Engineer, Senior Systems
Role details
Job location
Tech stack
Job description
ACC IT is seeking an experienced Senior Systems Engineer to support and lead our IAM (Identity and Access Management) technology stack and support IT platforms. You will play a critical role in ensuring the reliability, scalability, and performance of our infrastructure, which includes on-premise Windows/Linux servers, virtualization (VMware), and enterprise storage systems and backups. You will focus on improving and supporting critical identity and access management infrastructure, SSO integrations and ensure these services are available at all times.
You will design and develop integrated solutions through tools, processes and procedures to facilitate the cost effective delivery of services or fielding of products. You will perform testing and integration, maintenance and escalated problem resolution of systems, subsystems and components. You will support application teams in deployments and you will provide leadership in systems engineering projects and initiatives., * User Identity Lifecycle: Automate provisioning and de-provisioning processes for accounts as employees join, move, or leave the college.
- Access Governance: Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) to enforce the "principle of least privilege".
- System Integration: Connect IAM platforms (like Okta, LDAP, or Azure AD) with enterprise applications, databases, and HR systems.
- Privileged Access Management (PAM): Secure and monitor administrative accounts that have elevated access to sensitive corporate infrastructure.
- Serve as a subject matter expert in two or more of the following: virtual infrastructure, enterprise operating systems, SRE, identity management, enterprise storage, backup and disaster recovery, cloud technologies.
- Manage complex projects and resources for system implementation, upgrades, migrations, replacements, and renewals.
- Manage and optimize system infrastructure, maintaining 24/7 reliability for critical services.
- Design, configure, maintain, and optimize IT infrastructure for reliability and performance.
- Develop sustainable automation scripts and tools (Ansible, PowerShell, Python/Bash) to eliminate manual tasks and improve system consistency. Adjust or develop monitoring and alerting to achieve departmental SLA targets.
- Act as a technical responder for incidents, conducting blameless post-mortems and driving permanent fixes (RCAs).
- Forecast infrastructure needs and optimize system performance.
- Quickly resolve complex technical issues to minimize downtime.
- Build logging, monitoring, and alerting dashboards (Prometheus, Grafana, Datadog) to proactively identify bottlenecks.
- Collaborate with Network Engineering and InfoSec on network stability and cybersecurity.
- Implement security best practices, including patching, hardening, and ensuring adherence to CIS/NIST standards.
- Design and maintain hybrid Windows Server (2022/2025) and RHEL/Linux environments.
- Ensure seamless integration of systems and services across academic and business departments.
- Provide technical leadership, mentorship, and cross-training team members and foster a positive and mission-focused approach.
- Create and maintain detailed technical documentation, including system configurations, procedures, and best practices.
- Evaluate cost-effectiveness and feasibility of software/hardware systems through vendor comparisons and independent assessments, providing recommendations to management and business partners.
- Develop proficiency in cloud systems and contribute to cloud related projects and initiatives.
- Perform additional tasks as delegated by supervisors or as required by department needs., The above description is an overview of the job. It is not intended to be an all-inclusive list of duties and responsibilities of the job, nor is it intended to be an all-inclusive list of the skills and abilities required to do the job. Duties and responsibilities may change with business needs. ACC reserves the right to add, change, amend, or delete portions of this job description at any time, with or without notice. Employees may be required to perform other duties as requested, directed, or assigned. In addition, reasonable accommodations may be made by ACC as its discretion to enable individuals with disabilities to perform the essential functions., The above description is an overview of the job. It is not intended to be an all-inclusive list of duties and responsibilities of the job, nor is it an all-inclusive list of the skills and abilities required to do the job. Duties and responsibilities may change with business needs. ACC reserves the right to add, change, amend, or delete portions of this job description at any time, with or without notice. Employees may be required to perform other duties as requested, directed, or assigned. In addition, reasonable accommodations may be made by ACC at its discretion to enable individuals with disabilities to perform essential functions of the job.
Requirements
- Expertise in Microsoft Active Directory, LDAP, Okta
- Proficiency in Microsoft Server and Desktop OS, Linux OS, SQL, VMWare vSphere.
- Deep understanding of enterprise infrastructure technologies, including file and print services, directory services (AD, LDAP, Okta), web services, databases, highly redundant storage, backup systems, and datacenter components (server, storage hardware, power distribution, rack management, cooling, and security).
- Experience with GitOps workflows.
- Experience in monitoring, alerting, and building visualizations (Prometheus and Grafana).
- Proficiency in Python, Go, or Bash for automation.
- Growing competency in cloud technologies, such as IaaS, PaaS, SaaS, and cloud connectivity.
- Solid understanding of network, security, and access management principles.
- Knowledge of ITIL, ITSM, and Project Management.
- Adherence to established work schedules.
- Strong organizational and planning abilities, with attention to detail and follow-through.
- Effective interpersonal and communication skills, including tact and diplomacy.
- Proficiency in creating network diagrams, roadmaps, high-level plans, and strategy documents.
- Ability to execute strategies and visions precisely.
- Commitment to maintaining confidentiality of work-related information and materials.
- Skill in establishing and maintaining productive working relationships.
Required Work Experience
- 10+ years related work experience.
Preferred Work Experience
- 10 or more years related work experience in IAM (AD, LDAP, Okta)
- 10 or more years related work experience in Systems Engineering, Virtualization, or Cloud.
- 10 or more years related work experience working in Microsoft Server environments.
- 5 or more years in Site Reliability Engineering
- 5 or more years managing an enterprise virtual, cloud, storage, or datacenter environment.
- 5 or more years related work experience with backup and storage solutions and SQL.
- 5 or more years as a SME or team lead in an infrastructure technology such as VMware, SAN, DR
- Intermediate to advanced knowledge of VMware vSphere or Horizon.
- Experience with Kubernetes (EKS/AKS) or Docker.
- Intermediate to advanced knowledge of Linux, AIX, PowerShell, Ansible.
- Working knowledge of ITIL Change and Incident Management.
- Expertise in cultivating and maintaining partnerships with managed services providers.
- Accustomed to managing ongoing projects while providing operational support.
- Ability to gain and retain Criminal Justice Information Systems (CJIS) certifications
Required Education
- Bachelor's degree. An Associate degree plus 10 additional years of related work experience may substitute for the Bachelor's degree. Experience used here cannot be used again to meet the experience requirement or for placement purposes. Please note that the college reserves the right to amend these terms of substitution at any time.
Preferred Education
- Bachelor's degree in Computer Science, Information Technology, or related field.
Licenses/Certifications
- CIMP, CIST certifications
- Microsoft Administrator or Engineer certifications (especially Server or Azure related).
- VMware VCP / VCAP certifications.
- CompTIA (Network+, Security+, etc.).
- Other vendor related certifications, especially cloud and security related.
- ITIL Foundation.
Special Requirements
- Must have a valid driver's license.
Physical Requirements
- Work is primarily performed in a standard office environment.
Benefits & conditions
Salary (PG 10)
$83,665 - $105,783