Enterprise Systems Engineer

You will design, deploy, and support enterprise infrastructure across Windows Server, VMware, Azure, and Microsoft 365. You will administer core infrastructure services, manage virtualization platforms, automate operations, strengthen security, maintain observability, ensure compliance, support disaster recovery and backups, resolve complex incidents, document processes, collaborate on technical initiatives, and mentor junior engineers. You will also participate in on-call rotations and weekend maintenance activities.

Responsibilities

• Design and deploy infrastructure solutions across Windows Server, VMware vSphere, Azure, and Microsoft 365.
• Align infrastructure with business objectives, regulatory requirements, and security baselines.
• Administer and troubleshoot Active Directory, DNS, DHCP, GPO, DFS, File Services, and SQL Server.
• Manage VMware vSphere, Horizon VDI, and Azure Virtual Desktop platforms.
• Manage PKI and certificate lifecycles.
• Harden systems using Microsoft Defender, Conditional Access, and Rights Management.
• Automate operations using PowerShell, Graph API, Ansible, and SCCM.
• Build and maintain observability dashboards.
• Create reusable automation scripts and runbooks.
• Maintain hardware, software license, and configuration records.
• Ensure audit readiness and compliance with SOX and other regulatory frameworks.
• Ensure high availability and disaster recovery readiness.
• Implement and manage Rubrik backup strategies and validate RTO and RPO through testing.
• Collaborate on deployments, upgrades, and architectural decisions.
• Mentor junior team members and conduct knowledge-sharing sessions.
• Participate in on-call rotations and weekend maintenance windows.
• Evaluate emerging technologies and recommend strategic improvements.
• Track technical debt and propose prioritized remediation plans.

Requirements

• At least 3 years of experience in an enterprise infrastructure role.
• Experience in a regulated industry, preferably financial services.
• Strong knowledge of Microsoft 365, Endpoint Manager, Exchange Online, Microsoft Defender for Endpoint, Entra ID, Conditional Access Policies, and Microsoft Defender for Cloud Apps.
• Extensive expertise in Windows Server 2019, 2022, and 2025; Active Directory; DNS; DHCP; GPO; DFS; File Services; and SQL Server.
• Strong knowledge of Rubrik or similar backup solutions.
• Proficiency with PowerShell, Graph API, automation, configuration management, and SCCM.
• Strong knowledge of VMware vSphere, Horizon VDI, and Azure Virtual Desktop.
• Understanding of certificate management, deployment, and architecture.
• Strong analytical, stakeholder management, and cross-team collaboration skills.
• Excellent written and verbal communication skills.
• Fluency in written and spoken English.
• Experience working in a follow-the-sun or globally distributed team model.
• A bachelor's degree in Computer Science, Information Technology, Engineering, or a related field is preferred; equivalent professional experience and relevant certifications may substitute.
• Willingness to participate in on-call rotations and weekend maintenance activities.