and legal hold searches with Legal and ComplianceManage software licensing, renewals, and vendor relationshipsAutomate with PowerShell and PythonLead infrastructure and security projects end to end, including a planned PBX outsourcing transitionCoordinate server room power, cooling, and facilities vendorsMentor junior staff and serve as the escalation point for IT supportRequired Qualifications7+ years of hands-on enterprise systems administrationFully onsite in the NYC metro / Connecticut area, with travel between offices and a DR site as neededAvailable for occasional scheduled after-hours patching and recovery testingAble to move and install equipment and work in server rooms and wiring closetsDeep Windows Server, AD, M365, and VMware vSphere experienceHands-on non-human identity management (service accounts, SPNs, Entra ID app registrations)Secure email gateway xhyhwjd experience (Proofpoint, Mimecast, or similar)Endpoint and data-governance tools (CrowdStrike, Varonis, or similar)Strong networking and firewall management skillsPowerShell proficiencyExperience operating and evidencing IT controls in a regulated or audited environmentProven project leadership across internal teams, MSPs, and vendorsPreferred QualificationsBachelor's in CS, IT, or related field (or equivalent experience)Financial services backgroundeDiscovery or legal hold experienceAWS or AzureAnsible or PowerShell DSCBloomberg or Avaya PBX administration