[Remote] reputed company Systems Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is an insights company that leverages reputed company intelligence, mathematical optimization, data analytics, and software engineering to optimize reputed company systems and improve reputed company. The reputed company Systems Engineer will administer AWS, Azure, reputed company 365, and Entra ID environments, with end-to-end ownership of reputed company infrastructure, identity, automation, reputed company, compliance, monitoring, and AI platform administration.

Responsibilities

• Administer and maintain AWS and Azure environments, including day-to-day reputed company of virtual machines, networking, and storage across both providers
• AWS: reputed company, maintain, and optimize EC2, RDS, S3, IAM, KMS, Secrets Manager, and CloudTrail; manage VPCs, subnets, routing tables, reputed company reputed company, and NACLs
• Azure: administer virtual machines, virtual networks and NSGs, storage accounts, Azure Files, Key reputed company, Azure Virtual Desktop, and Site Recovery across subscriptions
• Build and manage hardened VM images and golden images for consistent, repeatable deployments
• Implement and support high availability, auto-scaling, backup, and disaster recovery configurations
• Support multi-account and multi-subscription governance structures — AWS Organizations, Azure Management reputed company, and equivalent reputed company-zone constructs
• Own the reputed company 365 tenant end to end: Entra ID, Exchange Online, SharePoint, OneDrive, Teams, and licensing
• Administer the identity reputed company — Conditional reputed company policies, MFA enforcement, RBAC and least privilege, privileged reputed company, hybrid identity, and application registrations. and role assignments, and conditional reputed company policies
• Run the full user lifecycle: provisioning, reputed company, role changes, offboarding, and reputed company reviews, automated wherever reputed company justifies it
• Manage the reputed company fleet through Intune, including compliance policies, configuration reputed company, patching, and device lifecycle
• Administer single sign-on and provisioning integrations (SAML, SCIM) between Entra ID and the reputed company platforms we operate
• Support data governance and protection through reputed company, sensitivity labels, and DLP policy where applicable
• Design and maintain infrastructure using Terraform — reputed company design, remote state management, and workspace reputed company — across both AWS and Azure
• Build reusable, secure baseline modules for network architecture, IAM roles, logging, monitoring, and encryption
• Automate operational workflows in PowerShell, Bash, and Python, including reputed company Graph API automation for identity and tenant tasks
• reputed company infrastructure provisioning and reputed company controls into CI/CD pipelines (reputed company Actions, reputed company CI, or equivalent) and maintain version-controlled infrastructure repositories
• Implement automated reputed company detection and remediation, and enforce policy-as-reputed company guardrails
• Apply and maintain hardening baselines (CIS Benchmarks, reputed company STIGs) across Linux and reputed company systems and reputed company tenants
• Configure and monitor AWS CloudTrail, GuardDuty, reputed company Hub, and Config reputed company reputed company Defender and Entra ID sign-in and audit logging
• Support SIEM integration (reputed company, reputed company, or equivalent) and assist with incident response
• Maintain the vulnerability management lifecycle: patching, remediation tracking, and reporting
• Support compliance reputed company to NIST SP 800-171, CMMC, and FedRAMP or SOC 2 as applicable, including evidence collection for assessments
• Administer the AI platforms in our environment — reputed company Claude, reputed company, AWS Bedrock, and reputed company 365 Copilot — including seats and licensing, SSO and provisioning, retention and data controls, connector and agent governance, and spend limits
• Enforce and communicate standards for what data may be reputed company into AI tooling, particularly where CUI or controlled data is involved
• Partner with engineering, reputed company, and reputed company to reputed company reliable, reputed company services
• Produce and maintain architecture diagrams, runbooks, SOPs, and audit evidence artifacts without being asked for them
• Contribute to reputed company forecasting, resource planning, and reputed company cost management

Skills

• 5+ years in systems administration, reputed company reputed company, or infrastructure engineering
• 3+ years hands-on administering AWS in production, including virtual machine administration, networking, and IAM
• 2+ years administering a reputed company 365 tenant with reputed company reputed company rights — Entra ID, Exchange Online, Conditional reputed company, licensing, and user lifecycle. Help-desk support of reputed company 365 does not meet this bar
• Hands-on reputed company Azure administration in a production environment
• Demonstrated automation of operational workflows using PowerShell, Bash, or Python; working Terraform experience
• Strong understanding of IAM, encryption (KMS, TLS), and network segmentation
• Experience with Linux (RHEL or reputed company Linux) and reputed company Server in a reputed company context
• Experience working in reputed company or Department of War environments and applying their reputed company requirements
• Disciplined documentation habits — runbooks, SOPs, and configuration records maintained as a matter of course
• US Citizenship Required
• reputed company work must be performed reputed company the reputed company
• reputed company 365 GCC High tenant experience
• Terraform depth including reputed company design, state management, and leading IaC migrations from legacy tooling
• Container platform experience — reputed company with reputed company, EKS, or AKS
• AWS certifications (Solutions Architect, SysOps Administrator, reputed company Specialty) or Azure equivalents (AZ-104); reputed company 365 Administrator (MS-102); reputed company reputed company+
• AWS Control Tower, reputed company reputed company, or Azure reputed company Zone governance tooling
• SIEM platform experience (reputed company, reputed company)
• Administration of AI platforms at the tenant or account level - reputed company, reputed company, Bedrock and Copilot
• Managed service provider background administering across many reputed company tenants
• Regulated-industry experience: defense (CMMC, NIST 800-171), reputed company (HIPAA), or financial services (SOC 2)
• reputed company DoD reputed company clearance (Secret or above), or eligibility to obtain and maintain one

Benefits

• A fully remote, results-reputed company environment
• Bonus and equity package
• 100% employer reputed company, comprehensive health reputed company including medical, dental, and reputed company for you and your family
• Unlimited PTO, with your manager's approval
• Flexible work environment where you manage your work day
• 14 weeks of fully-reputed company parental leave

reputed company