Senior System Engineer

Capio Group is looking for an experienced Senior System Engineer!
Full-time employee - Sacramento
Salary: $130,000 - $135,000

Capio Group is a California-based Information Technology Consulting firm serving the public sector since 2010. We assist the Government in delivering large, complex systems and solutions. Capio Group is a small, but quickly growing firm that mixes good ideas, with great people, to achieve extraordinary results for our clients. We offer the salary and benefits of the bigger companies, with the added bonus of a flexible workplace and a great work-life balance.

Capio Group is looking for an experienced Senior System Engineer with in-depth knowledge and hands‑on experience in Software as a Service (SaaS) systems. The ideal candidate should be skilled in implementing, enhancing, configuring, customizing, and validating SaaS solutions. The Senior System Engineer shall maintain good working knowledge of SaaS applications such as Service Now, Salesforce, Electronic Content Management, Jama, and Riskonnect.

In addition, responsibilities will include providing technical support, resolving defects, building dashboards, managing vendors, and overseeing contract management. This position is expected to work within the Enterprise IT Solutions & Innovation Division.

The Senior System Engineer support various objectives, which may include, but are not limited to, the following:

• Technical Evaluation:
  Review vendor architecture, Application Programming Interface (API) capabilities, and system compatibility.
• Security & Compliance Auditing:
  Verify System and Organization Controls 2 (SOC
  2) and ISO 27001 compliance status.
• Identity Readiness Planning:
  Confirm the app supports Single Sign-On (SSO) with Entra .
• Service Level Agreements (SLA) Verification:
  Review vendor SLA for acceptable uptime and support response times.

2. Deployment and Integration Phase:
During rollout, the Senior System Engineer builds the infrastructure required for users to access the tool.

• Identity & Access Management (IAM):
  Integrate the application with the identity provider (e.g., Entra ).
• Role-Based Access Control (RBAC):
  Define permissions, user groups, and admin roles.
• Network & Endpoint Security:
  Configure IP whitelisting, Conditional Access policies, and Mobile Device Management (MDM) profiles.
• Data Integration:
  Connect APIs and data pipelines to existing internal systems or databases.

3. Operational Management Phase:
The Senior System Engineer must manage the daily phase of maintaining availability, security, and user support.

• User Lifecycle Management:
  Oversee daily onboarding, offboarding, and transfer requests.
• Monitoring & Alerting:
  Track application uptime, API latency, and vendor status pages.
• Incident Response:
  Troubleshoot outages, manage vendor support tickets, and communicate downtime to users.

4. Optimization and Governance Phase:
The Senior System Engineer must continually refine the footprint to control costs and maintain compliance.

• Software as a Service (SaaS) Spend Optimization:
  Audit usage metrics to reallocate or cancel inactive, expensive licenses.
• Feature Lifecycle Management:
  Test and roll out vendor updates, new features, and major user interface (UI) changes.
• Regular Compliance Audits:
  Conduct quarterly user access reviews to ensure permissions match current job roles.

5. Decommissioning and Offboarding Phase:
When replacing or retiring a SaaS app, the Senior System Engineer securely removes it from the enterprise environment.

• Data Extraction & Archival:
  Download all enterprise data, audit logs, and configurations in reusable formats.
• Termination of Access:
  Disable SSO integrations, API keys, and System for Cross-domain Identity (SCIM) to prevent access leaks.
• Data Destruction Verification:
  Request a formal certificate of data erasure from the vendor.
• Contract and Domain Name System (DNS) Cleanup:
  Coordinate contract termination with procurement and delete related DNS records or subdomains.

6. Transfer of knowledge to appropriate client employees is required, along with any requested materials and content for transfer of knowledge.