Senior Systems Engineer

The mission of the Senior Systems Engineer is to design, implement, and safeguard resilient, secure, and compliant infrastructure across a complex portfolio of client environments, ensuring systems are built to withstand operational stress, security threats, and regulatory compliance scrutiny.

The Senior Systems Engineer is an active participant in weekly Project Sprint Planning Meetings, as well as Project Debrief Meetings. During New Project Planning Meetings, this Engineer brings forward any and all risks associated with the project, and develops contingency plans for those risks. They carve out time in their schedules to mentor junior technical staff for skill transfer.

Ability to communicate clearly and effectively both verbally and in writing is crucial to ensure clients have a thorough understanding of the solution, changes, and business interruption, and to ensure the team has a thorough understanding of the overarching design as well as how the solution will support client business operations, security, and compliance.

Operating at the intersection of engineering, security, and compliance, Senior Systems Engineers serve as final technical authorities for complex projects and incidents, mentor Service Delivery Team Members and other Systems Engineers on the Infrastructure Team, and enforce standards that enable CompliancyIT to scale without sacrificing quality, trust, or defensibility.

Do you have experience in Windows?, * 7-10 years of progressive experience in IT infrastructure, systems engineering, or senior technical roles

• U.S. Based, U.S. Citizen
• Experience in many different types of technical environments, heavily focused on Microsoft 365, Azure, on premises Windows servers and networking
• Demonstrated success designing, implementing, and maintaining secure, scalable, and compliant infrastructure in multi-tenant or MSP environments
• Proven experience owning end-to-end infrastructure projects, from design through implementation, validation, and handoff

Infrastructure & Servers

• Windows Server architecture (AD DS, DNS, DHCP, GPO, PKI)
• Server lifecycle management, patching, backups, and disaster recovery
• Ability to design and enforce secure baselines across environments
• Experience hardening systems against misconfiguration and attack

Microsoft 365 / GCCH / Azure / Entra Architecture

• Microsoft M365 Commercial

  GCC

  GCCH tenants at scale

• Entra ID (Azure AD) architecture, identity governance, and access controls
• Conditional Access, MFA, privileged access, and role design
• Experience implementing and tuning:
• Exchange Online, SharePoint, OneDrive
• Intune and device compliance baselines
• Ability to diagnose complex cross-identity and cross-service failures

Networking & Connectivity

• Network segmentation, routing, firewalls, and VPN design
• Secure remote access and site-to-site connectivity
• Ability to design for least privilege, fault isolation, and resilience
• Proven capability troubleshooting advanced connectivity and performance issues

Security & Compliance Integration

• Security-first mindset with ability to engineer controls, not just reference them

• Deep understanding of how infrastructure decisions affect:

• Confidentiality, integrity, availability
• Compliance with CMMC, NIST 800-171, ISO 27001
• Ability to identify systemic risk and remediate architecturally, not tactically

• Experience implementing and validating:

• Logging, monitoring, identity security, endpoint protection
• Backup, recovery, and incident response readiness

Architectural Judgment & Decision-Making

• Demonstrated ability to:

• Make high-impact decisions with incomplete information
• Balance security, operability, scalability, and cost
• Design systems that are defensible under audit and incident review
• Strong root-cause analysis skills focused on eliminating classes of failure
• Ability to say “no” when a request introduces unacceptable risk or technical debt

Documentation & Standards Ownership

• Exceptional documentation discipline:

• Architecture diagrams
• System standards and secure baselines
• Engineering runbooks and handoff documentation

• Ability to create documentation that is:

• Clear, enforceable, and repeatable
• Useful to Service Desk, Compliance, and Infrastructure Tams
• Ownership of technical standards enforcement, not just creation

Leadership, Mentorship & Cross-Team Influence

• Proven ability to:

• Mentor Level 3 Technicians and Engineers
• Guide Service Delivery and Compliance teams on technical implications
• Raise overall technical maturity across the organization

• Leads by example in:

• Calm execution during incidents
• Accountability for outcomes
• Professional, direct communication

Operational Expectations

• Comfortable working across multiple client environments
• Willingness to support incident response activities under guidance

• Strong alignment with CompliancyIT’s:

• Non-Negotiables (Security is Paramount, Detailed Documentation, Excellence in Communication)
• The Principles (core values) which stress a culture of accountability, integrity, and continuous improvement

Preferred / Strongly Valued

• Experience supporting regulated or defense-adjacent environments

• Prior involvement in:

• CMMC readiness, SPRS remediation, or audit preparation
• Incident response or security event recovery

• Relevant certifications (or equivalent demonstrated mastery):

• Microsoft (Azure, M365)
• Security or architecture certifications
• CCP or CCA
• Experience designing repeatable infrastructure patterns across clients, * What kind of experience/knowledge do you have with CMMC/NIST 800-171?
• Are you a United States citizen?
• What experience do you have in an MSP/multi-client environment?

Pulled from the full job description

• Professional development assistance
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance
• Dental insurance
• Flexible schedule, * 401(k) matching
• Dental insurance
• Flexible schedule
• Health insurance
• Paid time off
• Professional development assistance
• Vision insurance

CompliancyIT is a fast-growing IT Services, Security, and Compliance Company with primary operations out of Greensburg, PA. At CIT, we empower businesses with secure, compliant, and high-performing IT environments. Through strategic infrastructure services and compliance-focused support, we help our clients meet evolving regulatory requirements (CMMC, ISO 27001, NIST 800-171) while achieving their business objectives. We work with high performers who are committed to excellence, agility, and continuous improvement.

Our Massive Transformative Purpose is to create an environment where awesome people join to do meaningful work to grow personally and professionally and to believe in themselves. Our meaningful work is assessing, securing, maintaining, and configuring IT infrastructure, cloud platforms, security toolsets, servers, and computers. We use our guiding Principles to make decisions and determine what action to take. We are a tight knit team with high visibility and accountability. We specialize in providing CMMC Compliance services for businesses in the Defense Industrial Base.

Our 3 Non-Negotiables are: Security is Paramount, Detailed Documentation, Excellence in Communication.