Senior System Engineer

Position Summary
The Senior System Engineer is a hands-on infrastructure role responsible for the design, administration, and continuous improvement of OEC’s corporate IT environment. Scope spans Windows Server, Microsoft 365 and Entra ID, identity and access management, and endpoint management, with active expansion into IaC and AWS. Security is foundational — every system, configuration, and access decision is approached through a security lens. This person operates independently, holds a high standard for documentation, and actively contributes to team growth.

Job Duties

Administer and maintain Windows Server and endpoint environments, including patching, configuration, and root-cause analysis.
Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra ID, Intune) and maintain Conditional Access posture.
Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy, enrollment, and compliance enforcement.
Maintain DNS, DHCP, SMTP, file services, and Active Directory (GPO, ADUC).
Contribute to IaC adoption — reviewing, testing, and authoring configurations as skills develop.
Support and expand AWS cloud infrastructure deployments.
Read, modify, and troubleshoot PowerShell scripts; AI-assisted authoring (Copilot, Claude) is available and encouraged.
Identify access control gaps, configuration risks, and hardening opportunities proactively.
Author and maintain runbooks, architecture diagrams, and troubleshooting guides; track work in Jira and JSM.
Participate in on-call rotation for after-hours system emergencies.

Experience
At least 10 years in systems engineering or IT infrastructure, with demonstrated experience administering Microsoft 365, Windows Server, enterprise identity platforms (Active Directory, Entra ID), and endpoint management (Intune, SCCM, or Jamf). Ability to read and modify PowerShell is required. Modern Microsoft certifications (e.g., MS-102, Azure Administrator) are preferred.

Required Skills

Windows Server and Active Directory — GPO, ADUC, DNS, DHCP, SMTP, patching, and domain services
Microsoft 365 — Exchange Online, SharePoint, Teams, Entra ID, Intune, Conditional Access
Endpoint management — Intune, SCCM/Autopatch, and/or Jamf
Virtualization — VMware vSphere/ESXi or Hyper-V
Identity and access management — SSO/IdP, MFA, RBAC, and privileged access concepts
PowerShell — read and modify scripts; authoring supported by AI tooling
Mail flow and hygiene — Exchange with platforms such as Mimecast
Jira and JSM — project tracking and ticketing

Preferred Skills & Team Growth Areas
Candidates who bring the following contribute immediately; those who don’t are expected to grow into them.

Infrastructure as Code (Active Growth Priority)

Terraform or equivalent IaC tooling
Version-controlled infrastructure configuration and change pipelines
HCL, YAML, or JSON declarative configuration

AWS Cloud Infrastructure (Active Growth Priority)

Hands-on AWS experience for corporate IT or infrastructure workloads
Networking, IAM, and compute in AWS environments
AWS certifications (Solutions Architect Associate, SysOps Administrator) are a plus