Systems Engineer

Technology Department Systems Engineer Position Summary: The Pawtucket School Department is seeking a highly skilled and service-oriented Systems Engineer to join the Technology Department. The Systems Engineer will be responsible for the design, implementation, administration, maintenance, security, monitoring, and continuous improvement of the School Department's technology infrastructure and enterprise systems. The position plays a critical role in ensuring that technology systems supporting students, teachers, administrators, and district operations are reliable, secure, scalable, and available across all Pawtucket School Department facilities. The Systems Engineer will be responsible for supporting a diverse district technology environment that includes Windows and Linux servers, virtualization, Layer 3 switching and routing, network infrastructure, Apple devices and management platforms, storage, cloud services, Google Workspace, identity and access management, cybersecurity systems, backups, endpoint management, telecommunications, and other enterprise applications. The successful candidate must have a strong understanding of enterprise networking, including Layer 3 switching, routing, VLANs, IP addressing, subnetting, DHCP, DNS, and network segmentation, as well as strong systems administration, cybersecurity, and problem-solving skills. The candidate must also be able to communicate effectively with both technical and non-technical staff. Essential Duties and Responsibilities: Systems Administration & Infrastructure • Design, configure, deploy, maintain, and troubleshoot district servers, systems, and infrastructure. • Administer physical and virtual server environments. • Manage Windows and Linux-based systems as applicable to the district environment. • Maintain server operating systems, applications, services, and security configurations. • Monitor system performance, availability, capacity, and resource utilization. • Identify and resolve system performance issues before they significantly impact district operations. • Assist with the planning and implementation of infrastructure upgrades, replacements, and technology refresh cycles. • Maintain accurate documentation of servers, systems, configurations, dependencies, and infrastructure. • Assist with the design and implementation of highly available and redundant systems. Cloud & Enterprise Systems • Administer and support district cloud-based services and enterprise technology platforms. • Support the administration of Google Workspace for Education, including user accounts, organizational units, groups, authentication, security policies, and administrative settings. • Assist with the implementation and management of cloud applications and services. • Evaluate new technologies and services for compatibility, security, cost effectiveness, and district needs. • Assist in integrating cloud-based applications with existing district systems. • Monitor cloud services and resolve authentication, connectivity, synchronization, and integration issues. Identity & Access Management • Manage district identity and access systems and associated authentication services. • Implement and maintain appropriate access controls based on employee roles and responsibilities. • Support Multi-Factor Authentication (MFA) and other authentication technologies. • Manage account provisioning, deprovisioning, groups, permissions, and security policies. • Assist with integrations between district systems and identity providers. • Regularly review access permissions and assist with identifying inappropriate or excessive access. Cybersecurity • Assist in developing, implementing, and maintaining the School Department's cybersecurity infrastructure. • Monitor systems for suspicious activity, vulnerabilities, and potential security incidents. • Implement security updates, patches, configuration changes, and other remediation measures. • Assist with vulnerability management and security assessments. • Support endpoint security, email security, authentication security, and network security systems. • Investigate and respond to cybersecurity incidents in coordination with the Technology Department. • Assist in maintaining district security standards and procedures. • Participate in phishing prevention, security awareness, and other cybersecurity initiatives. • Stay current on emerging cybersecurity threats and recommended security practices affecting K-12 educational environments. Backup & Disaster Recovery • Administer and monitor district backup systems. • Ensure critical servers, systems, databases, and configurations are appropriately backed up. • Regularly verify the integrity and recoverability of backups. • Participate in the development, testing, and maintenance of disaster recovery and business continuity procedures. • Assist with recovery of systems following hardware failures, cybersecurity incidents, data loss, or other disruptions. • Maintain documentation of recovery procedures and system dependencies. Network & Telecommunications Support • Work closely with network and technology staff to support the district's wired and wireless infrastructure. • Troubleshoot issues involving DNS, DHCP, TCP/IP, routing, switching, VPNs, firewalls, and other network services. • Assist with network monitoring and performance analysis. • Support connectivity between district buildings and centralized technology services. • Assist with telecommunications, VoIP, and other technology systems as needed. • Troubleshoot complex issues that cross server, network, endpoint, and application environments. Endpoint & Device Management • Support district endpoint management systems for computers, Chromebooks, and other technology devices. • Assist with device configuration, security policies, software deployment, patch management, and inventory systems. • Develop and maintain automated processes for device and software management when appropriate. • Troubleshoot complex endpoint issues that require systems-level investigation. • Work collaboratively with Technology Department staff responsible for school-based technology support. Application & Database Support • Provide systems-level support for district applications and databases. • Assist with application installations, upgrades, integrations, and troubleshooting. • Work with vendors to resolve complex technical issues. • Support data integrations between district systems. • Assist with importing, exporting, transforming, and securely transferring data between systems. • Troubleshoot authentication, API, database, and integration issues. • Assist with maintaining development, testing, and production environments. Monitoring & Automation • Implement and maintain monitoring systems for servers, networks, applications, storage, and other critical infrastructure. • Develop automated scripts and processes to reduce repetitive administrative tasks and improve operational efficiency. • Utilize scripting and automation tools such as PowerShell, Python, Bash, or similar technologies. • Develop reports and dashboards to assist the Technology Department in monitoring system health and performance. • Establish appropriate alerts and escalation procedures for critical systems. Documentation & Standards • Develop and maintain technical documentation, system diagrams, configuration standards, and operational procedures. • Maintain accurate records of system configurations, credentials management processes, licenses, warranties, and infrastructure dependencies. • Develop and maintain standard operating procedures for critical technology systems. • Ensure technology systems are implemented consistently with district standards. • Assist in developing technology policies and procedures related to infrastructure, cybersecurity, systems administration, and access management. Project Management • Participate in district technology projects from planning through implementation. • Assist with developing project requirements, timelines, implementation plans, and testing procedures. • Coordinate technical projects with Technology Department staff, district administrators, school personnel, and outside vendors. • Assist with technology procurement by evaluating technical specifications and compatibility. • Test new technologies prior to district-wide deployment. • Provide technical recommendations to Technology Department leadership. Vendor & Technical Support • Serve as a technical point of contact for selected technology vendors. • Open, manage, and escalate vendor support cases. • Evaluate vendor recommendations and proposed solutions. • Participate in vendor meetings and implementation activities. • Ensure vendor-provided solutions meet district technical and security requirements. Apple Device Management & Administration • Administer and support the Pawtucket School Department's Apple device environment, including Mac computers, iPads, and other Apple devices deployed throughout the district. • Manage Apple devices through the district's Mobile Device Management (MDM) platform, including device enrollment, configuration, security policies, application deployment, restrictions, and compliance. • Administer and maintain Apple Business Manager (ABM) and its integration with the district's MDM platform. • Configure and manage Automated Device Enrollment (ADE) for district-owned Apple devices. • Develop and maintain device configuration profiles, application deployment policies, security settings, and restrictions. • Manage Apple applications, licenses, and deployments across district devices. • Support Apple ID, Managed Apple Account, and identity integrations as applicable to the district environment. • Troubleshoot Apple hardware, operating system, application, authentication, networking, and MDM-related issues. • Manage operating system updates and security updates for Apple devices. • Establish and maintain appropriate security controls for Apple devices in accordance with district cybersecurity standards. • Monitor Apple device inventory, enrollment status, compliance, and configuration. • Assist with the deployment, replacement, and retirement of Apple devices throughout the district. • Develop automated and standardized processes for large-scale Apple device deployment and management. • Maintain accurate documentation of Apple device configurations, management policies, applications, and deployment procedures. • Work with Technology Department staff and vendors to resolve complex Apple-related technical issues. Network Infrastructure & Layer 3 Switching • Configure, administer, monitor, and troubleshoot Layer 3 switches and enterprise network infrastructure. • Demonstrate a strong understanding of Layer 2 and Layer 3 networking concepts and their integration within a large multi-building environment. • Configure and troubleshoot VLANs, inter-VLAN routing, IP addressing, subnetting, DHCP, DNS, routing protocols, access control lists (ACLs), and network segmentation. • Assist in the design and implementation of resilient and scalable network architectures across district schools and administrative facilities. • Troubleshoot complex connectivity issues involving switches, routers, firewalls, wireless infrastructure, servers, and endpoints. • Monitor network performance and identify potential capacity, configuration, or performance issues. • Assist with network upgrades, switch replacements, configuration changes, and infrastructure migrations. • Maintain accurate network diagrams, configurations, IP addressing documentation, and infrastructure records. • Work closely with Technology Department staff and vendors to maintain reliable connectivity between district buildings and critical technology systems. Required Qualifications: Education • Bachelor's degree in Computer Science, Information Technology, Information Systems, Network Engineering, Systems Administration, or a related field preferred. Equivalent combinations of education, training, and professional experience may be considered. Experience • Minimum of 3-5 years of progressively responsible experience in systems administration, systems engineering, network administration, infrastructure, or a related technology field. • Experience administering enterprise technology environments. • Experience supporting Windows-based environments and server infrastructure. • Experience with cloud-based systems and identity management. • Demonstrated knowledge and practical experience with Layer 3 switching and routing in an enterprise network environment. • Strong understanding of TCP/IP, VLANs, subnetting, routing, DHCP, DNS, network segmentation, and network security concepts. • Experience troubleshooting complex technical problems across multiple technology platforms. Preferred Qualifications: Experience with one or more of the following is highly desirable: • Google Workspace for Education • Microsoft Windows Server • Active Directory / Entra ID • Group Policy • VMware, Hyper-V, or other virtualization platforms • PowerShell • Linux • Google Cloud technologies • Microsoft 365 • Backup and disaster recovery platforms • Endpoint management • Mobile Device Management (MDM) • Cybersecurity and vulnerability management • SIEM or security monitoring platforms • Database technologies • APIs and system integrations • Automation and scripting • K-12 educational technology environments • Layer 3 switching and routing • Enterprise network architecture • VLAN configuration and inter-VLAN routing • TCP/IP and subnetting • DHCP and DNS • Routing protocols • Access Control Lists (ACLs) • Network segmentation • Firewalls and VPN technologies • Wireless networking • Network monitoring and management systems • Experience administering Apple Business Manager (ABM). • Experience with Apple Mobile Device Management (MDM) platforms. • Experience with Automated Device Enrollment (ADE). • Experience managing macOS and iPadOS environments. • Experience with Managed Apple Accounts/Apple IDs and identity integration. • Experience with Apple application licensing and deployment. • Experience managing Apple devices in a K-12 or enterprise environment. Knowledge, Skills, and Abilities: The successful candidate must demonstrate: • Strong knowledge of Layer 2 and Layer 3 networking and switching technologies. • Demonstrated ability to configure, troubleshoot, and maintain Layer 3 switches and routed network environments. • Strong understanding of VLANs, inter-VLAN routing, IP addressing, subnetting, DHCP, DNS, routing, ACLs, and network segmentation. • Strong understanding of enterprise infrastructure and systems administration. • Strong analytical and troubleshooting skills. • Ability to diagnose complex technical problems and determine root causes. • Ability to work independently while functioning effectively as part of a technology team. • Ability to prioritize multiple projects, incidents, and competing demands. • Strong attention to detail and documentation practices. • Ability to communicate complex technical information to non-technical audiences. • Strong customer-service orientation. • Ability to maintain confidentiality and appropriately safeguard sensitive student and employee information. • Ability to remain current with emerging technology and cybersecurity practices. Security & Confidentiality: The Systems Engineer will have access to systems and information that may contain confidential student, employee, financial, and operational information. The employee must: • Maintain strict confidentiality of district information. • Follow all applicable federal, state, and local laws, regulations, and district policies. • Follow established cybersecurity and acceptable-use practices. • Maintain appropriate security controls for systems under their responsibility. • Immediately report suspected security incidents or unauthorized access. • Follow district procedures regarding privileged administrative access. Physical Requirements: The position may require: • Working at a computer for extended periods. • Moving between district schools and administrative facilities. • Working in server rooms, wiring closets, and other technology spaces. • Occasionally lifting and moving technology equipment weighing up to [insert weight] pounds. • Standing, walking, bending, reaching, and working in confined spaces as necessary. • Occasional work outside of normal business hours for system maintenance, upgrades, migrations, emergency response, or scheduled technology projects. • May have to lift or carry up to 50 lbs. Work Schedule: This is a 12-month, full-time position. The Systems Engineer may be required to work outside of normal business hours, including evenings, weekends, or school vacations, when necessary to perform: • Server maintenance • Infrastructure upgrades • System migrations • Security updates • Network maintenance • Disaster recovery testing • Major technology deployments • Emergency system restoration Advance notice will be provided whenever reasonably possible. Performance Expectations: The Systems Engineer is expected to: 1.Maintain reliable and secure technology infrastructure throughout the district. 2.Respond promptly and professionally to critical technology incidents. 3.Proactively identify system weaknesses and recommend improvements. 4.Maintain accurate technical documentation. 5.Protect district information and technology assets. 6.Successfully implement assigned technology projects. 7.Collaborate effectively with other members of the Technology Department. 8.Provide excellent service to schools and district staff. 9.Continuously improve the efficiency, security, and reliability of district technology systems. 10.Support the Technology Department's mission of providing secure, reliable, and innovative technology services that support student learning and district operations.