> Markdown version of [/jobs/ext/4268084-systems-engineer](https://www.wearedevelopers.com/jobs/ext/4268084-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Systems Engineer

- **Company:** First Advantage
- **Location:** Occidental, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Systems Engineering, JIRA, Microsoft Azure, Microsoft Online Services, Business Software, Software as a Service, Cloud Computing, Multi-Factor Authentication, Identity and Access Management, IT Management, Information Technology Operations, Key Management, Simple Mail Transfer Protocols, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Runbook, Microsoft SharePoint, Systems Integration, Workflow Management Systems, Azure Automation, Scripting, Chatbots, Delivery Pipeline, Microsoft InTune, Information Technology, Deployment Automation, Virtual Agents, Restful APIs, Webhooks
- **Published:** October 14, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=e661923c277648a5

## About the Role

* Bachelor's degree in IT, computer science or a related field
 * Experience: 5+ years of hands-on experience in Systems Administration and IT Operations with a strong focus on identity management and automation.

What You May Need to be Successful:

 * Microsoft Cloud & Hybrid Stack: Expert knowledge of Entra ID (Azure AD), Hybrid Active Directory, Group Policies (GPO), and Microsoft 365 (E5) Suite. Proficient in Microsoft Intune, Windows Autopilot, Exchange Hybrid / EAC, Conditional Access, and Entra PIM.
 * Automation & Scripting: Advanced PowerShell scripting (modular scripting, error handling, remote execution). Hands-on experience with Azure Automation (Hybrid Workers, Runbooks) and Microsoft Graph API / REST APIs.
 * ITSM & Workflow Tooling: Experience with Jira Service Management (JSM) automation rules, webhooks, and asset management. Exposure to Virtual Agents, AI Chatbots, or conversational self-service workflows.
 * Security & Best Practices: Proven experience managing credentials securely (Azure Key Vault, enterprise password managers). Strong understanding of RBAC, least privilege, and compliance auditing standards.
 * Preferred Certifications: SC-300 (Identity and Access Administrator Associate), MS-102 (Microsoft 365 Enterprise Administrator Expert), AZ-104 (Azure Administrator Associate).

## Description

The ideal Systems Engineer brings deep technical expertise across the Microsoft ecosystem (Entra ID, On-Prem AD, Exchange Hybrid, Intune/Autopilot), advanced scripting proficiency (PowerShell, Azure Automation, Microsoft Graph API), and hands-on experience integrating ITSM platforms like Jira Service Management (JSM).

We are seeking an experienced and forward-thinking GITS Systems & Automation Engineer to drive our IT operational transformation. In this role, you will bridge identity governance, cloud/hybrid infrastructure, and service management by designing and implementing zero-touch provisioning pipelines, automated Joiner-Mover-Leaver (JML) workflows, and AI/Virtual Agent self-service integrations.

Responsibilities:

 1. Identity & Access Lifecycle Automation (JML):
 * Design, build, and maintain end-to-end automated workflows for employee onboarding, role transitions, and offboarding across On-Prem AD, Entra ID, Exchange Online, and SaaS business applications.
 * Implement dynamic group rules, attribute-based access control (ABAC), and Entra ID governance policies to ensure scalable, policy-driven access.
 * Ensure strict UPN/primary SMTP synchronization and casing rules to eliminate duplicate cloud objects and sync errors.

 2. Hybrid Infrastructure & Cloud Administration:
 * Administer and optimize hybrid Active Directory and Microsoft 365 environments, including Exchange Hybrid cutover/migrations, E5 license provisioning, Teams, and SharePoint.
 * Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and Windows Autopilot zero-touch deployment pipelines.

 3. Scripting & Workflow Orchestration:
 * Author enterprise-grade, modular PowerShell scripts and Azure Automation Runbooks utilizing Managed Identities and Azure Key Vault for secure secret management.
 * Build REST API integrations using Microsoft Graph API and webhooks to connect ITSM tools with identity platforms.

 4. Conversational AI & ITSM Integration:
 * Partner with IT leadership to integrate Virtual Agents / Conversational AI with Jira Service Management (JSM) to enable automated ticket triage, self-service access fulfillment, and Knowledge Base deflection.
 * Build automated runbook triggers initiated from JSM service requests and approval gates.

 5. Security, Compliance & Governance:
 * Enforce Zero Trust principles using Conditional Access, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) / Just-In-Time (JIT) access.
 * Conduct automated audits of mailboxes, privileged roles, distribution lists, and access logs to maintain audit readiness (SOX/ISO).