Lead Systems Engineer

• Lead the design, automation, reliability, security, and modernization of primarily on-prem infrastructure and production technology.
• Build systems and workflows that reduce manual effort, eliminate repetitive tasks, improve consistency, and enable greater self-service.
• Support a mixed Windows, macOS, and Linux environment serving creative, production, and business teams.
• Partner with IT leadership, Security, Operations, Production, Service Desk, and vendors to balance immediate operational needs with long-term infrastructure improvements.
• This is not a cloud-heavy role. Core systems operate on secure on-prem networks, and on-site availability is required as needed.

Infrastructure, DevOps & Automation

• Manage and improve on-prem infrastructure including VMware/Proxmox virtualization, Omnissa Horizon, storage, backup, networking, and firewall-related operations.
• Identify single points of failure and improve infrastructure scalability, performance, resilience, and maintainability.
• Develop automation and internal tooling using Python, PowerShell, Bash, APIs, and configuration-management practices.
• Replace manual and legacy processes with modular, repeatable, documented workflows.
• Build towards automating capabilities like provisioning, onboarding/offboarding, access changes, software deployment, and other common IT operations.
• Automate Zendesk-driven workflows where practical while ensuring actions remain logged, traceable, and auditable.
• Troubleshoot infrastructure, network, storage, virtualization, and production-system issues across the environment.

Security, Identity & Endpoint Engineering

• Maintain and improve Active Directory, GPOs, OUs, access-control models, Okta groups/rules/automation, and identity lifecycle workflows.
• Manage Windows, macOS, and Linux endpoints using tools such as Addigy and PDQ Deploy.
• Move endpoint deployment away from large static images toward lightweight base builds with dynamically applied applications, configuration, and policy.
• Enforce least-privilege, auditable access and ensure provisioning, system changes, and privileged actions are traceable.
• Partner with Security and leadership to implement technical controls and provide evidence for client reviews, audits, and compliance requirements.
• Treat security and compliance as design requirements within infrastructure and automation rather than separate after-the-fact processes.
• Manage and optimize core SaaS platforms used for email, chat, etc..
• Expand centralized monitoring, logging, alerting, and security visibility to favor proactive detection over reactive troubleshooting.
• Establish repeatable standards for configuration, operational monitoring, change management, and system health.
• Support and optimize render farms, distributed processing, editorial systems, and post-production environments.
• Support workflows involving applications such as Adobe Premiere Pro, DaVinci Resolve, or Avid.
• Help to automate media processes including rendering, exporting, compression, asset handling, and distributed production workflows where possible.
• Build tools and integrations that improve efficiency and interoperability across corporate, creative and post-production operations.

Documentation, AI & Technical Leadership

• Maintain clear technical documentation, architecture/network diagrams, operational procedures, and audit-ready system references.
• Create repeatable procedures that enable Service Desk and Tier 0/Tier 1 teams to resolve common issues without engineering intervention.
• Evaluate “AI-enabled tools and automation” where they can securely reduce manual work or improve the employee experience.
• Communicate effectively with technical teams, leadership, vendors, and end users; evaluate competing priorities and clearly communicate risks, tradeoffs, and expectations.
• Provide calm, professional technical leadership during complex or high-pressure operational issues.

Compensation will be evaluated based on experience and skillset.