[Hiring] Systems Engineer @Sarnova

Role Description

We’re looking for a seasoned Systems Engineer to own the reliability, security, and performance of our core infrastructure across on-prem and cloud. You’ll design and implement resilient platforms, automate operations at scale, and partner closely with security, networking, and application teams to deliver highly available services.

Key Responsibilities

• Design & Architecture:
  • Plan and implement enterprise infrastructure (Windows Server/Linux, virtualization, storage, networking, identity, and cloud services) with a focus on scalability, resiliency, and cost effectiveness.
• Cloud & Identity:
  • Administer Azure/AWS services (compute, storage, networking, IAM), Azure Active Directory/Entra ID, SSO/MFA, conditional access, and identity governance.
• Security & Compliance:
  • Harden systems, patch at scale, manage certs/keys/secrets, and ensure adherence to internal standards (e.g., the company password standard).
  • Ensure privileged‑user practices align with policy and audit requirements.
• Collaboration:
  • Work closely with Security and external partners to remediate findings, tune detections, and prepare for assessments/pen tests.
• Service Ownership:
  • Own core services (AD/DNS/DHCP, virtualization, file/print, backup/DR, email/M365, endpoint management), including lifecycle, roadmaps, and change management.
• Networking (with NetOps):
  • Contribute to L2/L3 troubleshooting, VLAN/subnet design, firewalls/NGFW policies, VPN, and zero‑trust segmentation.
• Business Continuity:
  • Design and test high‑availability and disaster recovery strategies; conduct tabletop exercises; meet RTO/RPO targets.
• Documentation & Runbooks:
  • Maintain architecture diagrams, SOPs, and recovery playbooks; mentor engineers through code reviews and technical guidance.

Qualifications

• Bachelor’s degree in Information Technology, or related field.
• 2–5 years in systems engineering or infrastructure roles supporting production environments.
• Expert knowledge of Windows Server (AD, Group Policy, PKI) and solid proficiency with Linux (systemd, SELinux/AppArmor, package management).
• Hands‑on with virtualization (VMware vSphere/ESXi or Hyper‑V) and enterprise storage/backup solutions.
• Proven experience administering Azure/AWS and M365/Exchange Online, including identity, security baselines, and cost governance.
• Strong automation skills (PowerShell, Bash) and experience with IaC/config‑management tools (Terraform, Ansible, DSC).
• Solid understanding of networking fundamentals (TCP/IP, routing/switching, DNS/DHCP, VPN, load balancers, firewalls).
• Track record of delivering secure architectures, patch management at scale, and meeting compliance requirements aligned to internal standards and privileged‑user controls.
• Excellent troubleshooting, incident response, and stakeholder communication skills; ability to lead complex investigations under time pressure.

Preferred Qualifications

• Experience with Zero Trust patterns, conditional access, and device compliance.
• Familiarity with SIEM/SOAR platforms and collaborating with a SOC/vCISO.
• Experience with BGP/SD‑WAN, micro‑segmentation, and PKI lifecycle management.
• Certifications such as Microsoft (AZ‑104, AZ‑305, SC‑300), AWS (SysOps/SA), VMware (VCP), Linux (RHCSA/LPIC), Security (CISSP/GCWN/GCSA).

Benefits

• Competitive salary, commensurate with experience.
• Comprehensive benefits package, including 401(k) Plan.