Systems & Network Engineer

Infrastructure

• Administer, maintain, and upgrade physical and virtual servers (VMware vSphere), Windows Server, SQL Server instances, storage, and backup systems, including off-site immutable backup copies and periodic restore testing
• Build and operate the Azure estate: virtual networks and site-to-site VPN to the on-prem network, Azure SQL, App Services, Container Apps, Static Web Apps, storage, and subscription cost and access governance
• Configure and maintain switches, routers, wireless access points, VPN, and high-availability firewalls across all Suntec sites, including redundant site-to-site tunnels and switch stack and firmware upgrades
• Monitor system uptime, capacity, and performance; respond to and resolve infrastructure outages
• Plan and carry out hardware and firmware upgrades during approved maintenance windows
• Maintain current network diagrams, configuration backups, and technical documentation

Systems Administration

• Administer Microsoft 365, Entra ID, Active Directory, DNS, DHCP, and group policy
• Lead Microsoft Intune and MDM rollouts, including device compliance policies, configuration profiles, and Windows Autopilot
• Manage device enrollment and policies for laptops, tablets, and company cell phones, including Apple Business Manager and automated software deployment
• Run patching for servers, network devices, and endpoints according to the agreed schedule
• Manage public DNS, certificates, and registrar records for company web properties

Escalation and Support

• Serve as Tier 3 escalation point for issues the Senior IT Support Specialist cannot resolve
• Troubleshoot complex network, identity, application, and connectivity problems
• Write knowledge base articles so recurring issues can be resolved at Tier 1 or Tier 2

Audio/Video and Telecom Systems

• Configure and maintain A/V systems in conference rooms, meeting rooms, and executive offices
• Administer the desk phone platform, including call routes, extensions, and system updates
• Coordinate American Sound (A/V integrator) and Casa Tech Systems, LLC (cabling) on installs and upgrades

Azure, Applications, and AI Integration

• Own the Azure platform that hosts Suntec's internal web portals and applications: deployments, Entra-gated access, custom domains and SSL, monitoring, and cost
• Build and maintain the data plumbing behind our AI tools: SQL replication from the ERP into Azure, Fabric mirroring, and read-only Model Context Protocol (MCP) connectors that expose business systems to Claude
• Stand up and secure new AI connectors and integrations as the business asks for them, holding the standing rule that AI reads data and humans act on it, especially for operational systems such as batch plants and fleet
• Use AI assistants (Claude Code or similar) daily for scripting, automation, documentation, and troubleshooting, and help the rest of the team do the same
• Maintain source control, deployment pipelines, and dev-to-prod promotion for in-house applications in the company GitHub organization
• Manage app registrations, service principals, managed identities, and secrets so every integration runs with least privilege and documented data access

Security

• Apply remediation items from twice-yearly internal and external penetration tests
• Act as technical backup to the IT Operations Manager for EDR/MDR (SentinelOne or CrowdStrike) and Abnormal email security
• Maintain the security baseline across Entra conditional access and MFA, firewall filtering, app consent, and backup immutability; investigate and contain phishing and account-compromise incidents

MSP Transition

• Work with MSP to transfer knowledge, credentials, documentation, and runbooks before March 31, 2027
• Take ownership of all infrastructure monitoring and maintenance at cutover

Systems Administration

• Administer Microsoft 365, Entra ID, Active Directory, DNS, DHCP, and group policy
• Lead Microsoft Intune and MDM rollouts, including device compliance policies, configuration profiles, and Windows Autopilot
• Manage device enrollment and policies for laptops, tablets, and company cell phones, including Apple Business Manager and automated software deployment
• Run patching for servers, network devices, and endpoints according to the agreed schedule
• Manage public DNS, certificates, and registrar records for company web properties

Escalation and Support

• Serve as Tier 3 escalation point for issues the Senior IT Support Specialist cannot resolve
• Troubleshoot complex network, identity, application, and connectivity problems
• Write knowledge base articles so recurring issues can be resolved at Tier 1 or Tier 2

Audio/Video and Telecom Systems

• Configure and maintain A/V systems in conference rooms, meeting rooms, and executive offices
• Administer the desk phone platform, including call routes, extensions, and system updates
• Coordinate American Sound (A/V integrator) and Casa Tech Systems, LLC (cabling) on installs and upgrades

Azure, Applications, and AI Integration

• Own the Azure platform that hosts Suntec's internal web portals and applications: deployments, Entra-gated access, custom domains and SSL, monitoring, and cost
• Build and maintain the data plumbing behind our AI tools: SQL replication from the ERP into Azure, Fabric mirroring, and read-only Model Context Protocol (MCP) connectors that expose business systems to Claude
• Stand up and secure new AI connectors and integrations as the business asks for them, holding the standing rule that AI reads data and humans act on it, especially for operational systems such as batch plants and fleet
• Use AI assistants (Claude Code or similar) daily for scripting, automation, documentation, and troubleshooting, and help the rest of the team do the same
• Maintain source control, deployment pipelines, and dev-to-prod promotion for in-house applications in the company GitHub organization
• Manage app registrations, service principals, managed identities, and secrets so every integration runs with least privilege and documented data access
• 5+ years of systems and network administration experience
• Hands-on experience with Windows Server, SQL Server, Active Directory, Microsoft 365, and Entra ID
• Hands-on Microsoft Azure experience: virtual networking and VPN, compute, Azure SQL, App Services or containers, identity, and cost management
• Experience configuring enterprise switches, routers, wireless, and firewalls
• Experience with Microsoft Intune or a comparable MDM platform
• Working knowledge of backup and recovery, virtualization (VMware or Hyper-V), and patch management
• Practical experience using AI tools (Claude, Copilot, or similar) for scripting, automation, and troubleshooting, with a demonstrated interest in building AI integrations against business systems
• Scripting experience with PowerShell and Python
• Valid driver's license and ability to travel to company sites

Preferred

• Microsoft certifications (for example, Azure Administrator, Azure Solutions Architect, or Microsoft 365 Administrator)
• Firewall or networking certification (for example, Fortinet, Palo Alto, Cisco CCNA)
• Experience with EDR platforms such as Sentinel One or CrowdStrike
• Experience with VoIP phone systems and conference room A/V
• Experience in construction, manufacturing, or multi-site environments
• Experience building or hosting APIs, MCP servers, or other LLM integrations against business data
• Experience with Microsoft Fabric, data warehousing, or SQL replication
• Familiarity with GitHub Actions or comparable CI/CD

The Systems & Network Engineer is the hands-on owner of Suntec Concrete's IT infrastructure across our on-premises data center and Microsoft Azure: Windows and SQL servers, virtualization, storage and backup, network, firewalls, identity, and endpoint management. This role takes over the infrastructure work currently handled by our managed service provider ahead of our planned in-house transition.

Suntec runs a growing set of in-house applications and AI integrations on Azure: internal web portals, data pipelines from our ERP into a Fabric data warehouse, and Claude AI connectors that give staff governed, read-only access to business systems. The engineer keeps that platform running, secure, and connected to the on-prem systems it depends on, and uses AI tooling as a normal part of daily work. AI experience is a requirement for this role, not a nice-to-have. The engineer is also the escalation point for any technical issue beyond Tier 2 support, owns the audio/video systems and desk phone platform, and backs up the IT Operations Manager on cybersecurity tools. This is a three-person team, so the right candidate is comfortable working across a broad range of technologies.