Principal Systems Engineer

The Principal Systems Engineer owns the architecture and continuous improvement of San Mar's Compute platform: the servers, operating systems, virtualization, and cloud infrastructure that every San Mar application runs on. This is a mixed stack role by design. Windows Server, Linux, VMware, and Microsoft Azure are treated as one platform rather than four specialties, and a growing share of the work is codifying that platform in Terraform and pipelines rather than building it by hand.

The Principal Systems Engineer sets compute standards and reference architectures, leads modernization, and lifecycle work across the on premises and Azure environment, and is the highest level technical resource when something complex breaks.

• Own the architecture, standards, and reference designs for San Mar's Compute platform across Windows Server, Linux, VMware, and Microsoft Azure.
• Design, build, and operate infrastructure in Microsoft Azure, including landing zones, subscription and resource organization, RBAC, network integration, and cost and capacity management.
• Codify infrastructure as code in Terraform and configuration management in Ansible, delivered through Azure Dev Ops pipelines with version controlled, peer reviewed changes in Azure Repos, and automated security and compliance checks.
• Architect and administer Windows Server and directory services at scale, including Active Directory, Entra , DNS, DHCP, Group Policy, PKI, and failover clustering.
• Engineer and operate Linux as a first class platform, including build standards, configuration management, patching, hardening, and performance tuning.
• Architect and operate the VMware estate, including vSphere, vCenter, ESXi, and vSAN, with capacity planning, version lifecycle, and platform hardening.
• Own the container platform, including image supply chain, registry, orchestration, and the Compute, storage, and networking the containers depend on.
• Lead the hybrid cloud direction for Compute: what runs on premises, what moves to Azure, and how identity, backup, and recovery stay consistent across both.
• Define and drive the server, operating system, and hypervisor lifecycle, including patch and firmware strategy, hardware refresh, and end of support remediation.
• Drive observability, monitoring, alerting, backup, and disaster recovery across every Compute platform, including regular recovery testing rather than assumed recoverability.
• Lead complex infrastructure projects end to end, from requirements through implementation, stabilization, and post launch review.
• Lead major incident response and postmortems, and make sure the resulting platform improvements are documented and actually implemented.
• Evaluate and select platform technologies, and own the technical side of the relationship with Compute platform vendors.
• Develop architecture documentation, platform runbooks, and knowledge transfer material that raises the capability of the whole team.
• Mentor Systems Engineers at every level, and set the technical bar through design review and code review.
• Communicate technical risk, architectural decisions, and project status clearly to engineering teams and IT leadership.
• Perform other duties as assigned.
• Comply with all policies and standards.

• Bachelor's Degree Computer Science, Information Technology, or a related discipline, a relevant certification, or equivalent practical experience.
• 10+ years of hands on enterprise infrastructure experience, or an equivalent combination of education, certification, and hands on experience.
• Deep expertise in at least two of the following, and working proficiency in the rest:
  Windows Server and directory services, Linux, VMware virtualization, and Microsoft Azure.
• Demonstrated experience designing and operating infrastructure in Microsoft Azure, including identity, networking, and governance.
• Hands on experience building infrastructure as code with Terraform, and configuration management with Ansible or equivalent.
• Experience delivering infrastructure through CI/CD pipelines with version control, peer review, and automated policy or security checks. Azure Dev Ops and Azure Repos experience is a plus.
• Strong automation and scripting ability, for example Power Shell, Bash, or Python.
• Experience running a container platform in production, including registry, orchestration, and the infrastructure underneath it.
• Experience with enterprise storage and the protocols behind it, such as SAN, NAS, vSAN, iSCSI,…