Systems Engineering Analysis, Senior

Senior Systems Engineer
After more than 40 years of business growth and industry change, Grassi has redefined what it means to be an advisor and accountant to today's businesses and individuals. Nationally ranked as one of the largest and fastest-growing accounting firms in the nation, Grassi is a leading provider of advisory, tax, and accounting services across key sectors including construction, architecture and engineering, not-for-profit, healthcare, manufacturing and distribution, financial services, real estate, and more. Several publications have ranked us among the top accounting firms to work for, highlighting our strength in work-life balance, culture, and wellness categories.
With over 550 employees and eleven offices spanning the New York Metropolitan Area, Long Island, the Northeast, Florida, New England, Denver and an international presence in Italy, we are strategically positioned to serve clients locally and globally. The ESOP ensures that equity partners and all Grassi U.S. employees have the exclusive opportunity to own the firm's stock, making them integral to the company's future.
We are currently seeking a Senior Systems Engineer to join our team in either our Park Ridge, NJ or Jericho, NY office location. This is a fully onsite position, five days per week in the office. Serve as the final service desk escalation point for complex incidents involving Microsoft 365, identity services, secure remote access, endpoint protection, virtual desktop platforms, profile management, printers, security alerts, and firm applications.
Lead root cause analysis for recurring, high-impact, or deadline-sensitive issues and implement durable corrective actions.
Support technical delivery for endpoint, application, Microsoft 365, secure access, identity, infrastructure, security improvement, and modernization initiatives.
Create and maintain configuration standards, operational runbooks, recovery procedures, troubleshooting guides, and knowledge articles.
Mentor Level 1 and Level 2 personnel, improve escalation quality, and provide practical knowledge transfer.
Coordinate with vendors, consultants, application owners, security resources, business stakeholders, and IT leadership.
Identify technical debt, availability risks, capacity constraints, configuration weaknesses, and opportunities for automation or standardization.
Cloud, Virtual Desktop, Microsoft 365, and Identity
Administer and troubleshoot cloud services, including virtual machines, storage, networking, remote connectivity, monitoring, logging, backup, disaster recovery, and related services.
Provide advanced support for virtual desktop environments and user profiles, including access, application delivery, printing, performance, capacity, and user experience.
Administer Microsoft 365, including Exchange Online, Teams, Teams Phone, SharePoint Online, OneDrive, Outlook, Microsoft 365 Apps, Copilot, licensing, mailboxes, groups, and permissions.
Support identity and access management, including users, groups, enterprise applications, access policies, sign-in issues, and access troubleshooting.
Assess technical dependencies and business risk before changes and develop implementation, validation, and rollback plans.

Access, Networking, and Endpoint Support
Support secure remote access, DNS, network connectivity, and secure-access platforms.
Troubleshoot TCP/IP, DNS, DHCP, VPN, Wi-Fi, latency, endpoint connectivity, application access, and other network-related issues.
Provide advanced support for Windows devices, endpoint performance, imaging, deployment, printers, scanners, application delivery, endpoint management, and remote-support tools.
Support email security, endpoint protection, managed detection and response, identity security, password management, phishing investigations, suspicious sign-ins, malware alerts, and potential account compromise.
Use PowerShell and approved automation tools for diagnostics, troubleshooting, and process improvement.

Compliance, Data Protection, and Business Applications
Apply least-privilege principles, verify identity before sensitive access changes, and protect confidential client, tax, employee, and firm information.
Maintain awareness of applicable security and compliance requirements, including IRS Publication 4557, the FTC Safeguards Rule, GLBA, SOC 2, GDPR, CCPA/CPRA, and HIPAA when applicable.
Support integrations, secure access, application availability and performance, upgrades, and vendor escalations across the firm's application environment.

Accounting, Tax, Audit, and Firm Applications
Maintain technical knowledge of applications supporting accounting, tax, audit, advisory, document management, workflow, portals, payroll, practice management, electronic signature, PDF, scanning, printing, and remote-work processes.
Support applications including CCH Axcess, CCH Engagement, CCH Workstream, CCH Workflow, Wolters Kluwer applications, Thomson Reuters applications, Inflo, SafeSend, K-1x, SurePrep, QuickBooks, QuickBooks Online, ShareFile, Adobe Acrobat, Adobe Sign, Star Practice Management, CFS Payroll, and related tools and dependencies.
Understand the urgency of tax and audit deadlines, partner and client-impacting issues, secure access, engagement file availability, and business continuity. 5+ years of progressive experience across service desk support, advanced endpoint support, Microsoft 365 administration, secure remote access, business application support, and user-facing technical escalation.

• Demonstrated ability and willingness to handle Level 1 and Level 2 calls and tickets while owning Level 3 escalations, root cause analysis, platform support, documentation, and mentorship.
• Recent hands-on experience with cloud services, virtual desktop platforms, profile management, Microsoft 365, identity services, secure remote access, DNS, Wi-Fi, and production network-dependent support issues.
• Experience performing advanced incident troubleshooting, implementation planning, vendor escalation, documentation, and technical communication in a deadline-driven professional services environment.

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent hands-on technical experience, military technical training, trade school, certifications, or comparable professional experience.
Experience supporting accounting, tax, audit, advisory, financial services, or another regulated and deadline-driven environment.
Relevant Microsoft Azure, Microsoft 365, Microsoft Security, Cisco, CompTIA Security+, CISSP, CISM, ITIL, or comparable certifications are preferred.
Flexibility: Our work-life balance initiatives include generous paid time off, flexible "Dress for Your Day" dress code, telecommuting options, flex-time policies, and summer hours, enhanced by our Floating Summer Friday's program, which allows team members three extra Fridays off during the summer months in addition to their PTO.
Here at Grassi we are dedicated to creating an environment for our team members that is positive, productive, and aligns with our company's high standards of inclusivity, diversity, and equity. We work closely with our DEI Council and Grassi Women's Council to organize events throughout the year to bring the firm together for open dialogue and awareness of global diversity issues. Through our charitable initiative, Grassi Gives Back, we proudly support organizations such as Ronald McDonald House, Toys for Tots, Autism Speaks, Long Island Cares, and many of our nonprofit clients.