IT Infrastructure Systems Engineer

Onto Innovation is a leader in process control, combining global scale with an expanded portfolio of leading-edge technologies that include: 3D metrology spanning the chip from nanometer-scale transistors to micron-level die-interconnects; macro defect inspection of wafers and packages; metal interconnect composition; factory analytics; and lithography for advanced semiconductor packaging. Our breadth of offerings across the entire semiconductor value chain helps our customers solve their most difficult yield, device performance, quality, and reliability issues.

Onto Innovation strives to optimize customers’ critical path of progress by making them smarter, faster and more efficient.

Job Summary & Responsibilities We are seeking a highly skilled Sr. Systems & Infrastructure Engineer to join a dynamic, security-first IT team operating across on-premises, hybrid cloud, and modern cloud-managed environments. This role spans traditional enterprise infrastructure, modern cloud operations (Cloud Ops), Microsoft 365 administration, AI-augmented tooling, and endpoint management through Microsoft Intune and Windows Autopilot. The ideal candidate brings deep technical depth, an Agile mindset, and a passion for continuous improvement in both operations and security posture.

Key Responsibilities Virtualization & On-Premises Infrastructure Lead VMware vSphere/ESXi architecture, cluster operations, lifecycle management, and performance tuning.

Support HPE Synergy compute infrastructure, firmware updates, and template management.

Administer enterprise storage platforms including Pure Storage and HPE systems; manage Cloudian Hyper Store object storage and capacity planning.

Support Komprise data lifecycle management, analytics, and file tiering optimization.

Participate in data center buildouts, hardware refresh planning, rack/power design, and operational support.

Manage PKI infrastructure, certificate lifecycle, and CA operations.

Cloud Operations (Cloud Ops)
Administer and optimize Azure and/or AWS cloud environments, including resource governance, cost management, and infrastructure-as-code (IaC) pipelines.

Manage cloud networking, virtual machine operations, storage accounts, and security group configurations.

Support cloud-native DR architectures and hybrid on-prem/cloud failover workflows.

Implement tagging, policy, and RBAC controls to maintain cloud governance standards.

Contribute to Fin Ops practices, including cost attribution, rightsizing, and cloud spend visibility reporting.

Microsoft 365 & Modern Workplace Administration Administer Microsoft 365 tenant services including Exchange Online, SharePoint, Teams, One Drive, and Entra  (Azure AD) in a hybrid environment.

Manage Microsoft Intune for cloud-based endpoint management, compliance policy enforcement, app deployment, and conditional access.

Design and operate Windows Autopilot deployment profiles for zero-touch provisioning of new and replacement devices.

Backup, Disaster Recovery & Resilience Manage Rubrik backups, SLA policies, archival workflows, replication, and orchestrated DR operations including Cloud Vault air-gap capabilities.

Implement and maintain Zerto and/or Rubrik Orchestrator for automated failover, recovery workflows, and DR testing.

Contribute to DR runbooks, tabletop exercises, and hybrid on-prem/cloud recovery architecture design.

Apply structured recovery zone models (e.g., Red/Yellow/Green) to ensure clean-state recovery in breach scenarios.

Security Operations & Vulnerability Management Execute vulnerability scanning, patch management workflows, and risk-based remediation tracking across Windows, Linux, and cloud workloads.

Support system hardening, CIS benchmarking, and security baseline enforcement across server and endpoint fleets.

Contribute to identity security posture including PAM integration, privilege tiering, and access review processes.

Assist with compliance evidence collection and audit readiness activities aligned to ISO 27001, SOX, and GDPR requirements.

AI-Augmented Operations & Automation Leverage AI-assisted tooling and agentic workflows (e.g., Copilot for M365, AI-enhanced ITSM, automated runbooks) to accelerate…