Senior Enterprise Systems Engineer

Position Summary

The Senior Enterprise Systems Engineer designs, implements, secures, and maintains enterprise-level systems, applications, services, and cloud platforms. This role proactively and reactively defends against security threats, troubleshoots and resolves complex technical issues, investigates and mitigates security incidents, and ensures the reliability, security, and performance of enterprise platforms.

Key Responsibilities

• Designs, implements, and optimizes enterprise IT infrastructure services across on-premises and cloud environments, including core identity, platform, and systems management services
• Oversees implementation, management, and optimization of enterprise security and monitoring tools and systems (e.g. antivirus, EDR, ITDR, and FIM platforms)
• Oversees implementation, manages, and enhances privileged access management (PAM) system
• Maintains server security and application, system, and data access controls, vulnerability management, and implements security best practices and recommendations, to ensure compliance with security policies and standards, and to protect the firm's data and assets
• Plans and implements system and application security updates and patches to remediate vulnerabilities in collaboration with IT, compliance, and vulnerability management teams
• Monitors system performance, troubleshoots complex issues, and ensures high availability of servers, appliances, and applications
• Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasks
• Secures and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governance
• Identifies opportunities for automation to improve system reliability and reduce manual effort
• Develops and maintains automation and scripting solutions to automate administrative, security-related, and routine tasks and reporting to improve efficiency and reduce operational overhead
• Leverages APIs for integration, automation, and enhancement of monitoring and management across systems and tools
• Leads IT infrastructure projects, migrations, upgrades, and new technology initiatives in collaboration with cross-functional teams and external partners
• Drives major technology initiatives such as new technologies and solutions, upgrades, migrations, and integrations, recommending improvements to existing systems and processes
• Maintains up-to-date knowledge of emerging trends and best practices in infrastructure modernization, security, monitoring, cloud platforms, and AI model infrastructure security
• Creates and maintains documentation, diagrams, and standard operating procedures for infrastructure systems and processes
• Mentors teammates and contributes to skill development, knowledge sharing, and best practice adoption across the team

Qualifications

• Expert level knowledge of Microsoft Windows Server, Active Directory, Entra ID, and Azure
• Strong working knowledge of virtualization and Microsoft 365
• Expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platforms
• Strong background in security operations, endpoint security, and incident response
• Advanced understanding of authentication and authorization flows
• Deep understanding of identity and access management and role-based access control concepts
• Good working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePoint
• Strong knowledge of and experience with networking concepts, including TCP/IP, DNS, DHCP, VPNS
• Strong knowledge of and experience with single sign-on protocols (SAML, OIDC)
• Good working knowledge of multifactor authentication management
• Strong knowledge of SQL and SSRS and ability to write and optimize queries and reports
• Solid understanding and familiarity with Linux and MacOS systems preferred
• Proficiency in PowerShell; expertise with equivalent scripting/programming languages (Python, Bash, etc.) is a plus
• Strong working knowledge of Microsoft Graph PowerShell and Microsoft Graph API
• Solid understanding and experience with API programming (REST, JSON, authentication mechanisms)
• Strong working knowledge of security best practices and compliance standards
• High degree of attention to detail and accuracy
• Ability to document and maintain security and monitoring policies, procedures, and configurations
• Ability to multitask efficiently yet prioritize and organize competing work demands
• Demonstrated integrity and commitment to strict ethical standards in all professional dealings
• Proven record of reliability and dependability
• Ability to work flexible hours and be on-call