SENIOR SYSTEMS ENGINEER

Job Summary

The Senior Systems Engineer for Enterprise Cloud Identity
& Security owns the organization's identity, authentication, authorization,
trust boundaries, and security posture across both cloud and hybrid identity
systems. This role administers Entra ID users, groups, domains, privileged
roles, identity governance, hybrid identity integration with Active Directory,
and the full authentication and SSO architecture. They define crosstenant
trust controls, device identity posture, Intune policy enforcement, Conditional
Access requirements, and the identity and security signals that downstream
systems-including Microsoft 365 and Copilot-depend on. This role ensures only
trusted users, devices, and external identities can authenticate and gain
access under the correct security conditions, establishing the foundational perimeter
that all applications rely on for secure operation.

Applies and demonstrates mastery of the technical skills and knowledge of principles, theories and concepts and industry practices and standards to perform technical planning, system integration, verification and validation, cost and risk and supportability and effectiveness analysis for total systems.

Essential Functions & Key Responsibilities

• 
  
  • Azure
    AD / Entra ID administration - users, groups, admin roles, privileged
    identity management, domain management.
  • Coordinating
    Identity governance with IT Security - delegated admin models (GDAP/DAP),
    access reviews, leastprivilege role design, directory hygiene.
  • Active
    Directory (onprem) administration & synchronization - hybrid
    identity, provisioning, inter-directory sync (Entra Connect/Cloud Sync).
    Authentication
    architecture & SSO - SAML, federation, certificates, token lifecycles,
    claim mapping.
  • B2B
    trust controls - crosstenant access settings, default external
    collaboration posture, identity provider federation, inbound/outbound
    trust rules.
  • Device
    identity posture: Maintain strong identity signals across Entra Join /
    Hybrid Join, device trust, stale device cleanup, and platform SSO. Ensure
    all devices provide trustworthy identity claims so Copilot and Security
    Copilot rely on secure, highintegrity identity, device, MFA, risk, and
    access posture.
  • Intune
    policy and mobile device management (iOS, Android, Windows): Oversee the
    full Intune policy lifecycle across all managed endpoints, including
    configuration of MDM/MAM profiles, deployment of compliance policies,
    enforcing device and location controls, and ensuring compliance signals
    accurately feed Conditional Access.
  • Secure
    cloud data flow exchange oversight to external platforms (e.g. HR,
    payroll, and benefits), ensuring correct provisioning mappings,
    Conditional Access protections, and compliance alignment for all cloud
    data exchanges.
  • This
    role works in partnership with the Security team, which owns global
    compliance, DLP, MFA, SIEM, and SOC operations.
  • Coordinating
    with other IT or business teams when necessary.
  • Meets with IT leadership to assess and define the system requirements.
  • Analyzes network data and infrastructure to determine inefficiencies and problems. Maintains expert operating efficiency and stability, ensure the security and integrity of all systems and data, and respond to complex outages and other issues.
  • Manages project timelines, budgets, and documentation. Collaborates with project teams to enable them with infrastructure, system technology architecture, diverse and complex projects and products.
  • Leverages tools and custom applications to monitor the operational status of applications, infrastructure, networks, databases to optimize system performance.
  • Troubleshoots technical issues and prepares root cause analysis of service interruptions, recovery and creating preventative measures.
  • Prepares network analytics, data reports, and operational manuals.
  • Keeping abreast of the latest advancements in technology, protocols, and best practices.
  • Coordinates with department leadership to plan, design, and schedule the release of all software, hardware, and operating system updates.
  • Develops and enhances processes and technical documentation, create back-up procedures, test plans, and reports.
  • Provides coverage in
    a rotating, on-call after hours schedule.
  
  Performs other duties as required. These duties may include assignments in job classifications and departments other than the primary assignment.

Minimum Other. Computer Science or related technical degree

Experience Requirements

4-8 or more years experience year(s) Experience with Microsoft systems and solutions, on premise and in the cloud

year(s) Experience in a global networked environment(s) as well as experience in aerospace industry strongly desired.

year(s) Experience in creating and managing project plans and implementations and assisting with other teammates' projects, providing technical guidance and support.

year(s) Experience in administering and assisting with planning, implementing and executing incident response and disaster recovery procedures.

year(s) Experience with Windows server environment both on premise and cloud based; solid understanding of Storage and Virtualization management.

Skills and Competencies

• Communicates effectively using electronic media and in written and verbal forms.
• Excellent verbal and written skills and the ability to develop and deliver executive level presentations.
• Operates standard office equipment and demonstrates competence in the use of standard software applications such as Microsoft Word, Excel and Power Point.
• Interpersonal and team building skills and the ability to transform that data into new business processes using analytical, problem identification, and resolution skills.
• Desire to work closely with IT and Business teams to deliver top tier customer service to all.
• Knowledge of IT Security best practices and keeping that at the front of all projects.
• Expert working knowledge in Product Lifecycle Management\Product Data Management (PLM\PDM) concepts and administration.
• Solid analytical, problem identification and resolution skills to quickly resolve system failures to minimize outages and network interruptions in a 24X7X365 LAN/WAN.

• Works under general direction.
• Receives guidance as to results expected and to resolve complex and unusual problems.
• Exercises latitude in determining activities and approaches within wide parameters.