IT Systems Engineer, Senior

Senior It Systems Engineer

About the Pay

Note: The salary range listed $134,555 - $159,785 reflects the target hiring range only and does not represent the full employee pay range for this position.

About Central Arizona Project

Central Arizona Project (CAP) is a 336-mile system that supplies Colorado River water to central and southern Arizona. More than 6 million people rely on this supply. CAP employs nearly 500 people who enjoy a team-oriented and safety-focused work culture. The close community of a small company is driven to help fulfill our extremely valuable mission.

Compensation & Benefits Package includes:

• Competitive Salaries
• Arizona State Retirement System - Pension
• 401(k)
• Medical, Dental and Vision
• Life insurance, LTD, Short-term disability
• 4-10 (Mon-Thur) work schedule
• Option for part-time remote work after successful 3-month onboarding
• Paid training & tuition reimbursement
• 9 paid holidays
• Paid vacation & sick time
• Wellness programs
• No benefits waiting period
• Relocation benefits
• Significant training and development opportunities
• Public Student Loan Forgiveness eligible employer
• 12 Weeks Paid Parental Leave

About the Responsibilities

As a Senior IT Systems Engineer, you would provide advanced functional support, subject matter expertise and end user support across CAP for CAP enterprise applications. Engineers, administers, and performs problem determinization for issues in CAP's enterprise systems. Resolves functional problems, and works with technical staff and external consultants to resolve technical issues. Provides training to clients and communication to management on critical functional issues. Coordinates user upgrade testing, production patching and maintaining of security posture. Maintains contact with customers, vendors, and user groups to understand trends and assist CAP make strategic decisions. Determines job priorities based on criticality and business need. Acts as SME and mentor to other Systems Engineer, Administrators, and Technical Specialists.

Some of the responsibilities include:

• Enterprise Application Engineering and Administration: Directs the full lifecycle of Windows Server infrastructure (provisioning, patch orchestration, upgrade/migration, vulnerability mitigation, and structured decommissioning). Architects and secures enterprise Active Directory, DNS/DHCP, and PKI environments, GPO governance, privileged access segmentation, high availability service configuration, certificate lifecycle automation, and integration with MFA based authentication and device trust systems. Manages and optimizes the Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint Online, and Azure AD Connect; enforce identity governance, conditional access, and tenant level security baselines. Works with the Cloud Architect on cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks. Maintain a working knowledge of virtualization platforms and concepts, including virtual networking, storage abstractions, and VM lifecycle operations, with practical understanding of resource optimization and host cluster management. Manage and prioritize all enterprise system problems and changes originating from the IT Computer Support Desk and Change Review Committee. Resolve functional issues and obtain assistance if necessary from support, outside consultants, or internal technical staff. Open and manage service requests with the Computer Support desk. Work with technical systems administrators, super users, and database administrators to coordinate the application and testing of upgrades or patches. Communicate the status of open problems and changes to clients and management. Participate on applicable meetings and discussions supporting enterprise system issues. Provide status of open issues and client requests as requested. Partner with security, networking, cloud, and application teams to deliver integrated infrastructure solutions, secure and resilient and hybrid identity initiatives.
• Subject Matter Expert: Expert level knowledge of applicable functional areas such as Windows Domain environment (AD, DNS, DHCP, GPO, PKI), Microsoft 365 ecosystem, Windows Servers, security patching and vulnerability mitigation in a Windows environment. Intermediate level knowledge of virtualization platforms and concepts, including virtual networking, storage abstractions, and VM lifecycle operations, with practical understanding of resource optimization and host cluster management. Intermediate level knowledge of cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks.
• Testing: Work with technical staff and super users to develop test plans, implement test plans, move fixes from test to production environment, and provide post-installation support. Manage the testing of upgrades or patches and report the status on a periodic basis.
• Requirements Gathering: Partner with the user community to develop requirements for major enhancements, additional functionality, or changes necessary to other Enterprise systems. Lead major projects across divisional lines to accomplish the defined goals. Create and maintain detailed project plans to keep the project within scope and on time. Locate and bring outside resources into the project when necessary.
• Training: Perform any required training of super users or clients on the functions of the applicable application. Partner with the training department to develop or obtain the necessary training materials. Mentoring of team members for added responsibilities.

About the Qualifications

• Bachelor degree in Information Systems or a related field with 5 years experience or Associates degree with 7 years experience or High School diploma/equivalent with 14 years of experience.
• Demonstrated expert level engineering and administration skills of applicable applications listed above.
• Experience with configuring and installing applications.
• Intermediate level skills in server architecture design.
• Intermediate level skills in Microsoft Azure, IaaS, PaaS and SaaS.
• Proven ability to write clear and concise documentation, procedures, and correspondence.
• Must possess a valid driver's license and maintain a good driving record.

Preferences:

• Expert level experience with Windows Domain environment - AD, DNS, DHCP, GPO, PKI.
• Expert level experience with Microsoft 365 ecosystem and Windows Servers
• Intermediate level experience with security patching and vulnerability mitigation in a Windows environment.
• Intermediate level experience with virtualized server environments (VMWare)
• Intermediate experience with cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks
• Exposure to various storage and backup technologies.
• Experience with Microsoft Intune and Defender is a plus.