Senior System Engineer

Job Summary/Objective

The Senior Systems Engineer is a hands-on infrastructure role responsible for the design, administration, and continuous improvement of OEC's corporate IT environment. Scope spans Windows Server, Microsoft 365 and Entra ID, identity and access management, and endpoint management, with active expansion into IaC and AWS. Security is foundational — every system, configuration, and access decision is approached through a security lens. This person operates independently, holds a high standard for documentation, and actively contributes to team growth.

Key Responsibilities & Duties(essential to the job)

1. Administer and maintain Windows Server and endpoint environments, including patching, configuration, and root-cause analysis.
2. Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra ID, Intune) and maintain Conditional Access posture.
3. Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy, enrollment, and compliance enforcement.
4. Maintain DNS, DHCP, SMTP, file services, and Active Directory (GPO, ADUC).
5. Contribute to IaC adoption — reviewing, testing, and authoring configurations as skills develop.
6. Support and expand AWS cloud infrastructure deployments.
7. Read, modify, and troubleshoot PowerShell scripts; AI-assisted authoring (Copilot, Claude) is available and encouraged.
8. Identify access control gaps, configuration risks, and hardening opportunities proactively.
9. Author and maintain runbooks, architecture diagrams, and troubleshooting guides; track work in Jira and JSM.
10. Participate in on-call rotation for after-hours system emergencies.

Education

A bachelor's degree from an accredited college or university is required, with a focus in Information Technology, Computer Science, or related discipline. In the absenceof a degree, equivalent work experience directly related to the key responsibilities of the role will be considered as a substitute for the degree.

Experience, Skills and Key Competencies

At least 10 years in systems engineering or IT infrastructure, with demonstrated experience administering Microsoft 365, Windows Server, enterprise identity platforms (Active Directory, Entra ID), and endpoint management (Intune, SCCM, or Jamf). Ability to read and modify PowerShell is required. Modern Microsoft certifications (e.g., MS-102, Azure Administrator) are preferred.

Must also be able to demonstrate the following skills and abilities:

Required Skills

• Windows Server and Active Directory — GPO, ADUC, DNS, DHCP, SMTP, patching, and domain services
• Microsoft 365 — Exchange Online, SharePoint, Teams, Entra ID, Intune, Conditional Access
• Endpoint management — Intune, SCCM/Autopatch, and/or Jamf
• Virtualization — VMware vSphere/ESXi or Hyper-V
• Identity and access management — SSO/IdP, MFA, RBAC, and privileged access concepts
• PowerShell — read and modify scripts; authoring supported by AI tooling
• Mail flow and hygiene — Exchange with platforms such as Mimecast
• Jira and JSM — project tracking and ticketing

Preferred Skills & Team Growth Areas

Candidates who bring the following contribute immediately; those who don't are expected to grow into them.

Infrastructure as Code (Active Growth Priority)

• Terraform or equivalent IaC tooling
• Version-controlled infrastructure configuration and change pipelines
• HCL, YAML, or JSON declarative configuration

AWS Cloud Infrastructure (Active Growth Priority)

• Hands-on AWS experience for corporate IT or infrastructure workloads
• Networking, IAM, and compute in AWS environments
• AWS certifications (Solutions Architect Associate, SysOps Administrator) are a plus

Travel & Other Considerations

Travel is rare. This position requires availability for after-hours on-call response as part of the team rotation.