Sr. IT Systems Engineer

General Summary

The Senior IT Systems Engineer is responsible for the architecture, design, implementation, optimization, and operational support of enterprise infrastructure solutions in a Microsoft Azure cloud environment. This role provides technical leadership and advanced engineering expertise in Microsoft Azure, Active Directory, Microsoft Entra, Okta, Cisco Duo, Windows Server, enterprise networking, and hybrid cloud services.

Major Duties/Responsibilities

• Architect, design, implement, and support enterprise cloud solutions utilizing Microsoft Azure services including Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), storage, networking, backup, disaster recovery, monitoring, security, and identity services.
• Lead Azure modernization, optimization, governance, and cloud transformation initiatives.
• Develop and maintain Azure landing zones, governance standards, subscription management strategies, and cloud security best practices.
• Architect and administer Azure networking services including Virtual Networks, VPN Gateways, ExpressRoute, Azure Firewall, Application Gateways, Network Security Groups, Load Balancers, and connectivity solutions.
• Architect, implement, and support enterprise Identity and Access Management (IAM) solutions utilizing Active Directory, Microsoft Entra ID, Okta, and Cisco Duo.
• Design and maintain hybrid identity architectures supporting cloud and on-premises environments.
• Implement and administer Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access policies, adaptive authentication, and identity governance controls.
• Architect, implement, and support Windows Server environments, including DNS, DHCP, Certificate Services, file services, and core infrastructure components.
• Architect, implement, and support Cisco Meraki networking solutions, including:Meraki MX Security AppliancesMeraki MS SwitchingSD-WAN TechnologiesSite-to-Site VPN ConnectivityCloud-Managed Network Monitoring and Administration
• Manage and support physical and virtual network infrastructure, ensuring security, high availability, performance, and reliability.
• Maintain accountability for infrastructure availability, disaster recovery readiness, business continuity planning, and operational excellence.
• Support Citrix technologies as required for application delivery and legacy platform support.

Basic Requirements

• Bachelor's degree in Information Technology, Computer Science, Engineering, or equivalent combination of education, certifications, and experience.
• 7+ years of experience supporting engineering enterprise infrastructure environments.
• 5+ years of hands-on experience architecting, deploying, and supporting Microsoft Azure solutions.
• Strong experience with Azure services including:Azure Virtual MachinesAzure StorageAzure BackupAzure Site RecoveryAzure NetworkingAzure MonitorAzure Security ServicesAzure Identity Services.
• 5+ years of experience supporting Active Directory within complex enterprise environments.
• 5+ years of experience creating, managing, and deploying Active Directory Group Policy Objects (GPOs).
• Demonstrated experience performing Active Directory domain controller upgrades, migrations, replication troubleshooting, and overall domain health management.
• Experience implementing and supporting Microsoft Entra ID (Azure AD), hybrid identity solutions, and cloud authentication services.
• 5+ years of experience supporting Identity and Access Management (IAM) platforms.
• Experience implementing and administering Okta and Cisco Duo authentication solutions.
• Strong understanding of authentication and identity protocols including LDAP, Kerberos, SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience configuring Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and identity lifecycle management processes.
• Strong experience administering Windows Server operating systems and enterprise infrastructure services.
• Experience supporting Cisco Meraki networking platforms including security appliances, switching, wireless networking, SD-WAN, VPN technologies, and cloud-managed networking.
• Strong networking knowledge including:Routing and SwitchingVLAN ConfigurationWAN TechnologiesTCP/IPDNSDHCPNetwork SecurityVPN Technologies.
• Experience utilizing PowerShell and automation tools for systems administration and infrastructure management.
• Extensive experience troubleshooting and resolving complex infrastructure, networking, identity, and cloud-related issues.
• Strong analytical and independent problem-solving abilities.
• Excellent written, verbal, and presentation communication skills.
• Ability to lead technical teams and successfully manage engineering projects and initiatives.
• Proven ability to collaborate effectively with business stakeholders, vendors, security teams, and IT leadership.

PREFERRED/DESIRABLE QUALIFICATIONS

• Experience within the Financial Services, Banking, or Consumer Finance industry.
• Microsoft Azure certifications such as:Azure Administrator Associate (AZ-104)Azure Network Engineer Associate (AZ-700)Azure Solutions Architect Expert (AZ-305)
• Okta Certified Professional, Administrator, or Consultant certification.
• Cisco Meraki certifications (CMNA, ECMS, or equivalent).
• Experience with Infrastructure as Code (IaC) tools such as Terraform.
• Experience with Microsoft Intune and Endpoint Management solutions.
• Experience administering Microsoft 365 services and security technologies.
• Experience with disaster recovery, business continuity, and high-availability architectures.
• Experience with enterprise monitoring and observability platforms.