Systems Engineer

The job

The Systems Engineer handles the work the service desk cannot finish, and owns the projects that move a client from the infrastructure they have to the infrastructure they should have.

You are the escalation point for infrastructure problems and the technical owner of migrations and onboardings. There is no layer above you quietly correcting things afterwards, which is the appeal of the job for the right person and the reason it is not for everybody.

Full-time and exempt. Reports to the Infrastructure and Security Architect.

• Take ownership of escalated infrastructure problems and see them through to resolution
• Deploy, configure, and maintain Windows Server environments across many client sites
• Administer Microsoft 365 tenants:
  Exchange Online, SharePoint, Teams, Entra , Intune, and the security and compliance configuration
• Design, deploy, and maintain virtualization
• Troubleshoot and improve client networks: switching, routing, segmentation, VPN, and wireless

• Implement and maintain endpoint security, EDR, email security, and multi-factor authentication
• Own backup and disaster recovery, including the test restores that prove it would actually work

• Plan and deliver client onboardings, server projects, and cloud migrations
• Write the technical documentation and internal standards the rest of the team works from
• Coach the IT Support Technicians, and be the person they escalated to
• Help scope and plan projects before they are sold

Applicants must meet all of the following.

• Three or more years of professional IT experience in infrastructure or systems administration
• Windows Server administration:
  Active Directory, DNS, DHCP, Group Policy, file and print
• Microsoft 365 tenant administration in a live business environment, not end-user support only
• Virtualization experience with Hyper‑V, VMware, or equivalent
• Networking you can reason from rather than recite: TCP/IP, segmentation, routing, firewall rules, DNS
• Backup and disaster recovery experience that includes actually performing restores
• The ability to write documentation another engineer can follow without asking you anything
• The ability to explain a technical constraint and the options around it to a business owner
• A valid driver's license
• Legal authorization to work in the United States without sponsorship
• Able to work on-site full-time at the Painesville or Hudson office
• Availability for scheduled after-hours maintenance and migration work

• Microsoft certifications such as AZ‑800, AZ‑801, MD‑102, or MS-102
• CompTIA Network+ or Security+
• Firewall administration and managed networking:
  Fortinet, Sonic Wall, Meraki, Ubiquiti, or equivalent
• Prior managed service provider experience, which is the single most useful thing on this list
• Azure infrastructure and hybrid identity
• Power Shell scripting and automation
• Experience with remote monitoring and professional services automation platforms

• Not remote or hybrid. On‑site five days a week, with travel to client sites. The regional infrastructure market has largely gone remote, and we know this is a real concession we are asking you to make.
• Not a single‑environment role. You will hold many client environments in your head at once, each with different standards and constraints.
• Not a role with a safety net above you. Escalations stop with you and the architect.
• Includes after‑hours work. Migrations and cutovers happen when the client is closed.

• Escalated infrastructure problems resolved on your own, without supervision
• Projects delivered on the timeline the client was given
• Every environment you touch left measurably more secure and less fragile than you found it
• Documentation and standards the rest of the team adopts without anybody enforcing it
• Clients asking for you by name

Office and client sites. Involves lifting and carrying equipment up to 50 pounds, working in server rooms and equipment closets, and driving to client locations. Occasional after-hours and weekend work for scheduled maintenance and migrations.