L3 Systems Engineer

SUMMARY

We are looking for an experienced Level 3 Systems Engineer who can solve complex technical problems, design and implement solutions, lead projects, mentor other technicians, and serve as a senior technical escalation resource.

This position combines advanced Tier 3 technical support with systems engineering, cloud infrastructure, networking, cybersecurity, and project responsibilities.

When Tier 1 and Tier 2 technicians encounter difficult server, Microsoft cloud, networking, cybersecurity, or infrastructure problems, you are one of the people they escalate to.

You will also design, implement, migrate, secure, and improve client technology environments.

You should be comfortable independently investigating complex technical problems, developing a plan, implementing a solution, and communicating with the client throughout the process.

Candidates whose experience is primarily desktop support, helpdesk, or Microsoft 365 administration without meaningful hands-on Windows Server experience will not meet the technical requirements of this position.

JOB RESPONSIBILITIES

• Windows Server and Active Directory
  
• Strong hands-on Microsoft Windows Server experience is required.
  
• You should be comfortable administering, engineering, and troubleshooting:
  
• Windows Server 2016, 2019, 2022, and newer environments
  
• Active Directory Domain Services, Domain Controllers, and Active Directory replication
  
• Group Policy
  
• DNS and DHCP
  
• Authentication and domain trust issues
  
• File servers, NTFS permissions, and shared folders
  
• Windows services, Event Viewer, storage, networking, and performance
  
• Hyper-V and VMware environments
  
• Windows Server migrations, upgrades, replacements, and decommissioning
  
• Hybrid Active Directory and Microsoft cloud environments
  
• You must be able to walk into an unfamiliar Windows Server environment, determine how it is configured, identify problems, and independently develop a solution.
  
• Microsoft 365, Azure, and Cloud Engineering
  
• Modern client environments increasingly combine traditional infrastructure with cloud-hosted services.
  
• You must be comfortable supporting both, including traditional Active Directory, hybrid Active Directory and Entra ID, and cloud-only environments.
  
• You will:
  
• Administer and troubleshoot Microsoft 365 environments, including Exchange Online, SharePoint Online, Microsoft Teams, and Microsoft Intune
  
• Administer Microsoft Entra ID, including identity, roles, authentication, MFA, and Conditional Access
  
• Support and troubleshoot Microsoft Azure and cloud-hosted infrastructure, including virtual machines, storage, networking, identity, connectivity, servers, applications, and services
  
• Lead or assist with client transitions and migrations to Microsoft 365, Azure, Exchange Online, SharePoint, Entra ID, SaaS, and hybrid-cloud architectures
  
• Apply modern identity-security and Zero Trust principles to cloud environments
  
• Networking and Cybersecurity
  
• Making something work is only part of the job. It also needs to be secure.
  
• You will:
  
• Configure and troubleshoot LAN and WAN, VLANs, routing, switching, wireless, VPNs, DNS, and DHCP
  
• Configure and support next-generation firewalls, switches, wireless access points, and secure remote access
  
• Work with Fortinet technologies including FortiGate, FortiSwitch, FortiAP, FortiManager, FortiClient, and EMS
  
• Configure, administer, and troubleshoot iBoss SaaS cloud security solutions
  
• Support endpoint security, EDR, MFA, email security, SOC monitoring, vulnerability management, and secure web technologies
  
• Assist with cybersecurity remediation, system hardening, and incident response
  
• Apply cybersecurity best practices when designing and implementing technical solutions
  
• Systems Engineering and Advanced Escalations
  
• Own complex technical escalations from diagnosis through resolution
  
• Perform root-cause analysis and design long-term solutions rather than relying on temporary fixes
  
• Analyze logs, monitoring data, packet captures, and other diagnostic information to resolve complex issues
  
• Work directly with vendors on advanced technical issues
  
• Identify opportunities to improve client technology environments
  
• Clearly communicate technical findings, business impact, and recommended solutions
  
• Projects, Backup, and Disaster Recovery
  
• You will lead or participate in projects involving:
  
• Windows Server replacements and migrations
  
•   Microsoft 365, Azure, Entra ID, SharePoint, file, on-premises-to-cloud, and hybrid-cloud migrations
  
• Firewall, network, and wireless projects
  
• Cybersecurity implementations
  
• Backup and disaster-recovery solutions
  
• Infrastructure modernization
  
• You will develop implementation plans, identify risks, create rollback plans when appropriate, coordinate with clients and vendors, test changes, and accurately document completed work. You will also support backup and disaster-recovery environments, troubleshoot backup failures, perform restores and recovery testing, and assist during major recovery events.
  
• Mentoring and Technical Leadership
  
•   A Level 3 Systems Engineer should make the entire technical team stronger
  
• You will:
  
• Mentor Tier 1 and Tier 2 technicians and review their technical escalations
  
• Teach troubleshooting skills rather than simply providing answers
  
• Share technical knowledge with the team and improve technical documentation
  
• Help establish and improve technical standards and best practices
  
• Lead through your actions, regardless of title
  

Requirements

• Minimum of 3 years of MSP experience
  
• Experience at a Senior Tier 2, Senior NOC, Tier 3, Systems Administrator, Systems Engineer, or comparable technical level
  
• Significant hands-on Windows Server administration and troubleshooting experience, including strong Group Policy, DNS, DHCP, authentication, permissions, and Active Directory troubleshooting skills
  
• Experience performing Windows Server migrations, upgrades, and replacements
  
• Experience supporting Hyper-V and/or VMware
  
• Strong Microsoft 365 and Exchange Online knowledge
  
• Strong Microsoft Entra ID administration and troubleshooting skills, including MFA, Conditional Access, and modern identity-security technologies
  
• Working knowledge of Microsoft Azure and cloud-hosted infrastructure, including Azure Virtual Machines, networking, storage, identity, and cloud-security concepts
  
• Experience supporting hybrid Active Directory and Entra ID environments
  
• Strong networking knowledge, including TCP/IP, VLANs, routing, switching, VPNs, and wireless
  
• Experience configuring and troubleshooting next-generation firewalls
  
• Familiarity with how MSPs use RMM, PSA, documentation, and remote-support platforms
  
• Strong root-cause troubleshooting and problem-solving skills
  
• Ability to independently research and learn unfamiliar technologies Strong written and verbal communication skills
  

Technology You'll Work With

· Our environment includes technologies such as Windows Server, Active Directory, Microsoft 365, Microsoft Entra ID, Azure, Exchange Online, SharePoint, Intune, Hyper-V, VMware, Fortinet, iBoss SaaS, Datto RMM, Autotask PSA, Kaseya technologies, Datto BCDR, Microsoft Defender, RocketCyber SOC, EDR, vulnerability management, email security, and VoIP and UCaaS platforms.