IT Systems Engineer
Experience: 10+ Years
Employment Type: Full-time
Role Overview
Responsible for designing, implementing, securing and maintaining enterprise IT infrastructure, including networks, servers, endpoints, identity and Microsoft 365 environments. Ensures high availability, performance, security and compliance with CMMC, NIST SP 800-171 and ITAR requirements.
Key Responsibilities
1. Network & Infrastructure
- Design and manage LAN, WAN, VLAN, Wi-Fi, VPN and firewall infrastructure.
- Administer VMware, Hyper-V and Windows Server environments.
- Monitor infrastructure performance, troubleshoot issues and implement alerting.
- Manage hardware, software licensing, backups and disaster recovery.
2. Identity, Endpoint & Cloud Management
- Manage Microsoft Intune for endpoint configuration and compliance.
- Administer Azure, Entra ID, Conditional Access, MFA and privileged access.
- Manage Microsoft 365 and collaboration platforms.
- Support ERP infrastructure, access controls and availability.
3. Security & Compliance
- Manage EDR, security patching and vulnerability remediation.
- Ensure compliance with CMMC, NIST SP 800-171, DFARS and ITAR.
- Maintain security policies, technical documentation and audit evidence.
- Support security audits, incident response and remediation activities.
4. IT Operations & Support
- Handle Tier 2 and Tier 3 infrastructure escalations.
- Coordinate with managed service providers for Tier 1 support and SLA adherence.
- Automate user onboarding, offboarding and access provisioning.
- Perform root-cause analysis and scheduled after-hours maintenance.
5. Projects & Vendor Management
- Lead infrastructure upgrades, deployments and IT improvement initiatives.
- Evaluate and manage IT vendors and service providers.
- Collaborate with business teams and ERP stakeholders on IT projects.
Required Qualifications
- Bachelor's degree in Computer Science, Engineering or a related field.
- 10+ years of enterprise network and server administration experience.
- Strong hands-on experience with:
- VMware, Hyper-V and Windows Server.
- Microsoft Intune, Entra ID and Microsoft 365.
- Cisco and HP/Aruba networking.
- TCP/IP, DNS, DHCP, VPN, VLAN, QoS and 802.1X.
- Firewalls, EDR, patching and vulnerability management.
- PowerShell scripting and automation.
Preferred Qualifications
- Experience with CMMC and NIST SP 800-171 compliance.
- Knowledge of Microsoft 365 GCC High, Defender and Purview.
- Experience with Azure, SIEM, backup and disaster recovery solutions.
- ERP infrastructure and VoIP/telephony support experience.
Preferred Certifications
- Cisco CCNA / CCNP.
- Microsoft MD-102, AZ-104 or SC-300.
- CompTIA Security+, CISSP or CMMC Certified Professional (CCP).
Additional Requirements
- Willingness to participate in on-call support and after-hours maintenance.
- Ability to work across office, manufacturing and data center environments.
- Frequent travel between Lake Shore offices (10-20%) and occasional domestic/international travel.
Key Competencies: Communication, analytical thinking, technical expertise, security mindset, project management and customer focus.
