Systems Engineering Analysis, Senior

We’re hiring a Senior Systems Engineer as WRA builds its new internal IT & Cybersecurity functions. We are actively transitioning from an MSP model to a fully in-house model, and this role will operate under the guidance of our Director of Information Technology & Cybersecurity. This is also an excellent role for someone looking to refine their cybersecurity skillset. In this role, you will act as the primary engineer for our cloud and SaaS platforms, including Microsoft 365, Azure infrastructure, Entra ID, endpoint management, and a variety of general platforms used by each of our departments. Afterwards, your general duties will shift to engineering Azure Virtual Desktop, Microsoft 365/Entra ID, endpoint management and building automations.
Our 100-person workforce is highly distributed, and your priority is engineering our tools to enable our staff to do their best work securely, efficiently and consistently.
This position may be performed fully remotely by candidates located in California, Colorado, Arizona, or Oregon but travel to our offices may be necessary 1 – 2 times per year on average.
Cloud Infrastructure

• Own our Azure environment, including Azure Virtual Desktop and virtual servers, which enables our CAD, GIS and Accounting teams. This includes image management, patching, right-sizing, scaling and scheduling, backups, performance optimization, and software versioning.
• Deploy actionable virtual machine monitoring to measure performance (CPU, GPU, memory, disk and session latency), idle capacity and active use time, and implement alerts to monitor these metrics.
• Perform root-cause analysis of virtual infrastructure concerns and propose solutions.
• Administer our Microsoft 365 environment, including Exchange, SharePoint & OneDrive, Teams and data governance.
• Co-manage our SaaS and cloud infrastructure backup platforms, including for Microsoft 365, Azure virtual machines and other platforms.

Maintain SCIM provisioning across our SaaS applications.

Manage our Windows and limited Mac fleet by administering our endpoint management platform, including device enrollment, Autopilot, compliance & configuration policies, app deployments and system patching.

~ Manage our mobile device configuration and application policies.

Automate IT processes using PowerShell, Microsoft Graph and other platforms to reduce or eliminate manual administrative tasks and to ensure consistent quality.

~ Collaborate with your Director and other stakeholders to improve our implementation of Claude AI, including Connector configurations, Skills and Design.

Partner with your Director to build new security operations capabilities from product selection and concept trials through implementation and administration.

• Alongside your Director, administer our security stack, including our managed detection and response platform, email security, DNS and web filtering, and vulnerability management.
• General IT Support
• Work with our IT Operations Specialist as needed and serve as a final escalation point for complex IT Support requests.
• Participate in an on-call rotation for critical but rare IT outages and other emergent duties.

Maintain runbooks, architecture diagrams, and system configuration documentation. At least 6 years of direct experience supporting a hybrid or remote workforce of at least 50 employees as an engineer.

• Comfortable working fully remote with travel to our offices in California as described above.
• Strong history of managing mission-critical Azure Virtual Desktops and application-specific servers.
• Deep, hands-on experience with Microsoft 365 and Entra ID, including conditional access, provisioning, identity governance and general administration.
• Experience managing a distributed fleet of endpoints and mobile devices using Intune, NinjaOne, WorkspaceOne or comparable tools.
• Proven track record of utilizing PowerShell to administer Microsoft 365 and Azure.

A zero-trust security mindset demonstrated through the methods you provide IT service and engineer solutions.

~ Excellent customer service skills and the ability to translate complex technical issues into plain language that anyone can understand.

Able to perform physical duties that may include lifting up to 50 lbs, climbing ladders indoors, crawling under furniture and reaching behind wall-mounted equipment.

Bonus Points for experience with or having:

• Supporting CAD and GIS applications, such as AutoCAD, Civil 3D, ArcGIS and spatial datasets.
• Supporting Egnyte, Deltek VantagePoint, Elevia or markup tools like Bluebeam and Adobe Acrobat.
• Microsoft certifications, including (but not limited to) AZ-104, AZ-140, AZ-305, AZ-700, SC-200, SC-300, SC-401, MS-102 or MD-102.
• Executing platform migrations using third-party tools and/or PowerShell.
• Integrating IAM automations into ITSM platforms such as Jira, Freshservice, Zendesk or SolarWinds.
• Supporting the implementation of data retention policies.
• Administering UniFi Network and Protect.

\n WRA has an established internal leveling system for our staff that maps to salary bands that have been informed by market data. WRA’s an employee-owned environmental consultancy. Our clients and partners hire us because we’re skilled at navigating through challenging projects involving wildlands, parks, community spaces, and infrastructure. We bring over four decades of expertise, long-standing relationships, and connections to our local communities to make sure that projects are pursued in responsible ways where both people and the environment thrive.
We invest in systems, processes, and employee programs to support our staff’s collective engagement and success. We are committed to building a diverse, equitable, and inclusive work environment, and we have developed flexible policies, internal practices, and are investing in programs that prioritize learning and sustainability. We believe that by creating an exceptional workplace, our employees will be able to do their best work and be able to meaningfully contribute to the sustainability of the environment and the communities in which we live.
We recruit, employ, train, compensate and promote regardless of race, religion, color, national origin, gender, sexual orientation, disability, age, veteran status, and other protected status as required by applicable law.