Senior Systems Engineer (L3) - Network & Infrastructure

Job Description

Job Description

L3 Systems Engineer — Privately held MSP serving mid-market nonprofits. Not PE-backed. SF Bay Area.

We're a Northern California MSP with 23 employees, serving clients across several industries, with our growth focused on midsized to large community-based nonprofits: behavioral health providers, child welfare orgs, shelters, and community health centers. The people doing some of the hardest and most overlooked work in the state.

We're not PE-backed and we're not for sale. We've been privately held since 1998 and intend to stay that way. Our goal is to help organizations doing good, not optimize for shareholder value by cutting service, breaking promises, and change-ordering clients to death.

On to the job:

We need someone who's already operated as an L3 or senior engineer and can take technical ownership of projects, ideally at an MSP. This isn't a service desk role. Our service desk handles day-to-day support and routine escalations. We need someone who can take technical ownership of the complex infrastructure work across our client environments: networking, virtualization, servers, and the problems that land with the most senior engineer in the room.

Our client environments are moving to cloud, and networking is where we need the most depth. But the on-prem infrastructure isn't going anywhere soon. Expect to own and support server and virtualization environments for at least the next couple of years, and to run the migrations that eventually retire them.

You'd be an important part of a larger team. Our fractional IT directors/vCIOs own the client relationship and roadmap, our technical lead owns architecture and standards across the company, our security specialists handle threat detection and response, and our service desk handles day-to-day support.

You'll also work directly with client leadership. You're the technical voice in those conversations: what the infrastructure can do, what it will cost, what the risk is if it waits. Our fractional IT directors/vCIOs own the roadmaps and budgets, and they rely on you to make them real. You're not just showing up for the implementation.

Our clients range from about 100 to 1,000 employees, many across multiple sites. They rely on us as an extension of their IT leadership and engineering team, not just another ticket queue.

Six months in, you're leading our most complex projects and helping clients make important technology decisions.

The work:

• Serve as the final technical escalation point for complex infrastructure issues
• Lead projects including multi-site network refreshes, SD-WAN/SASE rollouts, firewall and core switch replacements, circuit consolidation, datacenter migrations, and moving on-prem workloads to cloud
• Own and maintain server and virtualization environments through their remaining life
• Own the infrastructure standards and reference architectures our team builds against
• Design solutions alongside our technical lead
• Support HIPAA and related compliance efforts from the infrastructure side. We support the compliance function, we don't own it
• Mentor service desk staff and junior engineers

Stack:

Routing and switching, Fortinet/Palo Alto/SonicWall firewalls, SD-WAN/SASE, multi-site WAN and circuit environments, Windows Server, VMware vSphere, hyperconverged infrastructure (VxRail, Nutanix, or similar).

You:

You've spent enough time in infrastructure that you've seen what works, what doesn't, and what tends to break at 2 a.m.

We're looking for 8+ years in IT, 3+ operating at a senior or L3 level. Enterprise networking is where we need the most depth routing, switching, firewalls, multi-site connectivity. You also need to be solid on Windows Server and VMware or hyperconverged platforms, since you'll be running those environments while they're still in production and planning what replaces them. Healthcare or clinical experience is a plus, especially if you've worked in environments where uptime and change control matter.

MSP experience is strongly preferred. The pace is different, and it helps if you already understand what it's like to move between multiple client environments without losing context.

Strong written communication matters. Certs valued but not required - CCNA/CCNP, advanced Fortinet certifications, VMware VCP, or similar.

The numbers:

• $100k–$140k base DOE, plus bonus eligibility
• Bonus opportunities
• Our average employee tenure is 9.5 years
• We've been work from home since 2004
• Company-paid health (Blue Shield PPO or Kaiser), dental, vision; subsidized dependents
• Company-sponsored Life Insurance w/Long term and Short term Disabilty and EAP.
• 401k w/ match, paid certs/exams, mileage, virtual lab
• 15 days PTO. 20 days PTO at 3yrs. 25 days PTO at 5yrs
• 9 holidays + your birthday off

This role is SF Bay Area based. It's primarily remote, but you'll be onsite with clients for projects, cutovers, and outages in the East Bay, South Bay, San Francisco, and the Peninsula. U.S. citizenship is required for this role because several of our clients operate under government contracts with citizenship-based access requirements. We promote from within whenever we can, so this is a rare external search driven by growth.

If you've spent a career making infrastructure work and you'd rather do that for organizations that actually help people than for the next acquisition target quietly gutting its service to hit a number, apply here.