Systems Engineer

The Systems Administrator is responsible for the administration, security, and day-to-day operation of The Siegel Group’s Microsoft 365 environment, endpoint management platform, and enterprise network infrastructure. This role serves as a key member of the IT team, ensuring the reliability, security, and performance of core technology systems while supporting cybersecurity initiatives across the organization. The Systems Administrator partners with internal teams and vendors to maintain secure, scalable solutions and provides technical leadership for infrastructure operations, automation, and documentation., * Administer and support the Microsoft 365 environment, including Exchange Online, SharePoint, Teams, and related services.

• Manage Microsoft Entra ID, including user lifecycle management, Conditional Access, Multi-Factor Authentication, role assignments, and identity security.
• Configure, administer, and maintain Microsoft Purview Data Loss Prevention (DLP) policies across Microsoft 365 services and managed endpoints.
• Perform access reviews, maintain least-privilege security standards, and manage licensing and administrative role documentation.
• Deploy, configure, and support Microsoft Intune, including device enrollment, compliance policies, configuration profiles, and Windows Autopilot.
• Maintain endpoint security through Endpoint Detection and Response (EDR) platforms, monitoring sensor health and responding to security alerts.
• Administer Fortinet firewalls and related network security technologies, including firewall policies, VPN connectivity, segmentation, firmware updates, and security changes.
• Monitor, investigate, triage, and respond to security alerts across endpoint protection, firewall, and SIEM platforms.
• Support SIEM administration, including onboarding data sources, maintaining alert rules, and assisting with security monitoring initiatives.
• Coordinate vulnerability remediation efforts and participate in incident response activities.
• Serve as the technical escalation point for advanced Tier 1 and Tier 2 support issues.
• Develop and maintain PowerShell scripts to automate administration, reporting, and operational tasks.
• Create and maintain technical documentation, runbooks, knowledge base articles, and change management records.
• Maintain accurate asset inventory and configuration management documentation.
• Mentor team members and promote knowledge sharing across the IT organization.
• Participate in after-hours support, emergency response, and scheduled maintenance activities as needed.
• Perform additional duties as assigned.

• Associate’s or Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field preferred; equivalent experience considered.
• 2 to 3 years of experience in systems administration, infrastructure, or IT engineering.
• Strong hands-on experience administering Microsoft 365, including Exchange Online, SharePoint, Teams, and related services.
• Experience administering Microsoft Entra ID, including Conditional Access, MFA, identity lifecycle management, and role-based access control.
• Experience deploying and supporting Microsoft Intune and Windows Autopilot.
• Experience configuring and supporting Microsoft Purview Data Loss Prevention (DLP) solutions preferred.
• Experience administering next-generation firewalls, preferably Fortinet FortiGate, FortiManager, or FortiCloud.
• Experience working with Endpoint Detection and Response (EDR) platforms and Security Information and Event Management (SIEM) solutions.
• Strong understanding of TCP/IP, DNS, DHCP, VLANs, VPNs, and enterprise networking fundamentals.
• Experience developing and maintaining PowerShell scripts.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to work independently in a fast-paced environment while managing multiple priorities.
• Excellent written and verbal communication skills with the ability to communicate technical information to both technical and non-technical audiences.
• Microsoft certifications such as MS-102, AZ-104, SC-300, or equivalent are a plus.
• Must be available to participate in after-hours support and emergency response as business needs require.

Physical Requirements

• Ability to lift and move computer equipment and networking hardware up to 30 pounds.
• Ability to sit, stand, walk, bend, and work at a computer for extended periods.
• Ability to install, configure, and troubleshoot hardware in office and field environments.
• Ability to travel to company locations as needed.

• Full-time position, Monday through Friday.
• Participation in an on-call rotation and after-hours support as required.
• Overtime may be required based on operational needs.

The Siegel Group is a diversified, growth-oriented organization with operations spanning hospitality, residential, and restaurant brands throughout the United States. Our portfolio includes Siegel Suites, Siegel Select, Pinkbox Doughnuts, Bagelmania, Piero’s Italian Cuisine, Hot Dog on a Stick, and other affiliated businesses. We are committed to operational excellence, innovation, and providing exceptional experiences for our guests, residents, customers, and team members. Our collaborative environment offers opportunities to make a meaningful impact while supporting a wide range of technologies across a dynamic multi-brand organization.