Senior System Engineer

Job Summary /Objective

The Senior Systems Engineer is a hands-on infrastructure role responsible for the design, administration, and continuous improvement of OEC's corporate IT environment. Scope spans Windows Server, Microsoft 365 and Entra , identity and access management, and endpoint management, with active expansion into IaC and AWS. Security is foundational — every system, configuration, and access decision is approached through a security lens.

This person operates independently, holds a high standard for documentation, and actively contributes to team growth.

Key Responsibilities & Duties(essential to the job)

Administer and maintain Windows Server and endpoint environments, including patching, configuration, and root-cause analysis.
Manage Microsoft 365 services (Exchange Online, SharePoint, Teams, Entra , Intune) and maintain Conditional Access posture.
Operate endpoint management tooling (Intune, SCCM/Autopatch, Jamf) including policy, enrollment, and compliance enforcement.
Maintain DNS, DHCP, SMTP, file services, and Active Directory (GPO, ADUC).
Contribute to IaC adoption — reviewing, testing, and authoring configurations as skills develop.
Support and expand AWS cloud infrastructure deployments.
Read, modify, and troubleshoot Power Shell scripts; AI-assisted authoring (Copilot, Claude) is available and encouraged.
Identify access control gaps, configuration risks, and hardening opportunities proactively.
Author and maintain runbooks, architecture diagrams, and troubleshooting guides; track work in Jira and JSM.
Participate in on-call rotation for after-hours system emergencies.

Education

A bachelor's degree from an accredited college or university is required, with a focus in Information Technology, Computer Science, or related discipline. In the absenceof a degree, equivalent work experience directly related to the key responsibilities of the role will be considered as a substitute for the degree.

Experience, Skills and Key Competencies

At least 10 years in systems engineering or IT infrastructure, with demonstrated experience administering Microsoft 365, Windows Server, enterprise identity platforms (Active Directory, Entra ), and endpoint management (Intune, SCCM, or Jamf). Ability to read and modify Power Shell is required. Modern Microsoft certifications (e.g., MS-102, Azure Administrator) are preferred.

Must also be able to demonstrate the following skills and abilities:

Required Skills

Windows Server and Active Directory — GPO, ADUC, DNS, DHCP, SMTP, patching, and domain services
Microsoft 365 — Exchange Online, SharePoint, Teams, Entra , Intune, Conditional Access
Endpoint management — Intune, SCCM/Autopatch, and/or Jamf
Virtualization — VMware vSphere/ESXi or Hyper-V
Identity and access management — SSO/IdP, MFA, RBAC, and privileged access concepts
Power Shell — read and modify scripts; authoring supported by AI tooling
Mail flow and hygiene — Exchange with platforms such as Mimecast
Jira and JSM — project tracking and ticketing

Preferred Skills & Team Growth Areas

Candidates who bring the following contribute immediately; those who don't are expected to grow into them.

Infrastructure as Code (Active Growth Priority)

Terraform or equivalent IaC tooling
Version-controlled infrastructure configuration and change pipelines
HCL, YAML, or JSON declarative configuration

AWS Cloud Infrastructure (Active Growth Priority)

Hands-on AWS experience for corporate IT or infrastructure workloads
Networking, IAM, and compute in AWS environments
AWS certifications (Solutions Architect Associate, Sys Ops Administrator) are a plus

Travel & Other Considerations

Travel is rare. This position requires availability for after-hours on-call response as part of the team rotation.