Senior System Engineer

Position Summary

The Senior System Engineer is a hands-on infrastructure role responsible for the design, administration, and continuous improvement of OEC's corporate IT environment. Scope spans Windows Server, Microsoft 365 and Entra ID, identity and access management, and endpoint management, with active expansion into IaC and AWS. Security is foundational - every system, configuration, and access decision is approached through a security lens. This person operates independently, holds a high standard for documentation, and actively contributes to team growth.

Job Duties

• Administer and maintain Windows Server and endpoint environments, including patching, configuration, and root-cause analysis.
• Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra ID, Intune) and maintain Conditional Access posture.
• Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy, enrollment, and compliance enforcement.
• Maintain DNS, DHCP, SMTP, file services, and Active Directory (GPO, ADUC).
• Contribute to IaC adoption - reviewing, testing, and authoring configurations as skills develop.
• Support and expand AWS cloud infrastructure deployments.
• Read, modify, and troubleshoot PowerShell scripts; AI-assisted authoring (Copilot, Claude) is available and encouraged.
• Identify access control gaps, configuration risks, and hardening opportunities proactively.
• Author and maintain runbooks, architecture diagrams, and troubleshooting guides; track work in Jira and JSM.
• Participate in on-call rotation for after-hours system emergencies.

Experience

At least 10 years in systems engineering or IT infrastructure, with demonstrated experience administering Microsoft 365, Windows Server, enterprise identity platforms (Active Directory, Entra ID), and endpoint management (Intune, SCCM, or Jamf). Ability to read and modify PowerShell is required. Modern Microsoft certifications (e.g., MS-102, Azure Administrator) are preferred.

Required Skills

• Windows Server and Active Directory - GPO, ADUC, DNS, DHCP, SMTP, patching, and domain services
• Microsoft 365 - Exchange Online, SharePoint, Teams, Entra ID, Intune, Conditional Access
• Endpoint management - Intune, SCCM/Autopatch, and/or Jamf
• Virtualization - VMware vSphere/ESXi or Hyper-V
• Identity and access management - SSO/IdP, MFA, RBAC, and privileged access concepts
• PowerShell - read and modify scripts; authoring supported by AI tooling
• Mail flow and hygiene - Exchange with platforms such as Mimecast
• Jira and JSM - project tracking and ticketing

Preferred Skills & Team Growth Areas

Candidates who bring the following contribute immediately; those who don't are expected to grow into them.

Infrastructure as Code (Active Growth Priority)

• Terraform or equivalent IaC tooling
• Version-controlled infrastructure configuration and change pipelines
• HCL, YAML, or JSON declarative configuration

AWS Cloud Infrastructure (Active Growth Priority)

• Hands-on AWS experience for corporate IT or infrastructure workloads
• Networking, IAM, and compute in AWS environments
• AWS certifications (Solutions Architect Associate, SysOps Administrator) are a plus