Systems Engineer

Responsibilities

• Design and Own Corporate Systems: Take strategic ownership of our corporate technology stack, from budget planning to lifecycle management, procurement, and policy governance. Design, plan, and implement integrated solutions that are secure, scalable, and resilient.
• Engineer for Security and Stability: Evolve our security posture by establishing robust governance frameworks and implementing a zero-trust security model. Proactively tune systems for maximum performance, troubleshoot complex issues, and serve as the engineering lead for corporate operations.
• Automate Everything: Champion an engineering-first approach to corporate IT. Leverage scripting and automation frameworks to eliminate manual work, streamline processes, and improve reliability.
• Manage Identity and Endpoints: Administer our hybrid identity environment (Active Directory, Entra ID) and manage our fleet of company assets through modern MDM platforms. Ensure a strong security posture for all end-user devices.
• Empower Our Users: Serve as the primary technical owner and escalation point for all corporate technology, ensuring our team has a seamless and productive experience.

Qualifications

• Experience: 6–8+ years of experience in systems or infrastructure engineering within enterprise environments.
• Core Competencies: Identity & Directory Services: Strong proficiency in Windows Server, Active Directory, Azure AD/Entra, and DNS/DHCP. Experience with modern IAM/IDP/MFA platforms is a plus. Endpoint Management (MDM): Hands-on experience with MDM platforms like Intune, Jamf, or Workspace ONE, with deep expertise in macOS and Windows system hardening. Network Engineering: Experience managing network infrastructure (switching, routing, wireless) using platforms like Arista and Fortinet. Strong knowledge of firewalls, VPNs, network segmentation, and wireless protocols (EAP-TLS, RADIUS). Cloud Administration: Solid background in managing and securing corporate services within AWS, GCP, or Azure. Security Principles: A solid understanding of cybersecurity, zero-trust principles, and compliance frameworks. Familiarity with Zscaler, CyberArk, or similar tools is preferred. Scripting & Automation: Proven experience with scripting and automation tools to manage systems at scale. Exposure to Terraform or Ansible is a plus.

Benefits

• We Offer: At our firm, our people come first. We are committed to building a culture of collaboration, where we support each other through challenges and celebrate our collective successes. We believe that the strength of a modern workplace lies in its diverse workforce—diverse in ideas, cultures, and experiences. We actively foster this environment and take pride in being an equal opportunity employer. In compliance with New York City’s Pay Transparency Law, the anticipated base salary for this role ranges from $150,000 - $200,000 annually, plus performance bonus, and based on experience and qualifications. Please note, this range excludes other components of total compensation, such as bonuses. We offer competitive compensation packages, 401k matching, gender-neutral parental leave, and comprehensive medical, dental, and vision insurance. While we value flexibility, we believe that in-person collaboration is key to solving complex challenges, which is why we require employees to be in the office 4 days a week. In-office perks include lunch stipends, fully stocked kitchens, happy hours, and a great location with amazing colleagues.