Systems Engineer

Essential Duties and Responsibilities: List the job's essential or most important functions and responsibilities. Include all important aspects for the job whether performed daily weekly, monthly, or annually and any that occur at irregular intervals. Administer, secure, and maintain Microsoft Entra ID, including identity lifecycle, Conditional Access, MFA, Privileged Identity Management (PIM), app registrations, enterprise applications, and SSO integrations for third-party SaaS solutions. Administer and maintain hybrid identity between on-premises Active Directory and Entra ID, including Entra Connect / Cloud Sync, hybrid join, and directory synchronization health. Administer Active Directory Domain Services, Group Policy, DNS, DHCP, and Windows Server systems across MBI sites; maintain AD health, replication, and a tiered administrative access model. Administer Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, and Teams; manage tenant configuration, licensing, mail flow, retention, and collaboration governance. Manage endpoint configuration and compliance through Microsoft Intune, including Windows Autopilot, configuration profiles, compliance policies, application deployment, and patch management. Design, provision, and manage AWS infrastructure (EC2, VPC, Transit Gateway, IAM, S3, RDS, Systems Manager, AWS Backup, Organizations) to ensure standardization, security, cost-efficiency, and supportability. Design, provision, and manage Azure infrastructure (Virtual Machines, Virtual Networks, Storage, Azure SQL, Key Vault, Azure Monitor, Azure Backup, Management Groups and Azure Policy) and Microsoft Fabric (capacities, workspaces, OneLake, and access governance) to ensure standardization, security, cost-efficiency, and supportability. Implement and maintain identity federation between Entra ID and AWS (IAM Identity Center) and other platforms, applying least-privilege and role-based access principles. Develop and maintain infrastructure as code using Terraform, CloudFormation, Ansible, or similar tools, and contribute to CI/CD pipelines (GitHub Actions, AWS CodePipeline) for infrastructure changes. Develop automation scripts and tools (PowerShell, Microsoft Graph, AWS CLI/SDK, Python) for provisioning, configuration management, and recurring administrative tasks. Monitor system health, performance, and capacity, including logging, metrics, and alerting (CloudWatch, Entra sign-in and audit logs, M365 service health); drive root-cause resolution for recurring issues. Partner with the security team to implement and maintain security controls, hardening baselines (CIS, Microsoft Secure Score), vulnerability remediation, and audit and regulatory compliance requirements, including SOX IT general controls. Test, implement, and maintain backup and disaster recovery systems for on-premises, AWS, and Microsoft 365 workloads, and participate in DR exercises. Support network and security infrastructure as it relates to systems -- firewalls, VPNs, site-to-site and AWS connectivity -- in coordination with network and security engineers. Create and maintain documentation, runbooks, standards, and architecture diagrams, and work closely with platform, development, security, and support teams to optimize platform performance. Communicate with users, technical teams, and vendors regarding system implementations, changes, and interruptions, following established change management processes. Serve as an escalation point for the service desk and support teams, and provide technical guidance on identity, M365, and cloud issues. Participate in the after-hours on-call rotation. Other duties may be assigned.

Qualifications: BS or AA degree in Computer Science, Information Systems, Business or an equivalent combination of education and experience Microsoft certifications (MS-102 Microsoft 365 Administrator, SC-300 Identity and Access Administrator) and/or AWS certifications (Solutions Architect - Associate, CloudOps Engineer - Associate) preferred.6+ years supporting, troubleshooting and maintaining IT systems -- servers (physical, virtual, and cloud), client endpoints, and enterprise applications 4+ years of experience administering Active Directory, Group Policy, DNS, DHCP, and Windows Server systems 4+ years of experience administering Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, and Teams 4+ years of experience administering Microsoft Entra ID, including Conditional Access, MFA, hybrid identity (Entra Connect), and SSO (SAML/OIDC)3+ years supporting and administering AWS infrastructure (EC2, VPC, IAM, S3) -- AWS required, Azure preferred 3+ years of experience with endpoint management using Intune 2+ years of experience scripting and automating with PowerShell; Microsoft Graph API and Python experience preferred 2+ years of experience configuring and maintaining backup and disaster recovery systems/processes 1+ years of experience with Terraform, CloudFormation, Ansible, or similar IaC tools. Experience with GitHub Actions or AWS CodePipeline preferred Strong working knowledge of networking fundamentals -- TCP/IP, DNS, VPN, LAN/WAN, and firewalls (Fortinet and Cisco preferred). AWS Transit Gateway preferred. Experience supporting audit and compliance requirements (e.g., SOX ITGC user access reviews) preferred General understanding of business process, application logic, development environment, databases, data management and infrastructure capabilities and constraints Demonstrated ability to think strategically about business, products and technical challenges Strong verbal and written communication skills, with an ability to express complex technical concepts in business terms Must be able to lead meetings and discuss implications of systems implementations, deployment and changes Solid teamwork and interpersonal skills and ability to communicate with customers, associates, and management Strong problem-solving and conceptual skills; experience in manufacturing or multi-site environments preferred