IT Engineer

Infrastructure & Systems Engineering

• Engineer, deploy, and continuously optimize enterprise infrastructure spanning on-premises systems, networking, AWS, Azure, and Microsoft 365.
• Develop and maintain infrastructure automation leveraging IaC technologies such as Terraform.
• Design and implement scalable, resilient infrastructure with an emphasis on availability, performance, security, and automation.
• Architect and maintain Intune endpoint management; including device provisioning, configuration management, application deployment, patching, compliance policies, and endpoint lifecycle automation.
• Expand and operationalize the organization's AI Center of Excellence through engineering initiatives involving automation, machine learning, Retrieval-Augmented Generation (RAG), etc.
• Evaluate emerging infrastructure and AI technologies and engineer proof-of-concept solutions to determine their viability for enterprise adoption.

Cyber & Risk Reduction

• Design and continuously improve security architecture and technical controls across endpoints, identity, networks, and SaaS applications ensuring alignment with CIS, NIST CSF, or SOC 2 frameworks.
• Perform technical security assessments, develop technical remediation strategies, and threat risk analysis to identify vulnerabilities, attack paths, control gaps, and opportunities for risk reduction.
• Schedule and facilitate Security Awareness Training to promote cybersecurity best practices.
• Arcitect, implement, manage, and maintain Zero Trust security controls across identity, endpoints, applications, and network infrastructure.
• Engine security automation and monitoring capabilities to improve detection, response, compliance, and operational visibility.
• Develop and maintain technical security baselines, configuration standards, and control validation processes.

SaaS & IT Operations

• Optimize the enterprise SaaS ecosystem, including integration architecture, provisioning, identity integration, SSO, lifecycle management, and access governance.
• Identify opportunities to eliminate manual IT processes through automation, workflow engineering, and self-service capabilities.
• Cooordinate device repairs and maintenance with external vendors and service providers.
• Design and implement SSO and automated identity provisioning integrations using Microsoft Entra ID and industry-standard authentication protocols including OAuth 2.0 and OIDC.
• Engineer automated HelpDesk and IT service workflows to reduce operational overhead and improve resolution times.
• Provide L1/L2 technical support as needed.
• Diagnose complex infrastructure and endpoint issues through systematic root cause analysis and implement permanent corrective solutions.
• Support telephony and VoIP platforms, including call routing, endpoint configuration, integrations, and troubleshooting.

Qualifications

• Deep proficiency with Identity & Access Management (IAM) to include familiarity with authentication protocols OIDC and OAuth2.
• Experienced with Microsoft Windows Server 2016 and newer, and Windows 11.
• Extensive administration experience with Entra AD, Intune, Exchange, Defender, GPOs, DNS, DHCP and Purview.
• Understanding of telephony and VoIP systems, including call routing and endpoints (Sangoma, RingCentral, etc.).
• Strong understanding of ITIL/ITSM framework.
• Strong problem-solving skills with the ability to troubleshoot technical issues effectively and efficiently.
• Ability to work additional hours as needed.