Senior Systems Engineer

Position: SENIOR SYSTEMS ENGINEER
Position Details Req  Job Title SENIOR SYSTEMS ENGINEER Division Corporate Shift First Shift

Job Summary

Job Summary The Senior Systems Engineer for Enterprise Cloud Identity
& Security owns the organization’s identity, authentication, authorization,
trust boundaries, and security posture across both cloud and hybrid identity
systems. This role administers Entra , groups, domains, privileged
roles, identity governance, hybrid identity integration with Active Directory,
and the full authentication and SSO architecture. They define cross‑tenant
trust controls, device identity posture, Intune policy enforcement, Conditional
Access requirements, and the identity and security signals that downstream
systems—including Microsoft 365 and Copilot—depend on. This role ensures only
trusted users, devices, and external identities can authenticate and gain
access under the correct security conditions, establishing the foundational perimeter
that all applications rely on for secure operation. Applies and demonstrates mastery of the technical skills and knowledge of principles, theories and concepts and industry practices and standards to perform technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analysis for total systems.

Essential Functions &

Key Responsibilities Azure AD / Entra
administration — users, groups, admin roles, privileged identity
management, domain management.

Coordinating Identity
governance with IT Security — delegated admin models (GDAP/DAP), access
reviews, least‑privilege role design, directory hygiene.

Active Directory (on‑prem)
administration & synchronization — hybrid identity, provisioning,
inter-directory sync (Entra Connect/Cloud Sync).Authentication
architecture & SSO — SAML, federation, certificates, token life cycles,
claim mapping.

B2B trust controls —
cross‑tenant access settings, default external collaboration posture,
identity provider federation, inbound/outbound trust rules.

Device identity posture:
Maintain strong identity signals across Entra Join / Hybrid Join, device
trust, stale device cleanup, and platform SSO. Ensure all devices provide
trustworthy identity claims so Copilot and Security Copilot rely on
secure, high‑integrity identity, device, MFA, risk, and access posture.

Intune policy and mobile
device management (iOS, Android, Windows):
Oversee the full Intune policy
lifecycle across all managed endpoints, including configuration of MDM/MAM
profiles, deployment of compliance policies, enforcing device and location
controls, and ensuring compliance signals accurately feed Conditional
Access.

Secure cloud data flow
exchange oversight to external platforms (e.g. HR, payroll, and benefits),
ensuring correct provisioning mappings, Conditional Access protections,
and compliance alignment for all cloud data exchanges.

This role works in
partnership with the Security team, which owns global compliance, DLP,
MFA, SIEM, and SOC operations.

Coordinating with other
IT or business teams when necessary.

Meets with IT leadership to assess and define the system requirements.

Analyzes network data and infrastructure to determine inefficiencies and problems. Maintains expert operating efficiency and stability, ensure the security and integrity of all systems and data, and respond to complex outages and other issues.

Manages project timelines, budgets, and documentation. Collaborates with project teams to enable them with infrastructure, system technology architecture, diverse and complex projects and products.

Leverages tools and custom applications to monitor the operational status of applications, infrastructure, networks, databases to optimize system performance.

Troubleshoots technical issues and prepares root cause…