Senior Systems Engineer

About Grassi

After more than 40 years of business growth and industry change, Grassi has redefined what it means to be an advisor and accountant to today’s businesses and individuals. Nationally ranked as one of the largest and fastest-growing accounting firms in the nation, Grassi is a leading provider of advisory, tax, and accounting services across key sectors including construction, architecture and engineering, not-for-profit, healthcare, manufacturing and distribution, financial services, real estate, and more. Several publications have ranked us among the top accounting firms to work for, highlighting our strength in work-life balance, culture, and wellness categories.

With over 550 employees and eleven offices spanning the New York Metropolitan Area, Long Island, the Northeast, Florida, New England, Denver and an international presence in Italy, we are strategically positioned to serve clients locally and globally. In 2023, Grassi became an employee-owned company by implementing an ESOP, establishing our independence and empowering our people to drive the firm’s future success. The ESOP ensures that equity partners and all Grassi U.S. employees have the exclusive opportunity to own the firm’s stock, making them integral to the company’s future.

Job Summary

We are currently seeking a Senior Systems Engineer to join our team in either our Park Ridge, NJ or Jericho, NY office location . This is a fully onsite position, five days per week in the office.This role offers an exciting opportunity to be part of a dynamic and growing firm.

Responsibilities include, but are not limited to:

• Serve as the final service desk escalation point for complex incidents involving Microsoft 365, identity services, secure remote access, endpoint protection, virtual desktop platforms, profile management, printers, security alerts, and firm applications.
• Lead root cause analysis for recurring, high-impact, or deadline-sensitive issues and implement durable corrective actions.
• Support technical delivery for endpoint, application, Microsoft 365, secure access, identity, infrastructure, security improvement, and modernization initiatives.
• Create and maintain configuration standards, operational runbooks, recovery procedures, troubleshooting guides, and knowledge articles.
• Mentor Level 1 and Level 2 personnel, improve escalation quality, and provide practical knowledge transfer.
• Coordinate with vendors, consultants, application owners, security resources, business stakeholders, and IT leadership.
• Identify technical debt, availability risks, capacity constraints, configuration weaknesses, and opportunities for automation or standardization.
• Participate in after-hours maintenance and critical incident response when business needs require it.

Technical Responsibilities

• Cloud, Virtual Desktop, Microsoft 365, and Identity
  • Administer and troubleshoot cloud services, including virtual machines, storage, networking, remote connectivity, monitoring, logging, backup, disaster recovery, and related services.
  • Provide advanced support for virtual desktop environments and user profiles, including access, application delivery, printing, performance, capacity, and user experience.
  • Administer Microsoft 365, including Exchange Online, Teams, Teams Phone, SharePoint Online, OneDrive, Outlook, Microsoft 365 Apps, Copilot, licensing, mailboxes, groups, and permissions.
  • Support identity and access management, including users, groups, enterprise applications, access policies, sign-in issues, and access troubleshooting.
  • Assess technical dependencies and business risk before changes and develop implementation, validation, and rollback plans.

• Access, Networking, and Endpoint Support
  • Support secure remote access, DNS, network connectivity, and secure-access platforms.
  • Troubleshoot TCP/IP, DNS, DHCP, VPN, Wi-Fi, latency, endpoint connectivity, application access, and other network-related issues.
  • Provide advanced support for Windows devices, endpoint performance, imaging, deployment, printers, scanners, application delivery, endpoint management, and remote-support tools.
  • Support email security, endpoint protection, managed detection and response, identity security, password management, phishing investigations, suspicious sign-ins, malware alerts, and potential account compromise.
  • Use PowerShell and approved automation tools for diagnostics, troubleshooting, and process improvement.

• Compliance, Data Protection, and Business Applications
  • Apply least-privilege principles, verify identity before sensitive access changes, and protect confidential client, tax, employee, and firm information.
  • Maintain awareness of applicable security and compliance requirements, including IRS Publication 4557, the FTC Safeguards Rule, GLBA, SOC 2, GDPR, CCPA/CPRA, and HIPAA when applicable.
  • Support security assessments, audit requests, remediation activities, recovery exercises, and technical control documentation.
  • Support integrations, secure access, application availability and performance, upgrades, and vendor escalations across the firm’s application environment.

• Accounting, Tax, Audit, and Firm Applications
  • Maintain technical knowledge of applications supporting accounting, tax, audit, advisory, document management, workflow, portals, payroll, practice management, electronic signature, PDF, scanning, printing, and remote-work processes.
  • Support applications including CCH Axcess, CCH Engagement, CCH Workstream, CCH Workflow, Wolters Kluwer applications, Thomson Reuters applications, Inflo, SafeSend, K-1x, SurePrep, QuickBooks, QuickBooks Online, ShareFile, Adobe Acrobat, Adobe Sign, Star Practice Management, CFS Payroll, and related tools and dependencies.
  • Understand the urgency of tax and audit deadlines, partner and client-impacting issues, secure access, engagement file availability, and business continuity. Coordinate technical and vendor resources while keeping stakeholders informed.

Qualifications

Required

• 5+ years of progressive experience across service desk support, advanced endpoint support, Microsoft 365 administration, secure remote access, business application support, and user-facing technical escalation.
• Demonstrated ability and willingness to handle Level 1 and Level 2 calls and tickets while owning Level 3 escalations, root cause analysis, platform support, documentation, and mentorship.
• Recent hands-on experience with cloud services, virtual desktop platforms, profile management, Microsoft 365, identity services, secure remote access, DNS, Wi-Fi, and production network-dependent support issues.
• Experience performing advanced incident troubleshooting, implementation planning, vendor escalation, documentation, and technical communication in a deadline-driven professional services environment.

Preferred

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent hands-on technical experience, military technical training, trade school, certifications, or comparable professional experience.
• Experience with endpoint management, service management, email security, endpoint protection, managed detection and response, password management, automation, security assessments, technical audits, remediation programs, business continuity, and disaster recovery.
• Experience supporting accounting, tax, audit, advisory, financial services, or another regulated and deadline-driven environment.
• Relevant Microsoft Azure, Microsoft 365, Microsoft Security, Cisco, CompTIA Security+, CISSP, CISM, ITIL, or comparable certifications are preferred.

Why Grassi?

Our firm is consistently ranked by Vault.com and the Best Places to Work group for our commitment to compensation, paid time off, work-life balance, culture and more. Some of the ways we accomplish this include:

Flexibility: Our work-life balance initiatives include generous paid time off, flexible “Dress for Your Day” dress code, telecommuting options, flex-time policies, and summer hours, enhanced by our Floating Summer Friday’s program, which allows team members three extra Fridays off during the summer months in addition to their PTO.

Company Culture: Here at Grassi we are dedicated to creating an environment for our team members that is positive, productive, and aligns with our company’s high standards of inclusivity, diversity, and equity. We work closely with our DEI Council and Grassi Women’s Council to organize events throughout the year to bring the firm together for open dialogue and awareness of global diversity issues. Through our charitable initiative, Grassi Gives Back , we proudly support organizations such as Ronald McDonald House, Toys for Tots, Autism Speaks, Long Island Cares, and many of our nonprofit clients.

Benefits Package: Competitive base compensation with eligibility for a raise and bonus each June or December based on performance metrics and level. Medical, Dental, and Vision Insurance, employer contribution to life insurance, 401(k) plan, ESOP, and client and employee referral bonus program.

ESOP Owned: The ESOP ensures that equity partners and all Grassi U.S. employees have the exclusive opportunity to own the firm’s stock, making them integral to the company’s future. Unlike many other ESOPs, Grassi’s is privately funded, with no outside investors or private equity firms involved in the plan.

CPA Incentive: Financial assistance toward the achievement of the CPA certification which includes the cost of the CPA study materials, CPA exam registration and sitting fees for all 4 parts (up to 2 x per part), plus the CPA application and licensing fees. Paid study time during work hours, additional paid time off to take your scheduled exam and a bonus paid upon passing the CPA exam.

Learning and Development : We offer Continuing Professional Education (CPE) opportunities, including both technical and soft skills training. These opportunities are available through internal courses and external programs led by well-known industry instructors, all at no cost to our employees.

Wellness Resources: Discounted gym memberships and various wellness initiatives and programs such as the CALM app that helps our team members lower stress, decrease anxiety, improve focus, and get more restful sleep.

Compensation for this role is determined based on a combination of factors, including but not limited to your relevant experience, skills, certifications, and geographic location. We strive to offer competitive, equitable pay, that reflects the value each team member brings to the organization. In addition to base salary, we offer a comprehensive benefits package that includes performance-based incentives, wellness and retirement programs, and opportunities for continuous professional development.

Salary ranges are provided to offer transparency and may vary depending on final candidate qualifications and local market conditions. Please find compensation information below for candidates residing in New York and New Jersey.

New York ranges are from $130,000 – $160,000

New Jersey ranges are from $130,000 – $160,000