Senior Systems Engineer

This is a fully remote position, open to applicants in Sri Lanka.

📋 Description

• Serve as the top-level technical escalation point for Level 1–3 engineers.

• Lead the root cause analysis for intricate infrastructure and cloud-related issues.

• Provide mentorship and guidance to technical team members.

• Create and uphold technical standards, procedures, and best practices.

• Review and authorize technical solutions and project designs.

• Design, implement, and enhance Microsoft 365 environments.

• Manage projects involving Microsoft 365, Entra ID, Intune, security, SharePoint, Teams Phone, and Azure.

• Implement and refine Zero Trust security frameworks.

• Propel automation initiatives utilizing PowerShell and Power Platform.

• Design and support enterprise-grade networking environments.

• Configure and troubleshoot firewalls, routing, switching, VLANs, VPNs, network security, WAN, and internet connectivity.

• Oversee architecture reviews and network enhancement initiatives.

• Provide advanced support for Ubiquiti, Sophos, and other networking technologies.

• Conduct security assessments and vulnerability reviews.

• Design and implement cybersecurity controls and remediation strategies.

• Assist in compliance with relevant security frameworks and cyber insurance requirements.

• Aid in incident response and security investigations.

• Implement and manage SIEM and security monitoring solutions.

• Lead the design and execution of complex infrastructure and cloud projects.

• Engage in solution scoping and pre-sales activities.

• Identify technological opportunities and enhancements with management.

• Ensure projects are executed to specification and high standards.

• Contribute to solution architecture and strategic technology planning.

• Maintain technical documentation, diagrams, as-builts, knowledge articles, SOPs, project updates, and service records.

• Drive continuous service improvement and enhance service quality, operational efficiency, security, and technical standards.

• Act as a trusted technical advisor to clients.

• Participate in technical strategy meetings and client reviews.

• Translate technical solutions into clear business outcomes.

• Uphold a high standard of customer service and professional conduct.

⛳️ Requirements

• Over 10 years of experience in the IT industry, including more than 5 years in an MSP environment supporting multiple clients.

• Advanced experience in Microsoft 365 administration and architecture.

• Strong hands-on expertise with Microsoft Entra ID, Intune, Azure, Microsoft operating systems, and cloud infrastructure.

• Advanced capabilities in networking and firewall administration.

• Experience with enterprise Wi-Fi, network infrastructure, VPNs, routing, switching, VLANs, WAN, and internet connectivity.

• Deep understanding of endpoint security, backup and disaster recovery, and cybersecurity principles.

• Experience with PowerShell scripting and automation.

• Proven ability to design, troubleshoot, and enhance complex infrastructure environments.

• Experience in implementing security controls and remediation strategies.

• Familiarity with Essential Eight, CIS Controls, NIST, and cyber insurance requirements.

• Experience with security monitoring, incident response, and security investigations.

• Experience with Microsoft Sentinel, SIEM, Microsoft Defender, Azure Virtual Desktop, and Cloudflare is highly desirable.

• Familiarity with Ubiquiti UniFi and Sophos Firewall is advantageous.

• Familiarity with Microsoft Teams Phone is beneficial.

• Experience with ConnectWise Manage, ConnectWise Automate, IT Glue/IT Boost, and ITIL is desirable.

• Proven experience in leading technical initiatives and mentoring engineers.

• Strong client-facing and stakeholder management skills.

• Ability to convey technical concepts to both technical and non-technical audiences.

• Strong analytical and problem-solving abilities.

• High attention to detail with a proactive, accountable, and results-oriented approach.

• Excellent organizational skills and the ability to work independently while making sound technical decisions.

• Commitment to continuous learning and professional development.

• Preferred certifications include Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Azure Solutions Architect Expert, Microsoft Certified: Cybersecurity Architect Expert, Microsoft Certified: Security Operations Analyst, CCNA, CCNP, CISSP, CISM, CEH, or ITIL Foundation or higher.

🏝️ Benefits

• Medical insurance from day one for you + spouse (or parents if unmarried).

• Generous OPD coverage for doctor visits and all your medical needs.

• Home office setup allowance.

• Internet allowance.

• Gym & wellness allowance.

• Regular team events & engagement activities.

• Diji Assist mental health & counseling support.

• Reimbursement for industry certifications.

• Open-door culture for ideas and feedback.

• Flexible work options – home or office.

• Rewards & recognition.

• Christmas and financial year-end parties.