> Markdown version of [/jobs/ext/1111526-systems-engineer](https://www.wearedevelopers.com/jobs/ext/1111526-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems Engineer - **Company:** Cravath, Swaine & Moore LLP - **Location:** New York, NY, United States - **Experience:** Expert - **Salary:** $140,000.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Active Directory Federation Services, Systems Engineering, User Authentication, Authentication Protocols, Microsoft Azure, Cloud Computing, Configuration Management, Software Documentation, Cyber Security, Distributed File Systems, Disaster Recovery, Federated Identity Management, Identity and Access Management, Windows Servers, OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Security Assertion Markup Language (SAML), Shell Script, Enterprise Software Applications, Microsoft InTune, Deployment Automation, Hardware Infrastructure, Serverless Computing - **Published:** June 30, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f56c9c8eebb25e69 ## About the Role Do you have experience in Shell Scripting?, Required: * 5+ years of experience in Microsoft enterprise infrastructure or systems administration * Strong understanding of and hands-on experience with: * + Microsoft Entra ID, including Conditional Access, RBAC, and PIM + Active Directory, Group Policy, and hybrid Azure administration + Authentication methods including MFA, SSO, and modern authentication protocols + Federated identity scenarios (e.g., ADFS, SAML, OAuth/OIDC) + Certificate services, PKI/CA operations, and certificate lifecycle management + Windows Server administration and enterprise system troubleshooting + PowerShell scripting and automation + File services including DFS namespaces, DFSR, and permissions management Preferred: * Microsoft certifications (e.g., Azure Administrator, Identity and Access Administrator, Microsoft 365) * Experience in a security-focused or regulated environment * Exposure to identity governance and access review processes ## Description Cravath has been known as one of the premier U.S. law firms for more than two centuries. Throughout our history, we have played a central role in developing how law is practiced, how lawyers are trained and how business risk is managed. Our goal is to be the firm of choice for clients with respect to their most challenging legal issues, most significant business transactions and most critical disputes. We are seeking a hands-on, detail-oriented Systems Engineer focused on IAM and hybrid infrastructure. This role is operationally focused, with primary responsibility for identity platforms, access controls, and core infrastructure services across cloud and on-premises systems. RESPONSIBILITIES: KEY RESPONSIBILITIES Identity & Access Management * Administer Microsoft Entra ID and Active Directory, including user and group lifecycle management * Configure and maintain Conditional Access policies, MFA, and authentication controls * Support enterprise applications, SSO integrations, and app registrations * Manage role-based access controls (RBAC), privileged identity management (PIM), and least-privilege access * Troubleshoot authentication and access issues using logs and monitoring tools * Manage and support certificate-based services, including PKI/CA operations, issuance, renewal, and troubleshooting of certificates used for authentication, encryption, and application access Cloud & Infrastructure Operations * Support day-to-day operations across Entra, Azure and on-premises infrastructure * Support cloud adoption and governance initiatives, including expanding Microsoft utilization, transitioning workloads to cloud-native services, and contributing to security posture. * Monitor and maintain system performance, availability, and reliability Automation & Configuration * Develop and maintain PowerShell scripts to automate operational tasks * Identify opportunities to improve efficiency through automation and standardization * Support configuration management and policy enforcement across systems * Support and contribute to modern endpoint management initiatives, including Intune and Autopilot. Operational Maintenance & Security * Perform system maintenance, upgrades, and patching coordination * Partner with IT Security to review and remediate vulnerabilities and findings * Administer file services, including permissions, DFS namespaces, and replication * Participate in on-call rotation and provide responsive escalation support Documentation & Continuous Improvement * Maintain accurate system documentation, diagrams, and disaster recovery runbooks * Contribute to process improvement and operational best practices * Support knowledge sharing and cross-training across the team * Recommend enhancements to standards, policies, and workflows ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Reusing apps between teams and environments through Containers](https://www.wearedevelopers.com/videos/107-reusing-apps-between-teams-and-environments-through-containers) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)