> Markdown version of [/jobs/ext/4429478-it-senior-systems-engineer](https://www.wearedevelopers.com/jobs/ext/4429478-it-senior-systems-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Senior Systems Engineer - **Company:** JPMorgan Chase & Co. - **Location:** Baltimore, MD, United States - **Experience:** Expert - **Salary:** $145,000 - $150,000 - **Contract:** Permanent contract - **Skills:** Active Directory, Amazon Web Services, Application Firewall, Application Performance Management, Application Virtualization, Systems Engineering, Microsoft Azure, Cloud Computing, Encodings, Data Governance, Data Loss, Dynamic Host Configuration Protocol, Desktop Computing, Desktop Virtualization, Domain Name System (DNS), Multi-Factor Authentication, HP Thin Clients, Network Topologies, Hypervisor, Internet Information Services (IIS), Python (Programming Language), Automation of Marketing, Virtual Desktops, Citrix Systems, Public Key Infrastructure, Windows PowerShell, Remote Access Technology, Remote Desktop Services, Azure Active Directory, Security Assertion Markup Language (SAML), Systems Integration, Virtualization Technology, VMware VSphere, Wireless Access Point, Scripting, Load Balancing, EHR Systems, System Availability, Azure Powershell, Microsoft InTune, Information Technology, Virtual Agents, Cloud Integration, Restful APIs, Xendesktop, Allscripts, Citrix Netscaler, Vmware - **Published:** October 15, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=da677b73cb4bc74d ## About the Role * Directory & Identity Services: Proven track record architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID (Azure AD) Connect/Cloud Sync. * Application & Desktop Virtualization: Deep hands-on expertise with Citrix (Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC), Microsoft Remote Desktop Services (RDS), Azure Virtual Desktop (AVD), and IGEL thin client deployments/management. * Scripting & AI Automation: Advanced proficiency in PowerShell or Azure CLI for systems administration; proven experience integrating AI assistance or automation tools into operational deployment routines. * Security & Certificate Lifecycle: Strong understanding of Public Key Infrastructure (PKI), SSL/TLS certificate chain deployment, Web Application Firewalls (WAF), and multi-factor authentication (nFactor/MFA). * Compliance Knowledge: Practical understanding of healthcare regulatory frameworks (HIPAA Security & Privacy Rules, Business Associate Agreements, clinical system audit readiness). * Healthcare & Cloud Integration (Preferred): Experience supporting or migrating healthcare workloads and EMR/EHR platforms (Epic, AthenaHealth, NextGen), as well as migrating workloads across on-premises datacenters, VMware vSphere, and public cloud (Azure/AWS)., * 8-10+ years in senior infrastructure systems engineering or solutions architecture, with demonstrated experience in multi-site migrations, M&A integrations, or large-scale domain consolidations. * Bachelor's degree in Computer Science, Information Technology, or equivalent military/professional experience. * Citrix Certified Associate/Professional (CCA-V, CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator. ## Description The IT Sr. Systems Engineer (Senior Infrastructure & Systems Architect) acts as a principal technical authority leading the technical evaluation, design, and integration of newly acquired environments into our core enterprise infrastructure. This position is responsible for architecting Active Directory/Entra ID domain collapses and federations, optimizing enterprise desktop and application virtualization platforms (Citrix, RDS, IGEL), and embedding operational AI automation into repetitive deployment and maintenance workflows. While not a dedicated Security Architect position, security diligence is central to this role. The IT Sr. Systems Engineer is directly responsible for enforcing baseline security hygiene across all migrated systems, managing SSL/TLS certificate lifecycles, and ensuring strict adherence to healthcare regulatory frameworks including HIPAA, HITECH, and patient data compliance standards., Analytical and Critical Thinking * Lead technical due diligence on acquired entities by evaluating legacy IT estates, network topologies, identity structures, and clinical systems. * Design, architect, and execute zero business hour downtime Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID (Azure AD) tenants. * Architect, maintain, and tune multi-site virtualization environments utilizing Citrix Virtual Apps and Desktops (CVAD/Citrix Cloud), Remote Desktop Services (RDS), and thin-client OS solutions (IGEL OS/Universal Management Suite). * Optimize image baselines and FSLogix profile containers to maximize host density and reduce compute resource usage. * Configure and support remote access infrastructure, including NetScaler ADC / Citrix Gateway, load balancing, and Storefront. * Identify high-frequency, repetitive infrastructure tasks (provisioning, image updates, patch testing, user offboarding/onboarding) and design automated workflows to streamline operations. * Leverage modern generative AI tools and programmatic scripting (PowerShell, Azure CLI, REST APIs, Python) to accelerate script generation, log auditing, configuration troubleshooting, and automated runbook documentation. * Maintain end-to-end management of SSL/TLS certificates, including automated renewals, private key security, gateway bindings (NetScaler ADC, IIS, reverse proxies), and cipher suite hardening to prevent service interruptions or protocol vulnerabilities. Workplace Computers and Equipment * Ensure peak application performance and high availability across distributed clinicians and office personnel accessing critical line-of-business and EMR platforms (Epic, NextGen, AthenaHealth, Allscripts). Planning and Organizing * Formulate standardized migration runbooks, baseline discovery checklists, and cutover playbooks to transition user profiles, mailboxes, and file services seamlessly with zero data loss. * Build intelligent operational reporting and telemetry to proactively detect infrastructure bottlenecks, license drift, and capacity constraints before they impact end users. Compliance, Policy, and Procedure * Oversee identity governance post-acquisition, including Conditional Access policies, Microsoft Intune endpoint enrollments, and tenant consolidation. * Enforce security best practices across all operating systems, hypervisors, and gateway access points (nFactor MFA, SAML/SSO federation, conditional access). * Ensure all architectural designs and integrated systems strictly comply with HIPAA, HITECH, and clinical data governance guidelines. * Conduct perimeter assessments and access reviews to protect protected health information (PHI) and enterprise identities against external compromise.