[Hiring] Senior Systems Engineer @Nexus Technologies LLC

Role Description

The L3 Systems Engineer is a hands-on senior engineering role within the NexusTek Engineering Center, the company's dedicated L3 Center of Excellence for the hybrid cloud stack. This role carries a deep, hire-in specialization in AWS, with Azure and GCP experience preferred and expected to grow on the job as the engineer supports environments across all three public clouds, plus on-premises infrastructure, for mid-market and enterprise managed services clients as well as internal projects and initiatives. This is a fully remote position with limited travel.

Work Environment

• Fully remote — open to candidates coast to coast within the United States - working East Coast business hours.
• Limited travel is required; engineering, incident, and client-facing work is largely performed remotely.
• Rotational on-call schedule shared across the team; this is a required responsibility of the role, and rotation frequency may vary based on team and business needs.

Core Responsibilities

• Own resolution of escalated incidents, service requests, and alert tickets across SLA-bound and non-SLA queues.
• Serve as the L3 escalation point for issues that exceed L1/L2 capability, taking ownership from intake through resolution and RCA closure as needed.
• Handle direct engineer-to-engineer escalations and mentorship as they arise.
• Partner with customer technical contacts on long-term solutions, lifecycle planning, and infrastructure health/remediation reviews — remotely, with no on-site presence required.
• Design, deploy, and support scalable, secure, and highly available architectures across AWS, with growing scope across Azure, GCP, and on-premises compute infrastructure.
• Infrastructure as code experience is a plus.
• Support of containerized and serverless workloads (Amazon EKS, AWS Lambda) as part of modern, cloud-native platform delivery is a plus.
• Streamline infrastructure delivery and reduce manual repetitive work.
• Extend engineering depth into on-premises/hybrid infrastructure and secondary clouds (Azure, GCP) as client environments require — all delivered remotely.
• Configure and maintain identity and access management controls (IAM, Active Directory/Entra ID, SSO, MFA) across cloud and hybrid environments.
• Perform vulnerability remediation, audits, and compliance/audit-readiness activities relevant to client environments (e.g., CMMC 2.0, SOC 2, HIPAA).
• Apply cloud security best practices, including encryption, centralized logging, and threat-detection tooling.
• Monitor platform health, ticket SLAs, and service metrics; proactively identify and remediate issues before they escalate.
• Build and maintain automated health checks, remediation playbooks, and DR/backup validation routines that reduce manual intervention over time.
• Create and maintain runbooks, technical documentation, and procedure guides so knowledge is documented and shared, not single-threaded.
• Review and perform cost optimization and rightsizing across managed cloud environments.
• Serve as primary or secondary engineer on project work, including cloud migrations, infrastructure modernization, onboarding/offboarding, and lifecycle/EOL upgrades.
• Participate in customer-facing calls and technical reviews as a senior engineer/subject-matter expert, including project SOW reviews and solutioning discussions.
• Assist with customer onboarding and managed services transitions, including technical assessments, discovery, and project scoping.
• Identify and submit new opportunities uncovered during the course of engineering engagements.
• Contribute to the certification roadmap and internal Skill Builder Workshop program by building and delivering technical content that raises team-wide capability.
• Provide mentorship and technical guidance to L1/L2 engineers — supporting them well is core to this team's mission.
• Take ownership of improving processes, tools, and documentation; when something isn't working, take point on fixing it.
• Communicate early and often on progress, blockers, and risk, and own mistakes quickly so the whole team can learn from them.
• Participate in a rotational on-call schedule as an escalation engineer, engaged on P1/P2 incidents outside standard business hours when 24x7 L1/L2 cannot resolve them.
• Acknowledge and respond to after-hours escalations per team SLA commitments, and hand off active incidents with full documentation at the close of the on-call window.

Technical Skills & Tools

• Microsoft Azure: core compute, storage, networking, and identity (Active Directory/Entra ID, SSO, MFA).
• Windows Server Administration
• Scripting & Automation (Python, Bash, PowerShell)
• Hybrid Networking, Firewalls & VPN
• Backup & Disaster Recovery (Veeam/Commvault, replication, failover testing)
• Security & Compliance Frameworks (CMMC 2.0, SOC 2, HIPAA)
• Monitoring & Observability (CloudWatch, LogicMonitor, N-Able, SIEM)
• EC2, Auto Scaling & Compute Services
• VPC & Hybrid/Cloud Networking
• S3 & EBS Storage
• Organizations / Multi-Account Architecture
• Google Cloud Platform (a plus): core compute, storage, and networking fundamentals.
• Infrastructure as Code (Terraform) — a plus
• Ansible / Configuration Management
• Kubernetes & Docker - a plus

Certifications (Preferred)

• AWS Certified Solutions Architect – Associate or Professional
• AWS Certified SysOps Administrator – Associate
• Microsoft Certified: Azure Administrator Associate (or equivalent) — a plus
• Google Cloud Associate Cloud Engineer (or equivalent) — a plus
• Certification is a plus, not a requirement at hire. Engineers who do not already hold a current AWS certification are expected to obtain at least one recognized AWS certification within 12 months of hire, supported by NexusTek's certification program.

Pay and Benefits

• Estimated Starting Salary/Wage Range: $115,000 to $120,000 annual based on candidate's experience, qualifications, and location.
• Four weeks of annual accrued PTO
• Seven paid national holidays
• Medical, dental, vision options
• Company-paid life insurance, short and long-term disability
• Voluntary benefits such as critical illness and accident
• Voluntary Legal Shield and identity theft protection
• Discretionary annual 401k match plan
• Generous employee referral bonus plan
• Employee Assistance Program
• Access to over 90,000+ courses in ADP My Learning
• StandOut employee engagement tools
• Eligible to apply for a Pluralsight license
• Eligible to apply for NexusTek Technical Academy or Leadership Academy

Interview Process

• Application and Screening Stage: Submit your application. Our recruiters carefully consider each application. If you are selected to move forward, we will contact you for the 20 minute introductory screening to learn more about you and why you want to work for NexusTek.
• Interview Stage: We’ll dive into your experience more in depth. One-hour technical interview with hiring manager (virtual). 30-minute to one-hour follow up interview with team member to be determined (virtual).
• References: 3 professional references at least one direct supervisor. You are welcome to request additional conversations with team members you didn’t get to meet during the process.