Systems Engineer - Senior
Full-time Mid-Senior LevelJob Overview
The Senior Systems Engineer is primarily responsible for the administration and operation of the firm’s enterprise identity and privileged access platforms, with primary focus on Microsoft Entra ID infrastructure, identity governance, and CyberArk privileged access management. This role requires in-depth knowledge of Entra ID (Azure AD), Active Directory, Conditional Access, Privileged Identity Management (PIM), and CyberArk, along with strong proficiency in PowerShell automation. A solid understanding of hybrid identity (Entra Connect), identity protocols, and secure access controls is essential.
The ideal candidate is a hands-on engineer with strong troubleshooting capabilities, a self-starter mindset, and demonstrated experience delivering identity and access initiatives from design through implementation in a global enterprise environment.
Job Responsibilities:
· Identity & Access Management
o Manage identity lifecycle processes (joiner/mover/leaver)
o Implement Conditional Access, MFA, and risk-based controls
o Maintain role-based access models
o Administer enterprise applications and SSO integrations
· Active Directory
o Plan and Deploy AD Sites and Services, Promote/Demote Domain Controllers
o AD user migration using ADMT and Quest
o Support Multiple AD forests and trust between them
o Automate AD health checks, Identity Lifecyle management, etc.
o Setup and review AD health assessments to remediate any vulnerabilities
· Privileged Access (CyberArk)
o Operate CyberArk PAM platform
o Manage privileged account onboarding and credential rotation
o Implement just-in-time access
o Align CyberArk with Entra PIM
· Secure Cloud Administration
o Manage Microsoft Entra ID
o Protect administrative roles and tenant configurations
o Support secure application onboarding
· Identity Integration & Transformation
o Support hybrid identity (Entra Connect)
o Assist with M&A integrations
o Drive cloud-native identity adoption
· Automation & Operations
o Automate tasks using PowerShell
o Improve monitoring and reporting
o Support identity incident escalation
· Serve as an escalation point and provide guidance and direction for the resolution of escalated issues and/or complex production, application or system problems
· Must be able to accommodate schedule flexibility to deal with escalations and occasional changes during non-core business hours