Tier 3 IT Systems Engineer

Our client is seeking a highly skilled and experienced Tier 3 IT Systems Engineer to join their onsite technical operations team in the Greater Detroit Metro Area. This is the highest-level individual engineering role within the organization, responsible for resolving the most complex, escalated, and time-sensitive tickets across their client base. The Tier 3 IT Systems Engineer serves as the final technical escalation point within the support structure and is expected to handle any ticket, any problem — from advanced network engineering and Windows infrastructure challenges to intricate application and security integration issues.

This role requires a self-driven professional who thrives in a high-volume, fast-paced environment. You will manage approximately 30 tickets per day across a five-day workweek, leveraging Autodesk to log, track, and document all work with precision. You will work closely with Tier 1 and Tier 2 technicians, providing mentorship and escalation support, while also interfacing directly with clients to deliver professional, expert-level service.

This is a fully onsite position.

• Manage and resolve approximately 30 support tickets per day, Monday through Friday, using Autodesk as the primary ticketing and documentation platform.
• Serve as the final escalation point for complex and unresolved issues from Tier 1 and Tier 2 technicians — no ticket is beyond scope.
• Accurately log all work efforts, resolution steps, root-cause analysis, and follow-up actions in Autodesk in real time.
• Triage, prioritize, and resolve multi-client incidents simultaneously, balancing urgency, client impact, and SLA requirements.
• Identify recurring ticket patterns and elevate systemic issues for permanent resolution or proactive remediation.

• Deploy, configure, manage, and troubleshoot Windows Server environments (2016, 2019, 2022) across physical, virtual, and cloud platforms.
• Administer and maintain Active Directory, Group Policy (GPO), DNS, DHCP, and domain trust relationships for client environments.
• Manage Microsoft 365 tenants including Exchange Online, SharePoint, Teams, Intune, and Azure Active Directory (Entra ).
• Perform advanced troubleshooting of Windows workstations and servers, including OS-level diagnostics, performance analysis, and crash dump review.
• Administer and support virtualization platforms including Hyper‑V, VMware vSphere/ESXi, and Azure Virtual Machines.
• Manage patch management workflows, system health monitoring, and endpoint compliance reporting.
• Support and troubleshoot Microsoft Azure services including Azure AD, Azure Backup, Azure Site Recovery, and cloud-hosted workloads.
• Design, configure, and troubleshoot complex LAN/WAN network environments for multi‑site clients.
• Administer and support enterprise-grade firewalls, managed switches, routers, and wireless access point systems from vendors including Cisco, Fortinet, Sonic Wall, Meraki, and Ubiquiti.
• Configure and troubleshoot routing protocols, VLANs, inter‑VLAN routing, QoS policies, and NAT/PAT rules.
• Deploy and manage VPN solutions including site‑to‑site and client VPN configurations using SSL, IPSec, and SASE frameworks.
• Perform advanced packet capture and network analysis using tools such as Wireshark to diagnose latency, packet loss, and connectivity issues.
• Troubleshoot WAN connectivity, ISP circuit issues, BGP/OSPF routing, and SD‑WAN configurations.
• Maintain up-to-date network diagrams, IP address management records, and network topology documentation in Autodesk and associated documentation tools.

• Support, configure, and respond to alerts from Endpoint Detection and Response (EDR) and Managed XDR (MXDR) platforms.
• Assist in the configuration and monitoring of Security Information and Event Management (SIEM) solutions.
• Perform malware investigation, isolation, and remediation on compromised endpoints and servers.
• Implement and enforce multi‑factor authentication (MFA), Conditional Access policies, and identity governance controls.
• Support client environments in alignment with CMMC, NIST 800-171, HIPAA, and SOC 2 compliance frameworks…