Systems Engineer, Infrastructure

Description

The company is a national dermatology practice that acquires and partners with dermatology practices across the United States.

The role is centralized cloud and systems engineering, leading the design, security, resiliency and ongoing improvement of the company's platforms, working with internal teams, application owners, security staff, vendors and managed service providers to keep those platforms secure, scalable, reliable, well documented and aligned with company standards.

This is the technical lead position for Microsoft Azure, Azure Virtual Desktop, managed SQL, Web Application Firewall technologies, Microsoft 365, identity, endpoint management, backup, business continuity and disaster recovery.

Responsibilities

• Act as technical lead and subject matter expert for the Azure environment, covering architecture, virtual machines, networking, storage, security, monitoring, resiliency and lifecycle management.
• Design, build and improve Microsoft 365, Entra ID, Exchange Online, Intune, endpoint, identity and supporting cloud solutions.
• Run Azure SQL and Microsoft SQL Server workloads, including backups, maintenance plans, performance tuning, disaster recovery, access control and security settings.
• Design, build, run and tune Azure Virtual Desktop, including host pools, session hosts, application delivery, profiles, images, monitoring, capacity planning, performance and security.
• Design, build, test and maintain backup, business continuity and disaster recovery solutions using Azure Backup, Azure Site Recovery and Microsoft 365 data protection, including recovery testing, retention and recovery documentation.
• Create and keep current architecture diagrams, baseline configurations, runbooks, monitoring standards, implementation plans, disaster recovery and business continuity plans, and recovery test procedures.
• Set, document and regularly check recovery point objectives (RPOs), recovery time objectives (RTOs), backup validation, restore processes and disaster recovery test requirements for critical infrastructure and business systems.
• Work with application owners and vendors to troubleshoot database problems, analyze performance, support capacity planning and enforce database administration standards.
• Design, build, maintain and tune Web Application Firewall protection for external applications, web services, APIs and business-critical systems.
• Set up and maintain application-layer protection, including managed and custom WAF rules, rate limiting, geographic restrictions, logging, monitoring, alerting and incident troubleshooting.
• Lead complex Tier 3 escalations, root-cause analysis, capacity planning, resilience work and platform lifecycle upgrades.
• Automate repeatable infrastructure and admin tasks with PowerShell, Microsoft Graph, APIs and approved orchestration tools.
• Guide Systems Administrators and IT Support Analysts, share knowledge, and coordinate infrastructure work with security, automation, application owners, vendors and managed service providers.

Requirements

• Advanced experience designing, administering, securing and troubleshooting Microsoft Azure environments.
• Advanced experience with Microsoft 365, Entra ID, Exchange Online, Intune, PowerShell and enterprise endpoint management.
• Experience implementing and supporting Azure Backup, Azure Site Recovery, backup retention policies, recovery testing and disaster recovery solutions.
• Experience running Azure Virtual Desktop, including host pools, user profiles, image lifecycle, application publishing, monitoring and performance tuning.
• Solid grasp of business continuity planning, disaster recovery methods, RPO and RTO objectives, backup validation and infrastructure resiliency.
• Experience administering Azure SQL and Microsoft SQL Server, including backup, recovery, performance tuning, maintenance and security.
• Experience implementing and managing Web Application Firewall technologies and application-layer security controls.
• Strong knowledge of Azure networking, identity, monitoring, storage, resiliency and cloud security.
• Experience automating infrastructure administration with PowerShell, Microsoft Graph, REST APIs or comparable tools.
• Proven ability to lead complex cloud and systems projects from discovery through implementation and ongoing support.
• Strong skills in documentation, troubleshooting, prioritization and communication, including turning technical risk into practical business advice.
• 6+ years designing, implementing and supporting Microsoft Azure, Azure Virtual Desktop, Microsoft 365, identity, endpoint, managed SQL, backup, disaster recovery, application protection and enterprise infrastructure.
• Preferred: a bachelor's degree in Information Technology, Information Systems, Engineering or a related field. Equivalent advanced professional experience may be considered.
• Preferred: Microsoft Certified Azure Administrator Associate or Azure Solutions Architect Expert.
• Nice to have: Azure Database Administrator Associate, CompTIA Security+, or comparable cloud, database and security certifications.

Conditions

Full-time.

Hybrid work.

The company applies its equal-employment policy to recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leave, compensation and training.