IT Systems Engineer

Opportunity Overview Reporting to the Director of IT Operations at Rhythm Pharmaceuticals, as the Senior IT System Engineer , you will own day‑to‑day reliability, security, and performance of our cloud and hosting environments across AWS, Google Cloud, and WPEngine, as well as core systems administration (Linux/Windows), DNS/SSL, and network devices. You’ll be the hands‑on technical backbone for our infrastructure—provisioning and hardening servers, implementing backup and disaster recovery, monitoring health and costs, and partnering closely with vendors to keep sites and services secure and stable. The role will interface with the Rhythm IT operations team and the cybersecurity team and will participate in a variety of IT operations tasks and projects across Rhythm global offices as needed. The role will leverage your ability to multitask in a professional environment while working with people at all levels across the entire organization. You will provide these services in an effective and efficient manner, ensuring a high level of customer service. Responsibilities and Duties Build, configure, and maintain resources in AWS (e.g., EC2, S3, IAM, VPC, Security Groups). Deploy, configure, and manage Azure services, including Virtual Machines, Storage Accounts, Virtual Networks, Network Security Groups, Load Balancers, and Microsoft Entra ID, to ensure secure, reliable, and scalable cloud infrastructure operations. Administer Microsoft Entra ID by managing user and group access, enforcing conditional access policies, maintaining identity security, and supporting SSO integrations through proper role‑based access controls. Operate and optimize WPEngine managed WordPress hosting; coordinate environment setup. Implement backup & disaster recovery policies; perform integrity testing and recovery drills. Monitor availability, performance, and costs; right‑size, schedule, and tag resources to meet SLAs and budgets. Enforce cloud security baselines (least‑privilege IAM, key rotation, secrets handling, network segmentation). Administer Linux and Windows servers: patching, configuration, hardening, monitoring, and troubleshooting. Manage DNS, domain registration, redirects, SSL/TLS lifecycle, and IP allow/deny lists. Handle account provisioning/deprovisioning and access reviews across systems. Support web development in coordination with development/agency teams, and implement observability for hosted sites (availability checks, error rates, logs). Partner with development/agency teams on operational needs (e.g., caching, CDN, cookie consent tooling such as OneTrust). Respond to alerts, triage incidents, and drive root‑cause analysis with corrective actions. Prevent recurrence via automation, hardening, and guardrails. Use scripting (Bash, PowerShell, Python) to standardize changes. Maintain clear documentation for infrastructure, access, deployment processes, standard operating procedures, and recovery steps. Contribute to ticket workflows and change management. Coordinate with managed service providers, hosting providers, and agencies. Communicate status and risks to stakeholders; propose pragmatic improvements and roadmaps. Qualifications and Skills 5+ years in cloud operations and systems administration (AWS and Azure). Bachelor’s degree in Information Technology, Computer Science or related field preferable or combination of education and experience. Microsoft and/or AWS certifications preferred. Hands‑on with AWS (EC2, S3, IAM, VPC, Security Groups) and networking fundamentals (routing, firewalls, VPNs). Hands‑on with Azure and Microsoft 365 Admin Center (Virtual Machines, Storage Accounts, Azure Active Directory, Intune, Virtual Networks, Network Security Groups) and networking fundamentals (routing, firewalls, VPNs). Experience with DNS management, SSL/TLS lifecycle, and web hosting platforms (e.g., WPEngine). Strong Linux/Windows administration, patching, and hardening; scripting (Bash, PowerShell). Identity & access management experience (e.g. Entra AD). Familiarity with monitoring/observability (CloudWatch, Stackdriver, Datadog, ELK, or similar). Experience with incident response and root‑cause analysis. Ability to collaborate with vendors/agencies and communicate with non‑technical stakeholders. Knowledge of compliance and risk practices (e.g., SOX/GxP environments, change management, access reviews). Able to review and suggest improvements to IT processes and technology setup. Lifesciences experience is a plus. Location and Travel This role is based out of our corporate office in Boston, Massachusetts. Rhythm operates in a hybrid‑work model. Candidates applying must be willing and able to be in the Boston office in coordination with their department and business needs. This role may involvesome travel. Compensation The expected salary range for this position is $135,000 - $215,000. Actual pay will be determined based on experience, level, qualifications, geographic location, and other job‑related factors permitted by law. A discretionary annual bonus may be available based on individual and company performance. This role may be eligible for benefits and other compensation such as restricted stock units. Rhythm is an equal employment opportunity employer and does not discriminate against any applicant because of race, creed, color, age, national origin, ancestry, religion, gender, sexual orientation, disability, genetic information, veteran status, military status, application for military service, or any other class protected by state or federal law. #J-18808-Ljbffr