Systems Engineer

Kansas Legislature seeks a talented and highly motivated individual to join the Kansas Legislative Office of Information Services team as a Systems Engineer. The Systems Engineer oversees the design, administration, and security of the organization’s hybrid platforms. This role is responsible for managing on-premises Active Directory, Entra ID, and related Microsoft cloud services, ensuring secure authentication, authorization, and directory integrity. The engineer applies security best practices, monitors identity threats, and strengthens the organization’s overall identity security posture by working closely with security engineers.

The Systems Engineer works closely with security, application development, and business teams to ensure security is integrated into all aspects of technology operations. The Systems Engineer develops and maintains on-premises and cloud platforms, implements enterprise policies for platforms, and supports compliance with applicable laws, regulations, and industry best practices.

The successful candidate will bring professional experience in most if not all aspects of systems engineering. Candidates who meet some or most of the required skills are encouraged to apply., Systems Administration

• Administer and maintain on-premises Active Directory, and Entra ID platform.
• Manage user lifecycle operations, group policies (GPO), organizational units (OUs), role-based access (RBAC), and conditional access policies.
• Administer M365 suite including Exchange hybrid and Intune for the organization.
• Configure and secure Azure cloud services including Entra Connect, Enterprise Apps, and SSO integrations.
• Maintain, upgrade, and patch windows servers in virtual environments.

Systems Security

• Implement and enforce identity security standards including MFA, Privileged Access Management (PAM), and Zero Trust principles.
• Monitor and respond to identity-related security incidents using tools such as Microsoft Entra, Defender, XDR, and SIEM platforms.
• Develop and maintain identity governance workflows including access reviews, entitlement management, and privileged account auditing.
• Conduct routine assessments to identify misconfigurations or risks in Active Directory, Entra ID, and related security infrastructure.
• Work with security engineers to maintain network segmentations and firewall rules.

Continuous improvement

• Support directory modernization initiatives, cloud migration, and hybrid identity architecture improvements.
• Automate recurring administrative and security tasks using PowerShell and other scripting tools.
• Maintain documentation of identity systems, security procedures, and operational playbooks.
• Stay current on identity security trends, vulnerabilities, and Microsoft cloud advancements.

• Five (5) years of progressively responsible experience in information technology as systems administrator/engineer.
• Bachelor’s degree in information technology, cybersecurity, or related field or equivalent professional experience).
• Strong understanding of Active Directory architecture, DNS, Group Policy, and domain controllers.
• Experience administering AD, Entra ID, Conditional Access, and RBAC principles.
• Working understanding of networking, operating systems, and cloud environments.
• Knowledge of identity security concepts such as MFA, SSO, PKI, Kerberos, OAuth, and directory hardening.
• Experience supporting hybrid identity infrastructures including Entra ID Connect.
• Familiarity with security tools such as Microsoft Defender, CrowdStrike or other EDR/XDR solutions., * Proficiency with PowerShell for identity automation and remediation.
• Certifications in Azure or AWS platforms.
• Experience in government, or regulated environments.
• Understanding of Zero Trust, privileged access strategies, and identity governance workflows.