Senior Systems Engineer

Senior Systems EngineerWe're a fast-growing, privately held insurance company on a path to become a leading U.S. retail platform. We believe every client and customer relationship holds the potential to grow into something greater, and the same is true for our people.

As we grow, we're redefining how great talent connects with meaningful work, enabling our ambitious strategy while building a culture of high performance, creativity, and partnership. If you're driven by building reliable, secure infrastructure that supports critical financial operations, and you enjoy blending technical expertise with real-world business impact, you'll thrive here!We're looking for a Senior Systems Engineer who brings deep infrastructure expertise, a problem-solver mindset, and a passion for building and maintaining resilient, secure systems. In this role, you'll own and advance our data center, Cloud, and Microsoft 365 environments, with a strong focus on server infrastructure, identity, data protection, and disaster recovery.You'll play a key role in provisioning, configuring, and optimizing infrastructure across Nutanix HCI, Windows Server, AWS, and Microsoft 365 platforms—while ensuring seamless integration across systems, identity services, and proprietary applications.

You'll lead efforts to modernize legacy infrastructure, harden identity and policy controls, and maintain robust backup, recovery, and monitoring capabilities.This role partners closely with IT teams and business stakeholders to ensure our environment remains scalable, secure, and built for the future—bringing together technical expertise and practical execution to drive meaningful impact across the organization.Build and Maintain Core InfrastructureOwn and optimize Nutanix HCI infrastructure, including cluster upgrades, health monitoring, and capacity planningOwn Windows Server environments spanning legacy (2003+) through current versions, including hands-on upgrade and migration projectsDeploy, configure, and maintain Microsoft Failover Clusters and SQL Server deployments in clustered and standalone configurationsSupport AWS infrastructure and services as a strong complement to on-premises workloadsPerform ongoing performance tuning, capacity planning, and resource optimization to support business growthLead legacy-to-modern server upgrade initiatives, ensuring minimal disruption and full documentation of the migration pathData Protection and Disaster RecoveryDesign, implement, and maintain data protection strategies, including backup policies, replication, and retention managementOwn disaster recovery planning, testing, and execution to ensure business continuity across all critical systemsSupport and optimize Wasabi object storage for backup targets and archival workloadsLeverage Nutanix-native data protection features, including snapshots, replication, and DR runbooksIdentity, Directory, and Access ManagementServe as the subject matter expert for Active Directory—including AD Sites and Services, OU structure hardening, Group Policy design and enforcement, and schema managementSupport hybrid Active Directory environments, including synchronization between on-premises AD and Entra IDSupport and troubleshoot Entra ID for SSO, SAML-based application integrations, Conditional Access policies, and identity governanceOwn the enterprise PKI and certificate infrastructure, including CA hierarchies, certificate lifecycle management, renewal processes, and integration with public certificate authorities such as DigiCertSupport and troubleshoot Intune device management policies, including compliance, configuration profiles, and patch managementMicrosoft 365 and Cloud ProductivityServe as the escalation point and subject matter expert for Microsoft 365, including Exchange Online, SharePoint Online, Teams, and OneDriveProvide deep technical support and guidance on SharePoint architecture, permissions, and content governance across the organizationTroubleshoot, validate, and support Conditional Access policies aligned to Zero Trust principlesAct as the escalation owner for Mimecast email security, including policy troubleshooting, threat protection, DMARC enforcement and monitoring, and continuity servicesDNS, Networking, and SecurityServe as the DNS authority for both public and private DNS—managing zones, records, delegation, split-horizon configurations, and DNS security practicesDesign, implement, and support network infrastructure, including routers, switches, firewalls (including Fortinet), and connectivity solutionsLeverage deep knowledge of TCP/IP, routing protocols (BGP, OSPF, EIGRP), and network architecture to maintain a stable and resilient infrastructureSupport and optimize storage, compute, network, and security resources across on-premises and cloud environmentsTroubleshoot complex network, system, and application issues—resolving connectivity and performance challenges across the environmentImplement and support security tools, protocols, and controls to protect infrastructure and dataPartner on vulnerability remediation efforts, system hardening, and ongoing monitoring of security risksMonitoring, Automation, and Continuous ImprovementLeverage Site24x7 for deep infrastructure and application monitoring, alerting, and uptime reportingLead efforts to evaluate, test, and deploy infrastructure upgrades, patches, and enhancementsIdentify opportunities to improve system performance, scalability, and reliability through proactive analysis and innovationCollaborate and Support Across the OrganizationPartner with IT teams and system administrators to maintain and troubleshoot the environmentProvide support for network-related issues impacting the user community, ensuring timely resolution and minimal disruptionCreate and maintain clear documentation of systems, configurations, and processes to support knowledge sharing and operational efficiencyWhat You'll Bring:BS in Computer Science or related discipline, advanced degree desirable.7+ years of experience as a Systems, Infrastructure, or Senior Network Engineer in an enterprise environmentBroad hands-on experience across server infrastructure, networking (LAN/WAN/WLAN), identity, and cloud platformsRequired Experience:Nutanix: Hands-on experience with Nutanix HCI infrastructure, cluster upgrades, and data protection featuresWindows Server: Deep expertise in administering, troubleshooting, and upgrading Windows Server from 2003 through current versionsActive Directory: Extensive experience with AD design, AD Sites and Services, OU hardening, Group Policy management, and hybrid AD architectureCertificate Services: Strong PKI and certificate lifecycle management experience in enterprise environments, including public certificate authorities such as DigiCertEntra ID: Proven experience with SSO, SAML integrations, Conditional Access, and identity governanceIntune: Experience managing device compliance, configuration, and patching policies across Windows and mobile platformsMicrosoft 365: Solid M365 administration including Exchange Online, SharePoint, Teams, and OneDriveSQL Server: Experience deploying and maintaining SQL Server in standalone and clustered configurationsMicrosoft Failover Clustering: Experience designing and maintaining Windows Server failover clustersDNS: Expert-level understanding of public and private DNS, split-horizon configurations, and DNS securityNetworking: Strong understanding of TCP/IP, routing protocols (BGP, OSPF, EIGRP), LAN/WAN/WLAN architecture, and enterprise network hardware, including routers, switches, and firewalls; hands-on experience with Fortinet platforms (FortiGate, FortiManager, or FortiAnalyzer)Data Protection & DR: Experience designing and maintaining backup, replication, and disaster recovery solutionsMimecast: Experience supporting Mimecast for email security, policy troubleshooting, DMARC enforcement and monitoring, and continuitySite24x7: Experience configuring and managing infrastructure monitoring, alerting, and reportingWasabi: Familiarity with Wasabi object storage for backup and archival use casesStrong Plus:AWS infrastructure experience spanning compute, containers, networking, and storage (EC2, Workspaces, ECS/Fargate, ECR, ALB, S3, Direct Connect, CloudFormation); comfortable operating in multi-region, multi-account AWS Organizations environments with an understanding of security boundary design.Redwood ActiveBatch for enterprise job scheduling and automationExperience leading legacy-to-modern server platform migrations