Senior Systems Engineer

This is a fully remote position, open to applicants in Arizona, +3 more states.

📋 Description

• Develop WRA’s new internal IT and cybersecurity capabilities while shifting from an MSP model to an in-house framework.

• Serve as the lead engineer for cloud and SaaS platforms, including Microsoft 365, Azure, Entra ID, endpoint management, and departmental applications.

• Implement new tools and facilitate the migration of those currently utilized by the MSP.

• Design Azure Virtual Desktop, Microsoft 365/Entra ID, endpoint management, and automation solutions.

• Oversee Azure Virtual Desktop and virtual servers, encompassing image management, patching, right-sizing, scaling, scheduling, backups, performance enhancement, and software version control.

• Establish monitoring and alert systems for virtual machine performance, capacity, usage, and session latency.

• Conduct root-cause analyses and propose solutions for virtual infrastructure challenges.

• Manage Microsoft 365 administration, including Exchange, SharePoint, OneDrive, Teams, and data governance.

• Collaborate with the Director and specialized departments to ensure tools are properly sized, configured, and performing optimally.

• Co-manage SaaS and cloud infrastructure backup systems.

• Administer Entra ID and SSO, including conditional access, authentication, dynamic groups, and guest access governance.

• Oversee identity lifecycle automations for onboarding, offboarding, and role modifications.

• Maintain SCIM provisioning across SaaS applications.

• Manage Windows and limited Mac endpoints, including enrollment, Autopilot, compliance/configuration policies, app deployments, and patching.

• Administer mobile device configuration and application policies.

• Automate IT processes utilizing PowerShell, Microsoft Graph, and other platforms.

• Enhance the implementation of Claude AI, focusing on connector configurations, skills, and design.

• Build security operations capabilities from product selection through to implementation and administration.

• Manage tools for detection and response, email security, DNS/web filtering, and vulnerability management.

• Engage in incident response, investigations, root-cause analyses, and technical containment efforts.

• Fortify infrastructure for compliance with CMMC and NIST SP 800-171 standards.

• Act as the final escalation point for complex IT support requests.

• Participate in an on-call rotation for rare critical outages.

• Keep runbooks, architecture diagrams, and system configuration documentation up to date.

• Adhere to industry-standard change management practices.

• Work under the supervision of the Director of Information Technology & Cybersecurity.

⛳️ Requirements

• Minimum of 6 years of direct experience supporting a hybrid or remote workforce of at least 50 employees in an engineering role.

• Comfortable working fully remotely while traveling to company offices as needed.

• Proven history of fulfilling responsibilities in a high-trust position.

• Strong experience in managing mission-critical Azure Virtual Desktops and application-specific servers.

• Extensive hands-on experience with Microsoft 365 and Entra ID, covering conditional access, provisioning, identity governance, and general administration.

• Experience in managing distributed endpoints and mobile devices using Intune, NinjaOne, WorkspaceOne, or similar tools.

• Proven ability to utilize PowerShell for administering Microsoft 365 and Azure environments.

• A zero-trust security mindset.

• Exceptional customer service skills with the capability to articulate complex technical issues in straightforward terms.

• Ability to lift up to 50 lbs, climb indoor ladders, crawl under furniture, and reach behind wall-mounted equipment.

• Bonus: Experience in supporting CAD/GIS applications, Egnyte, VantagePoint, Elevia, Bluebeam, Adobe Acrobat, Microsoft certifications, CMMC, NIST SP 800-171, CCPA, SOC 2, ITSM, ITIL, platform migrations, IAM automations, data retention policies, or UniFi Network and Protect.

🏝️ Benefits

• Employee-owned company.

• Flexible policies.

• Opportunities for learning and professional development.

• Employee programs focused on sustainability.

• Policies that support family priorities and promote healthy, balanced lives.

• Fully remote work available within California, Colorado, Arizona, or Oregon.

• Average travel to company offices 1–2 times per year.