> Markdown version of [/jobs/ext/3865947-it-systems-engineer](https://www.wearedevelopers.com/jobs/ext/3865947-it-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Systems Engineer

- **Company:** International Family Entertainment, Inc.
- **Location:** Los Angeles, United States
- **Experience:** Expert
- **Salary:** $160,000.0 - $215,000.0
- **Contract:** Permanent contract
- **Skills:** Link Aggregation (Ethernet), Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Amazon S3, Microsoft Azure, Bash Shell, Ubuntu (Operating System), Command-Line Interface, Cloud Computing, Computer Networks, Computer Engineering, Dynamic Host Configuration Protocol, Domain Name System (DNS), Hyper-V, Identity and Access Management, Microsoft SQL Server, Windows Servers, Octopus Deploy, OpenShift, Windows PowerShell, Role-Based Access Control, Red Hat Enterprise Linux, Azure Active Directory, Ansible, Runbook, Virtual Local Area Networks, VMware VSphere, Software Vulnerability Management, Data Processing, Scripting, Amazon Virtual Private Cloud (VPC), Microsoft InTune, Build Management, Pure Storage, Kubernetes, Information Technology, Deployment Automation, Hashicorp, Teamcenter (Software)
- **Published:** October 22, 2026
- **Apply:** https://startup.jobs/senior-it-systems-engineer-freeform-10544525

## About the Role

* 7+ years in systems administration or infrastructure engineering, 3+ in a senior or lead role, owning a mixed Windows, Linux, cloud, and network environment
 * Experience with the below technologies including administering and troubleshooting
 + Hybrid Microsoft 365, Intune, and Azure: on-prem AD synced to Entra ID, hybrid join, co-existence, and migration
 + Windows Server DNS, DHCP, and RADIUS/NPS in production
 + Ubuntu and Red Hat: systemd, storage, networking, hardening, and command-line troubleshooting
 + vSphere, Hyper-V, or OpenShift, plus SAN storage over iSCSI and NFS (hands-on with Pure Storage and HPE 3PAR)
 + AWS (EKS, S3, IAM) / Azure / GCP
 + Kubernetes (on-prem and in the cloud)
 + Layer 2/3 networking: VLANs, ACLs, segmentation, MLAG, and LACP
 + Defender XDR, Sentinel, and pfSense administration
 * PowerShell and Bash scripting experience
 * Clear written communication with technical and non-technical audiences

Nice to Have:

 * Experience with HashiCorp Vault and Argo CD
 * Experience with Ansible
 * Python scripting experience
 * Experience administering Siemens Teamcenter
 * Experience with Microsoft SQL Server administration
 * Hands-on experience deploying physical security systems (DVR/NVR, CCTV, access control)
 * AI fluency: practical use of AI tools for scripting, troubleshooting, and documentation, with sound judgment on data handling
 * Degree in computer information systems, computer science, or computer engineering

## Description

* Run Microsoft 365, Entra ID, and Azure in a hybrid setup with on-prem Active Directory, including Entra Connect, conditional access, RBAC, and licensing
 * Manage the device fleet in Intune: enrollment, compliance, app deployment, Autopilot, and patching
 * Build and maintain Windows Server (AD DS, DNS, DHCP, Group Policy, RADIUS/NPS) and hardened Ubuntu and Red Hat servers
 * Run virtualization and SAN storage (Pure Storage, HPE 3PAR over iSCSI and NFS), from provisioning and replication to capacity planning
 * Run and manage AWS infrastructure, including EKS, S3, IAM and VPC networking, with ownership of access control, monitoring and cost.
 * Administer Kubernetes both on-prem and in EKS: cluster builds and upgrades, networking and ingress, storage, RBAC, and troubleshooting workloads.
 * Design and maintain the Layer 2/3 network and own segmentation across user, server, management, OT, and guest zones
 * Operate Defender XDR, Sentinel, and pfSense firewalls: tune detections, investigate incidents, and drive vulnerability remediation and least-privilege access
 * Design and build custom solutions where off-the-shelf tools fall short, and automate repetitive work
 * Act as the senior escalation point for infrastructure incidents and lead root-cause analysis
 * Document what you build in runbooks and diagrams, and mentor junior IT staff
 * Join the on-call rotation and planned after-hours maintenance windows