Senior IT Systems Engineer

About the role

• We are looking for a hands-on Senior IT Systems Engineer/ IT Systems Engineer to support and continuously improve our internal IT environment. This role combines strategic thinking with deep technical execution, with responsibility for the security, reliability, scalability, and cost-effectiveness of our IT infrastructure. The ideal candidate is highly self-driven, comfortable making technical and architectural decisions, and able to move from identifying an issue to implementing the solution directly. Key areas of ownership include information security, cloud and infrastructure management, IT operations, networking and firewalls, identity and endpoint management, and infrastructure cost optimization. This is an individual contributor role and is a 5 days in office position with occasional work on the weekends and evenings. 

What you'll do

• Support the company’s IT infrastructure, operations, and information security environment end-to-end.
• Define and maintain a secure, scalable, and cost-effective IT architecture across cloud, SaaS, endpoints, networking, and internal systems.
• Manage and optimize cloud and infrastructure spend, including licensing, SaaS applications, compute, storage, and other technology costs.
• Manage Microsoft 365, Entra ID, and Intune, including identity management, SSO/MFA, Conditional Access, RBAC, Exchange, SharePoint, and Teams.
• Administer and troubleshoot Linux systems and environments, including patching, hardening, access controls, monitoring, and availability.
• Support and maintain network equipment and firewalls, including configuration, monitoring, segmentation, VPN/remote access, and troubleshooting across office and site locations.
• Support endpoint management and security across macOS, Windows, and Linux, including MDM via Microsoft Intune and Jamf, device encryption, patching, EDR, vulnerability management, and local administrator controls.
• Lead Information Security operations, including security architecture, policies and standards, risk management, vendor security reviews, awareness programs, vulnerability remediation, and incident response readiness.
• Partner closely with Engineering and technical teams on cloud and hybrid infrastructure, secure access, backups, networking, storage, and business continuity.
• Securely evaluate and enable AI tools and AI infrastructure, including access controls, data protection, approved-tool governance, and technical enablement.
• Manage IT vendors, technology contracts, licensing, renewals, and service-provider performance.
• Automate repetitive IT and security workflows using Bash, PowerShell, Python, or similar tools.
• Identify infrastructure, security, reliability, and cost risks proactively and drive them through resolution.

Required Qualifications

• 12+ years of progressive, hands-on IT infrastructure, systems administration, and IT operations experience.
• Strong hands-on experience with Microsoft 365, Entra ID, Intune, identity management, MFA, Conditional Access, and RBAC.
• Strong Linux systems administration experience.
• Strong networking experience, including firewalls such as Palo Alto, Fortinet, Juniper, or Cisco, routing and switching, VPN/remote access, and network segmentation.
• Experience managing macOS and Windows environments, including endpoint provisioning, device management (Intune, Jamf), and endpoint security.
• Strong understanding of cloud and hybrid infrastructure across AWS, Azure, and/or GCP.
• Demonstrated experience improving infrastructure efficiency and managing or optimizing cloud, SaaS, and IT costs.
• Strong Information Security experience, including security controls, vulnerability management, access management, incident response, and risk management.
• Ability to troubleshoot complex technical issues independently and drive projects from problem identification through implementation.
• Working knowledge of scripting and automation using Bash, PowerShell, Python, or similar technologies.
• Strong judgment, documentation, communication, and vendor-management skills.

Preferred Qualifications

• Experience in a startup, high-growth, or highly technical engineering environment.
• Experience building or significantly improving an IT and security environment at scale.
• Experience supporting AI tools, GPU infrastructure, or AI/ML development environments.
• Experience supporting EDA/EPDA environments, including licensing, compute, storage, and performance requirements.
• Experience with EDR, vulnerability scanning, SIEM/logging, monitoring, GitLab, and CI/CD environments.
• Relevant Microsoft, AWS, Linux, security, or cloud certifications.
• Familiarity with SOC 2 and ISO 27001 compliance frameworks, including audit support and evidence management.

Benefits (subject to location and local regulations)

• Competitive salary and equity 
• Comprehensive medical, dental, and vision coverage 
• 401(k) retirement plan 
• Flexible vacation and time-off policy 
• Collaborative, fast-paced, and inclusive work environment 
• Opportunity to work on cutting-edge technologies with a highly cross-functional team