Senior Enterprise Systems Engineer

Position Summary

The Senior Enterprise Systems Engineer designs, implements, secures, and maintains enterprise-level systems, applications, services, and cloud platforms. This role proactively and reactively defends against security threats, troubleshoots and resolves complex technical issues, investigates and mitigates security incidents, and ensures the reliability, security, and performance of enterprise platforms.

Key Responsibilities

• Designs, implements, and optimizes enterprise IT infrastructure services across on-premises and cloud environments, including core identity, platform, and systems management services
• Oversees implementation, management, and optimization of enterprise security and monitoring tools and systems (e.g. antivirus, EDR, ITDR, and FIM platforms)
• Oversees implementation, manages, and enhances privileged access management (PAM) system
• Maintains and enhances security controls to protect against unauthorized access, data loss, and other security threats against the firm’s on-prem infrastructure and cloud-based platforms
• Monitors system performance, troubleshoots complex issues, and ensures high availability of servers, appliances, and applications
• Provides Tier 3 technical support, root cause analysis, and guidance for IT infrastructure, application, and security operations tasks
• Safeguards and governs Microsoft Entra ID and Azure tenants, applying best practices for cloud security and governance
• Led major technology initiatives such as new technologies and solutions, upgrades, migrations, and integrations, recommending improvements to existing systems and processes
• Develops and maintains disaster recovery strategies, documentation, and testing procedures
• Creates and maintains documentation, diagrams, and standard operating procedures for infrastructure systems and processes

Qualifications

• Expert level knowledge of Microsoft Windows Server, Active Directory, Entra ID, and Azure
• Strong working knowledge of virtualization and Microsoft 365
• Expertise in enterprise monitoring and security tooling, such as antivirus, EDR, ITDR, file integrity monitoring, SIEM, and data security platforms
• Strong background in security operations, endpoint security, and incident response
• Advanced understanding of authentication and authorization flows
• Deep understanding of identity and access management and role-based access control concepts
• Good working knowledge of and experience troubleshooting Microsoft technologies, such as SQL, IIS, and SharePoint
• Strong knowledge of and experience with networking concepts, including TCP/IP, DNS, DHCP, VPNS
• Strong knowledge of and experience with single sign-on protocols (SAML, OIDC)
• Good working knowledge of multifactor authentication management
• Strong knowledge of SQL and SSRS and ability to write and optimize queries and reports
• Solid understanding and familiarity with Linux and MacOS systems preferred
• Proficiency in PowerShell; expertise with equivalent scripting/programming languages (Python, Bash, etc.) is a plus
• Strong working knowledge of Microsoft Graph PowerShell and Microsoft Graph API
• Strong knowledge of API programming (REST, JSON, authentication mechanisms)
• Strong working knowledge of automation/orchestration tools, such as System Center Orchestrator, Azure Automation)
• Relevant Microsoft certifications: Azure Administrator Associate, Azure Security Engineer Associate and Identity and Access Administrator Associate, or equivalent are preferred
• Industry certifications: CEH, CISSP, or equivalent are preferred