Senior Systems Engineer

Senior Systems Engineer

This is a fully on-site role. Hybrid/remote work is not available at this time. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

RIVO is looking for a proactive, technically strong Senior Systems Engineer to join our IT team. In this role, you'll administer and secure our Microsoft-based infrastructure and Fortinet network environment, spanning Hyper-V servers, Azure cloud infrastructure, a multi-tenant Microsoft 365 and Azure cloud environment, and enterprise network security, while building automation that keeps our team running on reliable, well-managed, and secure technology.

If you're looking for an opportunity to leverage your Microsoft cloud expertise, expand your infrastructure and security skills, and contribute to a growing organization that values innovation and continuous improvement, we'd love to hear from you!

Job Description

What You'll Do

Systems & Infrastructure

• Administer and maintain Windows Server environments, Active Directory, DNS, DHCP, and Group Policy.
• Support Microsoft 365 services including Exchange Online, SharePoint, Teams, and OneDrive across a multi-tenant environment.
• Manage identity and access through Entra ID (Azure AD), including MFA, conditional access, and cross-tenant collaboration architecture.
• Administer Hyper-V virtualization and Azure infrastructure, including virtual networks and site-to-site VPN connectivity.
• Monitor server, network, and storage performance and backups, and troubleshoot issues proactively.

Network & Security

• Administer and harden Fortinet firewall, switch, and wireless infrastructure (FortiGate, FortiSwitch, FortiAP), including VPN configuration.
• Monitor security logs, investigate incidents, and coordinate vendor escalations as needed.
• Apply security patches, updates, and endpoint protection (Microsoft Defender) across servers and workstations.
• Support device management and compliance policies through Microsoft Intune, including mobile device management for BYOD.
• Track and drive remediation of Microsoft Secure Score findings.
• Follow best practices for data protection, access control, and disaster recovery, including Microsoft 365 backup solutions.

Automation & Integration

• Develop PowerShell and Microsoft Graph API scripts to automate administrative and monitoring tasks.
• Build and maintain Power Automate workflows to support business process automation.
• Support SAML/SSO integrations between Entra ID and third-party applications.
• Application and policy deployment using both Microsoft Intune and Microsoft Defender

Operational Support

• Provide Tier 2/3 support for escalated help desk tickets.
• Document systems, processes, and procedures for the IT team.
• Manage user account provisioning/deprovisioning and hardware lifecycle.

Collaboration

• Partner with IT and Security teams on projects and infrastructure upgrades.
• Assist with vendor management, escalations, and software license management.

Qualifications

What We Look For

• 5+ years of experience as a systems administrator in a Windows/Microsoft environment.
• Hands-on experience with Windows Server, Microsoft Intune, Entra, Microsoft Azure Subscriptions, and Hyper-V virtualization.
• Strong working knowledge of Microsoft 365 and Entra ID (Azure AD) administration, including multi-tenant environments.
• Hands-on experience administering Fortinet or similar enterprise firewall, switching, and wireless infrastructure.
• Solid scripting/automation skills, including PowerShell and Microsoft Graph API.
• Experience with networking fundamentals: switching, routing, VPNs, and firewalls.
• Experience with backup and disaster recovery tools, including Microsoft 365 backup solutions.
• Experience investigating and documenting security incidents.
• Strong problem-solving and critical thinking abilities.
• Excellent interpersonal, verbal, and written communication skills.
• Excellent attention to detail, time management, and organizational skills.
• Microsoft certification (MS-102, AZ-104, or similar) and/or Fortinet NSE certification a plus.

Additional Information

Company Benefits

• Childcare & Family Support: Receive up to $5,000 annually in childcare reimbursement to ease the balancing act of work and family & Exclusive access to comprehensive fertility treatment coverage to financially support your family-building journey
• Stay Fit for Free: Join our FREE weekly group workouts and keep your health and energy levels at their peak
• Company Events & Social Hours: Enjoy regular happy hours and company-wide events to celebrate achievements and build community with fellow employees
• Padres Tickets: Catch a Padres game with exclusive access to season long raffle drawings in the RIVO ticket section. Go Padres!
• Daily Perks: Savor FREE coffee, energy drinks, and snacks – fueling your productivity and satisfaction!
• Parking & Commute Made Easy: Say goodbye to commuting hassles and high gas prices – enjoy a company-paid parking or MTS pass
• Dedication Incentives: Opportunity to earn more money with our perfect attendance incentive – your dedication and reliability deserve recognition
• Generous Time Off: Recharge and live your best life with company paid holidays and PTO each year
• Comprehensive Health Coverage: Benefit from medical, dental, and vision plans with a 70/30 cost share—because your well-being is our priority
• Secure Your Future: Take advantage of our 401(k) plan with employer matching to invest in your future with confidence

We offer a comprehensive compensation and benefits package where you will be rewarded based on your performance and recognized for the value you bring to the business. A reasonable estimate of the salary range for this job is $110,000.00 to $140,000.00. Individual salaries within those ranges take into account the wide range of factors that are considered in making compensation decisions including but not limited to education; experience and training; licensure and certifications; knowledge and skill sets; and other business and organizational needs.

RIVO Holdings, LLC is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, citizenship status, disability, age (40 years old or older) and genetic information (including family medical history), past or present military or veteran status, or any other characteristic protected by applicable law.