Systems Engineer

The Systems Engineer plays a critical role in maintaining the security, stability, and performance of our enterprise IT infrastructure across both Microsoft and Apple environments. This position owns the day-to-day administration of Microsoft 365, Entra ID, and Intune, alongside JAMF-based management of our Apple device fleet, ensuring that identity, access, and endpoint compliance are consistently secure and well maintained. Beyond hands-on systems administration, this role provides advanced Tier 2/3 support, leads troubleshooting for complex system issues, and follows disciplined change management practices to keep production environments stable and reliable.

• →Administer and maintain Microsoft 365 services using Microsoft Admin Center and Entra ID (formerly Azure AD).
• →Manage user identities, access policies, and Single Sign-On (SSO) configurations
• →Oversee Microsoft Teams configuration, integration, support, and automation
• →Implement and manage device compliance and security policies using Microsoft Intune
• →Administer JAMF for Apple device management, including deployment, configuration, and compliance
• →Provide Tier 2/3 support for client systems, including Windows and macOS environments
• →Monitor system performance, troubleshoot issues, and ensure high availability of IT services
• →Collaborate with cross-functional teams to support IT projects and infrastructure upgrades
• →Maintain documentation for systems, processes, and configurations
• →Ensure compliance with IT security policies and best practices
• →Follow change management procedures for all production system updates, including testing, approval, and rollback planning
• →Participate in an on-call rotation to respond to critical incidents and after-hours system alerts
• →Support disaster recovery and business continuity planning, including regular backup verification and recovery testing
• →Conduct periodic access reviews and audits to maintain least-privilege access across systems

• 4+ years of experience in IT systems administration and/or systems engineering roles across Windows and Apple environments
• 3+ years of strong hands-on experience with Microsoft Admin Center, Entra ID, and Microsoft Intune
• Proficiency in managing Microsoft Teams and configuring SSO solutions
• 3+ years of experience with JAMF for Apple device lifecycle management
• Solid history of client management, endpoint security, and compliance
• Familiarity with scripting and automation (e.g., PowerShell, Bash)
• Working knowledge of networking fundamentals (DNS, DHCP, VPN, firewalls, and TCP/IP)
• Understanding of IT security frameworks and best practices (e.g., least privilege, MFA, patch management, zero trust principles)
• Experience with backup, disaster recovery, and business continuity procedures
• Experience using a ticketing/ITSM system to track, prioritize, and resolve incidents and requests
• Excellent problem-solving skills and attention to detail
• Strong communication and documentation abilities
• Ability to work independently and manage multiple priorities
• Passion for continuous learning and staying current with emerging technologies

• Relevant certifications such as Microsoft Certified: Modern Desktop Administrator, Microsoft 365 Certified: Endpoint Administrator Associate, or JAMF Certified Tech
• Security-related certification (e.g., CompTIA Security+)
• ITIL Foundation certification or familiarity with ITIL service management practices
• Experience with cloud platforms such as Azure or AWS
• Experience supporting a hybrid or fully remote workforce
• Prior experience in a regulated industry (e.g., healthcare, finance) with associated compliance requirements (e.g., HIPAA, SOC 2)

• Primarily in a professional office or home office environment, with regular use of computer systems, security monitoring platforms, and forensic analysis tools throughout the workday
• Regularly required to sit for extended periods while using a computer, keyboard, and mouse to monitor security systems, investigate incidents, and maintain documentation
• Must be able to concentrate for extended periods while analyzing complex security data, often under pressure during active incident response situations that require quick, accurate decision-making
• Specific vision abilities required include close vision and the ability to adjust focus for extended periods of screen-based work, including reviewing logs, audit reports, and forensic data
• Must be able to communicate clearly and effectively via phone, video conference, and email with IT staff, department leaders, and third-party vendors, including the ability to explain technical security concepts to non-technical audiences
• Requires quarterly travel to company locations as needed, which may include time-sensitive travel in response to a security incident requiring on-site presence
• Fast-paced environment requiring adaptability and the ability to shift quickly from planned project work to urgent incident response when a security event occurs, sometimes outside of standard business hours