Systems Engineer, Sr

Position Summary

The Senior Systems Engineer is responsible for the design, implementation, automation, administration, and support of enterprise Microsoft cloud and on-premises infrastructure. This role serves as a technical lead for Microsoft 365, Entra ID, Intune, Azure, Active Directory, Okta integrations, automation initiatives, security compliance, endpoint management, and DevOps operational processes. The position focuses on improving operational efficiency through automation, strengthening security posture, and ensuring reliable delivery of enterprise technology services.

Core Responsibilities

Microsoft 365 Administration

• Administer Microsoft 365 services, including:
• Exchange Online
• Microsoft Teams
• SharePoint Online
• OneDrive for Business
• Microsoft Graph
• Manage provisioning, compliance, retention, and access controls.
• Implement and maintain Microsoft security best practices.
• Troubleshoot user access, authentication, and collaboration platform issues.

Identity & Access Management

• Manage Microsoft Entra ID (Azure AD) and hybrid identity environments.
• Administer Active Directory, Group Policy, LDAP, and identity synchronization.
• understand and maintain SSO integrations using Okta and SAML.
• Implement lifecycle management processes for onboarding, offboarding, and access reviews.
• Manage privileged access and role assignments.
• Develop automated account cleanup and governance processes.

Endpoint Management

• Administer Microsoft Intune and endpoint security policies.
• Manage Windows device enrollment, configuration, compliance, and patching.
• Lead device migrations and modernization initiatives.
• Deploy security baselines and endpoint protection controls.
• Maintain Windows Hello for Business and modern management solutions.
• Support macOS and Windows endpoint administration.

Azure Infrastructure Administration

• Deploy and manage Azure virtual machines and cloud resources.
• Maintain Azure storage, networking, Key Vault, and resource groups.
• Manage Azure encryption, backup, disaster recovery, and security controls.
• Implement infrastructure modernization initiatives.
• Monitor cloud utilization and optimize cloud resources.

Security & Compliance

• BitLocker and encryption technologies.
• Support compliance audits and access certifications.
• Perform vulnerability remediation and security monitoring.
• Automate security governance and access review processes.

DevOps & Automation

• Design and develop automation using:
• PowerShell
• Python
• Microsoft Graph API
• Azure Automation
• REST APIs
• Automate user lifecycle management and identity workflows.
• Build automated reporting, monitoring, and operational dashboards.
• Implement Infrastructure as Code practices where appropriate.

Systems Administration

• Maintain server infrastructure and enterprise applications.
• Support in office applications such as badges, video, etc.
• Support DNS, DHCP, certificates, networking, and authentication services.
• Develop operational standards and documentation.

Project Leadership

• Lead infrastructure migration and transformation projects.
• Coordinate cross-functional technical initiatives.
• Provide technical guidance and mentoring to team members.
• Collaborate with vendors and business stakeholders.

Technical Skills

Microsoft Technologies

• Microsoft 365 Administration
• Exchange Online
• Teams Administration
• SharePoint Online
• OneDrive Administration
• Microsoft Intune
• Microsoft Entra ID
• Azure Active Directory Connect
• Azure Virtual Machines
• Azure Key Vault
• Azure Storage
• Azure Networking
• Microsoft Defender

Identity Platforms

• Okta Administration
• SAML Authentication
• SCIM Provisioning
• MFA Technologies
• Privileged Identity Management

Automation & Scripting

• PowerShell
• Python
• Microsoft Graph API
• Azure Automation
• REST APIs
• JSON
• Git

Infrastructure

• Active Directory
• Group Policy
• Windows Server
• DNS / DHCP
• Hybrid Identity
• Desktop Virtualization
• Endpoint Security

Preferred Qualifications

• 5+ years of Systems Engineering or Systems Administration experience.
• 3+ years administering Microsoft 365 and Azure environments.
• Experience with Intune, Entra ID, Azure, and Okta.
• Strong PowerShell and Python automation experience.

Key Performance Indicators

• Platform availability and uptime
• Security compliance metrics
• Automation coverage and efficiency gains
• Endpoint compliance rates
• Patch and vulnerability remediation performance
• User and device lifecycle accuracy
• Project delivery success
• Reduction of manual operational effort

Equal Employment Opportunity

Equal Employment Opportunity has been, and will continue to be, a fundamental principle at Health Catalyst. Employment decisions are based on individual capabilities and qualifications, without discrimination or harassment based on race, color, national origin, religion, sex, sexual orientation, gender identity, age, disability, citizenship status, marital status, creed, genetic predisposition or carrier status, or any other characteristic protected by applicable law. Health Catalyst is committed to fostering a work environment where all individuals are treated with respect and dignity.