Senior Systems Engineer Job Foxborough area,Massachusetts USA,IT/Tech

Bonus Eligible:
Yes

SUMMARY

Senior Systems Engineer serves as a technical leader responsible for the design, implementation, and administration of enterprise infrastructure across hybrid environments, with a primary focus on Microsoft Azure. This role leads the architecture and governance of Azure Landing Zones, subscription strategy, Azure Dev Ops (ADO), and Infrastructure as Code (IaC) using Bicep to deliver scalable, secure, and repeatable solutions.

The position also provides engineering leadership across on‑premises systems, including Active Directory, virtualization platforms, and enterprise applications, ensuring alignment with organizational standards, security frameworks, and operational best practices.

DUTIES AND RESPONSIBILITIES

Cloud Architecture & Azure Engineering

Serve as a Lead Engineer and Administrator for Azure IaaS and associated tools and technologies
Design and maintain Azure Landing Zone environments. Implement, document, and enforce best practices, including subscription architecture and management and resource groups, storage accounts, and policy governance
Implement Infrastructure as Code (IaC) solutions using Bicep for consistent and scalable deployments
Design and manage Azure Container Registry (ACR) lifecycle and integrations
Ensure adherence to cloud security, compliance, and operational standards

Azure Dev Ops (ADO) & Automation

Administer and optimize Azure Dev Ops (ADO) environments.
Design, deploy, and maintain Azure Dev Ops agent pools
Ensure scalability, performance, and security of Dev Ops pipelines and agent infrastructure
Integrate ADO pipelines with Azure services, ACR, and IaC (Bicep) deployments

Enterprise Systems & Platform Administration

Serve as administrator for VMware environments, Recover Point for Virtual Machines, Okta SSO operations, Exchange Server and Microsoft 365 (Exchange Online), Linux servers (Red Hat, Ubuntu)

Actively build, harden, secure, and implement new technologies used in the organization, with vendor support where needed

Maintain Active Directory and Azure Active Directory best practices, standards, and organization. Plan, design, and implement Active Directory Group Policy Objects and inTune policies.

Plan and implement various hardware and software projects, ensuring hardening, security design, and network standards are met. Communicate with Management on project progress and integration time frames.

Serve as a Systems Lead on application and server implementation projects

Create and maintain detail as built and support documentation for all systems.

Manage external vendor service and implementation initiatives.

Special projects and assignments as business dictates

Responsible for the creation, maintenance and control of all personal identifiable information or any other information protected by Confidentiality and Privacy Standards see Mass Regulations on Personal Identity Regulations and HIPAA

SUPERVISORY RESPONSIBILITIES

This position has no direct supervisory responsibilities but will serve as a technical mentor and escalation point of contact to others in the Technology Division

SKILLS AND QUALIFICATIONS

Bachelor's degree in Information Technology or relevant experience
4-6 years' experience as a Systems Administrator, supporting Windows Server Environments and Active Directory and 3+ years' experience as a Systems Engineer, planning and implementing server, application, and cloud systems projects
Experience leading and managing an Azure Infrastructure as a Service (IaaS) environment is a must, including Infrastructure as Code (Bicep, Terraform, etc), Resource Group Management, Policy Development, Cloud Governance, etc
Experience with Power Shell or similar scripting language
Familiarity with Zscaler and Crowdstrike integrations with ALZ;
Familiarity with Load Balancing configuration (Citrix Net Scaler)
Linux experience is preferred
Proven abilities to manage multiple projects simultaneously.
Ability to independently resolve identified vulnerabilities in a timely manner based on defined standards.
Ability to participate in operational responsibilities as situations dictate (support escalation, identity & account management, platform maintenance, system…