> Markdown version of [/jobs/ext/3566031-sr-system-engineer](https://www.wearedevelopers.com/jobs/ext/3566031-sr-system-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. System Engineer

- **Company:** NexusTek Inc
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Salary:** $115,000.0 - $120,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Amazon S3, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Engineering, Configuration Management, Linux, DevOps, Failover, Monitoring of Systems, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Windows Servers, Networking Basics, Windows PowerShell, Ansible, Security Information and Event Management, Software Vulnerability Management, Backup and Restore, Data Logging, Google Cloud, Delivery Pipeline, AWS Lambda, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Gitlab-ci, Kubernetes, Cloudwatch, Api Gateway, Veeam, Terraform, Serverless Computing, Commvault, Docker, Jenkins
- **Published:** October 3, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=f917f3058d2c79f6

## About the Role

* EC2, Auto Scaling & Compute Services
 * VPC & Hybrid/Cloud Networking
 * EKS & Container Orchestration - a plus
 * Lambda & Serverless (API Gateway / Step Functions)
 * S3 & EBS Storage
 * Organizations / Multi-Account Architecture
 * CloudWatch
 * Microsoft Azure: core compute, storage, networking, and identity (Active Directory/Entra ID, SSO, MFA).
 * Google Cloud Platform: core compute, storage, and networking fundamentals.
 * Prior hands-on AWS specialists without Azure/GCP background are still encouraged to apply; Azure and GCP proficiency is expected to develop on the job.
 * Linux & Windows Server Administration
 * Hybrid Networking, Firewalls & VPN
 * Terraform / Infrastructure as Code
 * Ansible / Configuration Management
 * CI/CD Pipelines (Jenkins, GitLab CI, AWS CodePipeline)
 * Kubernetes & Docker
 * Monitoring & Observability (CloudWatch, LogicMonitor, N-Able, SIEM)
 * Backup & Disaster Recovery (Veeam/Commvault, replication, failover testing)
 * Scripting & Automation (Python, Bash, PowerShell) Security & Compliance Frameworks (CMMC 2.0, SOC 2, HIPAA)
*

Certifications (Preferred)

 * AWS Certified Solutions Architect - Associate or Professional
 * AWS Certified SysOps Administrator - Associate
 * AWS Certified DevOps Engineer - a plus
 * Microsoft Certified: Azure Administrator Associate (or equivalent) - a plus Google Cloud Associate Cloud Engineer (or equivalent) - a plus
*

Certification is a plus, not a requirement at hire. Engineers who do not already hold a current AWS certification are expected to obtain at least one recognized AWS certification within 12 months of hire, supported by NexusTek's certification program.

## Description

* Own resolution of escalated incident, service request, and alert tickets across SLA-bound and non-SLA queues.
 * Serve as the L3 escalation point for issues that exceed L1/L2 capability, taking ownership from intake through resolution and RCA closure as needed.
 * Handle direct engineer-to-engineer escalations and mentorship as they arise.
 * Partner with customer technical contacts on long-term solutions, lifecycle planning, and infrastructure health/remediation reviews - remotely, with no on-site presence required.
 * Design, deploy, and support scalable, secure, and highly available architectures across AWS, with growing scope across Azure, GCP, and on-premises compute infrastructure.
 * Infrastructure as code experience is a plus.
 * Support of containerized and serverless workloads (Amazon EKS, AWS Lambda) as part of modern, cloud-native platform delivery is a plus.
 * Streamline infrastructure delivery and reduce manual repetitive work.
 * Extend engineering depth into on-premises/hybrid infrastructure and secondary clouds (Azure, GCP) as client environments require - all delivered remotely.
 * Configure and maintain identity and access management controls (IAM, Active Directory/Entra ID, SSO, MFA) across cloud and hybrid environments.
 * Perform vulnerability remediation, audits, and compliance/audit-readiness activities relevant to client environments (e.g., CMMC 2.0, SOC 2, HIPAA).
 * Apply cloud security best practices, including encryption, centralized logging, and threat-detection tooling.
 * Monitor platform health, ticket SLAs, and service metrics; proactively identify and remediate issues before they escalate.
 * Build and maintain automated health checks, remediation playbooks, and DR/backup validation routines that reduce manual intervention over time.
 * Create and maintain runbooks, technical documentation, and procedure guides so knowledge is documented and shared, not single-threaded.
 * Review and perform cost optimization and rightsizing across managed cloud environments.
 * Serve as primary or secondary engineer on project work, including cloud migrations, infrastructure modernization, onboarding/offboarding, and lifecycle/EOL upgrades.
 * Participate in customer-facing calls and technical reviews as a senior engineer/subject-matter expert, including project SOW reviews and solutioning discussions.
 * Assist with customer onboarding and managed services transitions, including technical assessments, discovery, and project scoping.
 * Identify and submit new opportunities uncovered during the course of engineering engagements.
 * Contribute to the certification roadmap and internal Skill Builder Workshop program by building and delivering technical content that raises team-wide capability.
 * Provide mentorship and technical guidance to L1/L2 engineers - supporting them well is core to this team's mission.
 * Take ownership of improving processes, tools, and documentation; when something isn't working, take point on fixing it.
 * Communicate early and often on progress, blockers, and risk, and own mistakes quickly so the whole team can learn from them.
 * Participate in a rotational on-call schedule as an escalation engineer, engaged on P1/P2 incidents outside standard business hours when 24x7 L1/L2 cannot resolve them. Acknowledge and respond to after-hours escalations per team SLA commitments, and hand off active incidents with full documentation at the close of the on-call window.
*