Senior Systems Engineer

The Senior Systems Engineer is a hands-on technical leader responsible for designing, administering, securing, and modernizing DCCC's Microsoft-centric server, identity, endpoint, and cloud infrastructure. This role supports a broad portfolio of systems connected to Active Directory and Microsoft Entra ID, including Windows Server, Group Policy, Microsoft 365, Intune, OneDrive, endpoint management, and integrations with enterprise applications used across the College.

The position requires someone who can move confidently between engineering, operations, automation, troubleshooting, documentation, and security remediation. The successful candidate will be comfortable working at the command line, in the Microsoft 365 and Azure portals, in Group Policy Management, in Intune, and with the teams and departments that depend on these platforms.

This position is expected to professionally represent Delaware County Community College and promote a student-centered service approach. The ideal candidate is a self-directed problem solver who communicates clearly with technical and non-technical audiences, uses automation and AI tooling as a default part of how work gets done, including scripting, documentation, troubleshooting, and analysis, while protecting institutional data and following College policy, and is willing to take ownership of work that spans traditional system, identity, endpoint, and security boundaries.

Non-traditional hours, including evenings and weekends, may be required for maintenance windows, incident response, and on-call coverage., * Administer, maintain, and modernize Windows Server environments, including Active Directory Domain Services, DNS, DHCP, Group Policy, certificate services, file services, and related infrastructure supporting College operations.

• Administer systems and applications integrated with Active Directory and Entra ID, including identity-dependent third-party services, authentication workflows, security groups, service accounts, privileged access, and lifecycle processes.
• Design, maintain, and rationalize Group Policy Objects; troubleshoot policy application; document policy intent; reduce policy sprawl; and support the transition from traditional GPO-based management to Microsoft Intune and modern endpoint management where appropriate.
• Support endpoint and user-data modernization initiatives, including Intune enrollment and configuration, device compliance policies, Windows Autopilot, application deployment, OneDrive known folder move, SharePoint/OneDrive governance, and migration of legacy file or profile workflows.
• Manage and optimize Microsoft 365 and Azure services, including Entra ID, Exchange Online, Teams, SharePoint Online, OneDrive, Intune, Defender for Endpoint, Azure virtual machines, storage, role-based access control, and cost/governance controls.
• Develop and maintain secure PowerShell scripts and automation to improve provisioning, reporting, health checks, configuration validation, remediation, Microsoft Graph interactions, and operational consistency across Windows, Microsoft 365, Azure, and endpoint environments.
• Use AI tooling (Microsoft Copilot, GitHub Copilot, Claude, and approved LLM assistants) routinely to accelerate PowerShell and Graph development, draft and maintain documentation, analyze logs and configurations, and speed troubleshooting, validating all output before it reaches production.
• Identify, assess, prioritize, and remediate security risks across server, identity, endpoint, and cloud environments; implement hardening standards; respond to vulnerability findings; support incident response; and coordinate remediation with cybersecurity staff using tools such as Rapid7, CrowdStrike, Varonis, and related platforms.
• Participate in a 24x7 on-call rotation supporting critical production systems, including after-hours response to outages and security incidents, remotely or on-site as needed.
• Lead and participate in system integrations involving Banner, identity providers, SaaS applications, APIs, directory synchronization, secure data exchange, and automation workflows that support institutional operations.
• Administer and support virtualization and storage platforms, including VMware vSphere, ESXi hosts, vCenter, virtual machine lifecycle, snapshots, backup coordination, and related storage integrations.
• Provide Tier III escalation support for complex infrastructure, endpoint, identity, Microsoft 365, and application access issues; mentor help desk and junior staff; and communicate issue status, risk, and resolution steps clearly.
• Maintain accurate documentation for architecture, configurations, integrations, operational procedures, GPOs, Intune policies, scripts, security remediation steps, and disaster recovery procedures.
• Assist in developing, testing, and executing disaster recovery and business continuity procedures for server, cloud, identity, endpoint, and collaboration platforms.
• Establish and share AI-assisted working patterns with other staff, including reusable prompts, scripting scaffolds, and review practices, so the team's overall use of AI improves over time.
• Perform other duties as assigned.

Minimum Experience: Five or more years of hands-on enterprise systems administration or systems engineering experience in a Microsoft Windows environment. Demonstrated experience with Active Directory, Group Policy, Windows Server, Microsoft 365 administration, PowerShell scripting, and security remediation. Hands-on exposure to Intune, Entra ID, OneDrive, endpoint management, Azure administration, or Microsoft Defender is strongly preferred; direct experience with an Intune or OneDrive migration is highly desirable. Experience in higher education, public sector, or similarly complex service environments is preferred.

Minimum Education: Associate degree from an accredited institution in Information Technology, Computer Science, Cybersecurity, or a related field; or an equivalent combination of education and relevant experience.

Preferred Certifications: Microsoft Certified: Azure Administrator Associate (AZ-104), Microsoft 365 Administrator (MS-102), Endpoint Administrator Associate (MD-102), Identity and Access Administrator Associate (SC-300), Security Operations Analyst Associate (SC-200), or comparable experience/certifications.

Tuition reimbursement, 403(b), Health insurance, Paid time off, Vision insurance, Dental insurance, Flexible spending account, Life insurance Full-time Weekends as needed, Evenings as needed, On call Marple, PA, DCCC offers a great competitive salary, with an outstanding benefits package which includes: Medical, Dental, Vision, and Prescription Drug for all benefit eligible employees; College Paid Disability and Life Insurance; Flexible Spending Accounts; 403(b) Defined Contribution Retirement Plans (5% Employee Mandatory Contribution and a 10% Match by the College); Generous PTO, Holiday and Winter Break Schedule; Tuition Waiver & Tuition Reimbursement; and a Four (4) Day Work Week Each Summer; Professional Development Opportunities; and a Supportive Work/Life Balance Campus Environment. (Temporary and Grant-funded employees are not eligible for tuition reimbursement unless the specific grant supports such funding for these purposes.)