Systems Engineer II

Under limited direction, the Systems Engineer II plans, engineers, implements, and sustains mission-critical technology systems supporting District operations. The classification provides senior-level technical leadership, handles complex escalations, leads projects, coordinates vendors, and mentors Systems Engineer I staff. This single classification accommodates two primary specialty tracks while preserving one title/grade:

• Track A
  - Network/Infrastructure (traditional IT):
  Enterprise platforms (servers, Hyper-V virtualization, storage, networking, identity, M365), endpoint management, cybersecurity and DR/BCP, end-user compute strategy, and AI-enabled automation.
• Track B
  - Transit Systems / Train Control (operational systems):
  Wayside/central/vehicle systems integration (e.g., PTC, signal & train control interfaces, SCADA/telemetry, CAD/AVL, real-time passenger info, fare systems, station devices), operational networks, and safety/availability engineering.

This advanced position is distinguished by its technical leadership role, independent decision-making authority, and responsibility for complex system implementations. The role requires extensive experience with enterprise-level technologies and the ability to design solutions that meet organizational objectives.

The Systems Engineer II serves as a subject matter expert and mentor, providing technical guidance to junior staff while managing high-priority projects and vendor relationships.

The Systems Engineer II reports to the Program Network Operations Manager for Track A and either Train Control Systems Manager or Transit Systems Manager for Tack

B. The System Engineer II exercises functional supervision over Systems Engineer I positions. This role provides technical leadership and mentoring while maintaining accountability for project deliverables and system performance.

Normal working conditions include office and field environments with regular travel between district facilities. Evening and weekend work is regularly required for system maintenance, upgrades, and emergency response. On-call availability for critical system issues is expected.

Essential Functions Duties may include, but are not limited to:

• Lead end-to-end engineering for assigned systems: requirements, design, build, test, deploy, operate, and continual improvement.
• Own complex escalations and root-cause analysis; develop runbooks, standards, and diagrams.
• Plan and execute lifecycle/refresh, patching, vulnerability remediation, backups, and disaster recovery tests.
• Manage vendors/SOWs; evaluate technologies; develop budget and replacement recommendations.
• Create and maintain comprehensive technical documentation and DR/continuity procedures.
• Mentor Systems Engineer I; provide cross-functional coordination with Operations, Maintenance, Facilities, IT, and external partners.

• Engineer and administer Windows Server environments;
  Active Directory (domains, sites, GPOs, trusts) and Entra , including hybrid identity synchronization; identity & access hardening, including conditional access and multi-factor authentication.
• Design/operate virtualization (Hyper-V and/or VMware vSphere), including host configuration and virtual machine provisioning, resource allocation, checkpoints, and lifecycle management, and enterprise storage (SAN/NAS); performance and capacity planning.
• Lead Microsoft 365 (Exchange Online, SharePoint, Teams, security/compliance) and endpoint management strategy; guide VDI-to-physical (or hybrid) transitions where applicable.
• Own the District's endpoint management platform (e.g., Microsoft Intune), including device enrollment, configuration profiles, application deployment, compliance policies, and automated provisioning; remediate endpoint issues at scale.
• Engineer LAN/WAN switching/routing, segmentation/VLANs, network security controls, and monitoring/telemetry.
• Configure and maintain switches, wireless access points, and routers; serve as secondary network resource to the Program Network Operations Manager, providing coverage during absences, after-hours events, and major incidents.
• Design and maintain the controls that tie devices, identity, and the network together, including device compliance, certificate-based authentication, 802.1X, and network access control; resolve cross-domain issues…