> Markdown version of [/jobs/ext/4561307-systems-network-engineer](https://www.wearedevelopers.com/jobs/ext/4561307-systems-network-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems & Network Engineer - **Company:** Suntec Concrete - **Location:** Phoenix, AZ, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Application Integration Architecture, Software System Penetration Testing, Microsoft Azure, Backup Devices, Business Systems, Complex Networks, Continuous Integration, Data Centers, Data Security, Data Warehousing, Dynamic Host Configuration Protocol, Domain Name System (DNS), Firmware, Github, Monitoring of Systems, Hyper-V, Identity and Access Management, Information Technology Operations, Networking Hardware, Web Portals, Virtual Private Networks (VPN), Python (Programming Language), Microsoft SQL Server, SQL Azure, Windows Servers, Network Diagrams, Network Administration, Network Virtualization, Windows PowerShell, Role-Based Access Control, Anti-Phishing, Microsoft Copilot, Runbook, Security Software, Server Virtualization, SQL Databases, Virtualization Technology, VMware VSphere, Web Applications, Backup and Restore, Wireless Access Point, Network Routers, Scripting, Internet Protocol Telephony, Transport Layer Security, Connectivity Problems, Delivery Pipeline, Large Language Models, Claude Code, Tablet Computers, Firewalls (Computer Science), Microsoft InTune, Microsoft Fabric, Information Technology, Deployment Automation, Palo Alto Networks, Apple Business Manager, Patch Management, Operational Systems, Fortinet, 3-tier Architectures, Claude, Model Context Protocol, SentinelOne Expertise, Software Version Control, Data Pipelines, Cisco, Container Apps, Vmware - **Published:** November 4, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=14cefa7fa1accbed ## About the Role * Manage app registrations, service principals, managed identities, and secrets so every integration runs with least privilege and documented data access * 5+ years of systems and network administration experience * Hands-on experience with Windows Server, SQL Server, Active Directory, Microsoft 365, and Entra ID * Hands-on Microsoft Azure experience: virtual networking and VPN, compute, Azure SQL, App Services or containers, identity, and cost management * Experience configuring enterprise switches, routers, wireless, and firewalls * Experience with Microsoft Intune or a comparable MDM platform * Working knowledge of backup and recovery, virtualization (VMware or Hyper-V), and patch management * Practical experience using AI tools (Claude, Copilot, or similar) for scripting, automation, and troubleshooting, with a demonstrated interest in building AI integrations against business systems * Scripting experience with PowerShell and Python * Valid driver's license and ability to travel to company sites Preferred * Microsoft certifications (for example, Azure Administrator, Azure Solutions Architect, or Microsoft 365 Administrator) * Firewall or networking certification (for example, Fortinet, Palo Alto, Cisco CCNA) * Experience with EDR platforms such as Sentinel One or CrowdStrike * Experience with VoIP phone systems and conference room A/V * Experience in construction, manufacturing, or multi-site environments * Experience building or hosting APIs, MCP servers, or other LLM integrations against business data * Experience with Microsoft Fabric, data warehousing, or SQL replication * Familiarity with GitHub Actions or comparable CI/CD ## Description * Administer, maintain, and upgrade physical and virtual servers (VMware vSphere), Windows Server, SQL Server instances, storage, and backup systems, including off-site immutable backup copies and periodic restore testing * Build and operate the Azure estate: virtual networks and site-to-site VPN to the on-prem network, Azure SQL, App Services, Container Apps, Static Web Apps, storage, and subscription cost and access governance * Configure and maintain switches, routers, wireless access points, VPN, and high-availability firewalls across all Suntec sites, including redundant site-to-site tunnels and switch stack and firmware upgrades * Monitor system uptime, capacity, and performance; respond to and resolve infrastructure outages * Plan and carry out hardware and firmware upgrades during approved maintenance windows * Maintain current network diagrams, configuration backups, and technical documentation Systems Administration * Administer Microsoft 365, Entra ID, Active Directory, DNS, DHCP, and group policy * Lead Microsoft Intune and MDM rollouts, including device compliance policies, configuration profiles, and Windows Autopilot * Manage device enrollment and policies for laptops, tablets, and company cell phones, including Apple Business Manager and automated software deployment * Run patching for servers, network devices, and endpoints according to the agreed schedule * Manage public DNS, certificates, and registrar records for company web properties Escalation and Support * Serve as Tier 3 escalation point for issues the Senior IT Support Specialist cannot resolve * Troubleshoot complex network, identity, application, and connectivity problems * Write knowledge base articles so recurring issues can be resolved at Tier 1 or Tier 2 Audio/Video and Telecom Systems * Configure and maintain A/V systems in conference rooms, meeting rooms, and executive offices * Administer the desk phone platform, including call routes, extensions, and system updates * Coordinate American Sound (A/V integrator) and Casa Tech Systems, LLC (cabling) on installs and upgrades Azure, Applications, and AI Integration * Own the Azure platform that hosts Suntec's internal web portals and applications: deployments, Entra-gated access, custom domains and SSL, monitoring, and cost * Build and maintain the data plumbing behind our AI tools: SQL replication from the ERP into Azure, Fabric mirroring, and read-only Model Context Protocol (MCP) connectors that expose business systems to Claude * Stand up and secure new AI connectors and integrations as the business asks for them, holding the standing rule that AI reads data and humans act on it, especially for operational systems such as batch plants and fleet * Use AI assistants (Claude Code or similar) daily for scripting, automation, documentation, and troubleshooting, and help the rest of the team do the same * Maintain source control, deployment pipelines, and dev-to-prod promotion for in-house applications in the company GitHub organization * Manage app registrations, service principals, managed identities, and secrets so every integration runs with least privilege and documented data access Security * Apply remediation items from twice-yearly internal and external penetration tests * Act as technical backup to the IT Operations Manager for EDR/MDR (SentinelOne or CrowdStrike) and Abnormal email security * Maintain the security baseline across Entra conditional access and MFA, firewall filtering, app consent, and backup immutability; investigate and contain phishing and account-compromise incidents MSP Transition * Work with MSP to transfer knowledge, credentials, documentation, and runbooks before March 31, 2027 * Take ownership of all infrastructure monitoring and maintenance at cutover Systems Administration * Administer Microsoft 365, Entra ID, Active Directory, DNS, DHCP, and group policy * Lead Microsoft Intune and MDM rollouts, including device compliance policies, configuration profiles, and Windows Autopilot * Manage device enrollment and policies for laptops, tablets, and company cell phones, including Apple Business Manager and automated software deployment * Run patching for servers, network devices, and endpoints according to the agreed schedule * Manage public DNS, certificates, and registrar records for company web properties Escalation and Support * Serve as Tier 3 escalation point for issues the Senior IT Support Specialist cannot resolve * Troubleshoot complex network, identity, application, and connectivity problems * Write knowledge base articles so recurring issues can be resolved at Tier 1 or Tier 2 Audio/Video and Telecom Systems * Configure and maintain A/V systems in conference rooms, meeting rooms, and executive offices * Administer the desk phone platform, including call routes, extensions, and system updates * Coordinate American Sound (A/V integrator) and Casa Tech Systems, LLC (cabling) on installs and upgrades Azure, Applications, and AI Integration * Own the Azure platform that hosts Suntec's internal web portals and applications: deployments, Entra-gated access, custom domains and SSL, monitoring, and cost * Build and maintain the data plumbing behind our AI tools: SQL replication from the ERP into Azure, Fabric mirroring, and read-only Model Context Protocol (MCP) connectors that expose business systems to Claude * Stand up and secure new AI connectors and integrations as the business asks for them, holding the standing rule that AI reads data and humans act on it, especially for operational systems such as batch plants and fleet * Use AI assistants (Claude Code or similar) daily for scripting, automation, documentation, and troubleshooting, and help the rest of the team do the same * Maintain source control, deployment pipelines, and dev-to-prod promotion for in-house applications in the company GitHub organization, The Systems & Network Engineer is the hands-on owner of Suntec Concrete's IT infrastructure across our on-premises data center and Microsoft Azure: Windows and SQL servers, virtualization, storage and backup, network, firewalls, identity, and endpoint management. This role takes over the infrastructure work currently handled by our managed service provider ahead of our planned in-house transition., Suntec runs a growing set of in-house applications and AI integrations on Azure: internal web portals, data pipelines from our ERP into a Fabric data warehouse, and Claude AI connectors that give staff governed, read-only access to business systems. The engineer keeps that platform running, secure, and connected to the on-prem systems it depends on, and uses AI tooling as a normal part of daily work. AI experience is a requirement for this role, not a nice-to-have. The engineer is also the escalation point for any technical issue beyond Tier 2 support, owns the audio/video systems and desk phone platform, and backs up the IT Operations Manager on cybersecurity tools. This is a three-person team, so the right candidate is comfortable working across a broad range of technologies.