SENIOR SYSTEMS ENGINEER

Position Details

Req ID

req2426

Job Title

SENIOR SYSTEMS ENGINEER

Division

Corporate

Shift

First Shift

Job Summary

Job Summary

The Senior Systems Engineer for Enterprise Cloud Identity & Security owns the organization's identity, authentication, authorization, trust boundaries, and security posture across both cloud and hybrid identity systems. This role administers Entra ID users, groups, domains, privileged roles, identity governance, hybrid identity integration with Active Directory, and the full authentication and SSO architecture. They define cross‑tenant trust controls, device identity posture, Intune policy enforcement, Conditional Access requirements, and the identity and security signals that downstream systems-including Microsoft 365 and Copilot-depend on. This role ensures only trusted users, devices, and external identities can authenticate and gain access under the correct security conditions, establishing the foundational perimeter that all applications rely on for secure operation.

Applies and demonstrates mastery of the technical skills and knowledge of principles, theories and concepts and industry practices and standards to perform technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analysis for total systems.

Essential Functions & Key Responsibilities

• Azure AD / Entra ID administration - users, groups, admin roles, privileged identity management, domain management.
• Coordinating Identity governance with IT Security - delegated admin models (GDAP/DAP), access reviews, least‑privilege role design, directory hygiene.
• Active Directory (on‑prem) administration & synchronization - hybrid identity, provisioning, inter-directory sync (Entra Connect/Cloud Sync).
• Authentication architecture & SSO - SAML, federation, certificates, token lifecycles, claim mapping.
• B2B trust controls - cross‑tenant access settings, default external collaboration posture, identity provider federation, inbound/outbound trust rules.
• Device identity posture: Maintain strong identity signals across Entra Join / Hybrid Join, device trust, stale device cleanup, and platform SSO. Ensure all devices provide trustworthy identity claims so Copilot and Security Copilot rely on secure, high‑integrity identity, device, MFA, risk, and access posture.
• Intune policy and mobile device management (iOS, Android, Windows): Oversee the full Intune policy lifecycle across all managed endpoints, including configuration of MDM/MAM profiles, deployment of compliance policies, enforcing device and location controls, and ensuring compliance signals accurately feed Conditional Access.
• Secure cloud data flow exchange oversight to external platforms (e.g. HR, payroll, and benefits), ensuring correct provisioning mappings, Conditional Access protections, and compliance alignment for all cloud data exchanges.
• This role works in partnership with the Security team, which owns global compliance, DLP, MFA, SIEM, and SOC operations.
• Coordinating with other IT or business teams when necessary.
• Meets with IT leadership to assess and define the system requirements.
• Analyzes network data and infrastructure to determine inefficiencies and problems. Maintains expert operating efficiency and stability, ensure the security and integrity of all systems and data, and respond to complex outages and other issues.
• Manages project timelines, budgets, and documentation. Collaborates with project teams to enable them with infrastructure, system technology architecture, diverse and complex projects and products.
• Leverages tools and custom applications to monitor the operational status of applications, infrastructure, networks, databases to optimize system performance.
• Troubleshoots technical issues and prepares root cause analysis of service interruptions, recovery and creating preventative measures.
• Prepares network analytics, data reports, and operational manuals.
• Keeping abreast of the latest advancements in technology, protocols, and best practices.
• Coordinates with department leadership to plan, design, and schedule the release of all software, hardware, and operating system updates.
• Develops and enhances processes and technical documentation, create back-up procedures, test plans, and reports.
• Provides coverage in a rotating, on-call after hours schedule.

Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.

Minimum Qualifications

Education Requirements

Minimum Other. Computer Science or related technical degree

If applicable, a combination of experience and training may be substituted for the education requirement.

Experience Requirements

4-8 or more years experience year(s) Experience with Microsoft systems and solutions, on premise and in the cloud

year(s) Experience in a global networked environment(s) as well as experience in aerospace industry strongly desired.

year(s) Experience in creating and managing project plans and implementations and assisting with other teammates'' projects, providing technical guidance and support.

year(s) Experience in administering and assisting with planning, implementing and executing incident response and disaster recovery procedures.

year(s) Experience with Windows server environment both on premise and cloud based; solid understanding of Storage and Virtualization management.

Skills and Competencies

• Communicates effectively using electronic media and in written and verbal forms.
• Excellent verbal and written skills and the ability to develop and deliver executive level presentations.
• Operates standard office equipment and demonstrates competence in the use of standard software applications such as Microsoft Word, Excel and Power Point.
• Interpersonal and team building skills and the ability to transform that data into new business processes using analytical, problem identification, and resolution skills.
• Desire to work closely with IT and Business teams to deliver top tier customer service to all.
• Knowledge of IT Security best practices and keeping that at the front of all projects.
• Expert working knowledge in Product Lifecycle Management\Product Data Management (PLM\PDM) concepts and administration.
• Solid analytical, problem identification and resolution skills to quickly resolve system failures to minimize outages and network interruptions in a 24X7X365 LAN/WAN.

Physical Requirements

Physical Requirements

Must be able to work in excess of eight (8) hours per day and five (5) days per week, if required. Additionally, those who work at NORDAM Repair Division must be able to ascend and descend stairs.

Demand - Frequency

Walk - Frequent

Use hands to handle or feel or manipulate - Frequent

Reach with hands and arms - Frequent

Stoop, kneel, crouch, or crawl - Occasional

Talk and hear - Frequent

Use close vision, depth perception, and ability to adjust - Constant

Travel between facilities (drive) - Occasional

Stand - Occasional

Climb Stairs - Occasional

Weight - Frequency

25 pounds - Occasional

Work Environment

Work Environment

While performing the duties of this job, the Stakeholder is occasionally exposed to moving mechanical parts, fumes or airborne particles, toxic or caustic chemicals, and outside weather conditions. The noise level in the work environment is usually moderate.

Supervision

Supervision

• Works under general direction.
• Receives guidance as to results expected and to resolve complex and unusual problems.
• Exercises latitude in determining activities and approaches within wide parameters.

EEO Statement

The NORDAM Group LLC is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity or expression, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.