Senior Systems Engineer

About Us:

We’re a fast-growing, privately held insurance company on a path to become a leading U.S. retail platform. We believe every client and customer relationship holds the potential to grow into something greater, and the same is true for our people. As we grow, we’re redefining how great talent connects with meaningful work, enabling our ambitious strategy while building a culture of high performance, creativity, and partnership. If you’re driven by building reliable, secure infrastructure that supports critical financial operations, and you enjoy blending technical expertise with real-world business impact, you’ll thrive here!

About the Role:

We’re looking for a Senior Systems Engineer who brings deep infrastructure expertise, a problem-solver mindset, and a passion for building and maintaining resilient, secure systems. In this role, you’ll own and advance our data center, Cloud, and Microsoft 365 environments, with a strong focus on server infrastructure, identity, data protection, and disaster recovery.

You’ll play a key role in provisioning, configuring, and optimizing infrastructure across Nutanix HCI, Windows Server, AWS, and Microsoft 365 platforms—while ensuring seamless integration across systems, identity services, and proprietary applications. You’ll lead efforts to modernize legacy infrastructure, harden identity and policy controls, and maintain robust backup, recovery, and monitoring capabilities.

This role partners closely with IT teams and business stakeholders to ensure our environment remains scalable, secure, and built for the future—bringing together technical expertise and practical execution to drive meaningful impact across the organization.


What You’ll Do:

Build and Maintain Core Infrastructure

• Own and optimize Nutanix HCI infrastructure, including cluster upgrades, health monitoring, and capacity planning
• Own Windows Server environments spanning legacy (2003+) through current versions, including hands-on upgrade and migration projects
• Deploy, configure, and maintain Microsoft Failover Clusters and SQL Server deployments in clustered and standalone configurations
• Support AWS infrastructure and services as a strong complement to on-premises workloads
• Perform ongoing performance tuning, capacity planning, and resource optimization to support business growth
• Lead legacy-to-modern server upgrade initiatives, ensuring minimal disruption and full documentation of the migration path


Data Protection and Disaster Recovery

• Design, implement, and maintain data protection strategies, including backup policies, replication, and retention management
• Own disaster recovery planning, testing, and execution to ensure business continuity across all critical systems
• Support and optimize Wasabi object storage for backup targets and archival workloads
• Leverage Nutanix-native data protection features, including snapshots, replication, and DR runbooks


Identity, Directory, and Access Management

• Serve as the subject matter expert for Active Directory—including AD Sites and Services, OU structure hardening, Group Policy design and enforcement, and schema management
• Support hybrid Active Directory environments, including synchronization between on-premises AD and Entra ID
• Support and troubleshoot Entra ID for SSO, SAML-based application integrations, Conditional Access policies, and identity governance
• Own the enterprise PKI and certificate infrastructure, including CA hierarchies, certificate lifecycle management, renewal processes, and integration with public certificate authorities such as DigiCert
• Support and troubleshoot Intune device management policies, including compliance, configuration profiles, and patch management


Microsoft 365 and Cloud Productivity

• Serve as the escalation point and subject matter expert for Microsoft 365, including Exchange Online, SharePoint Online, Teams, and OneDrive
• Provide deep technical support and guidance on SharePoint architecture, permissions, and content governance across the organization
• Troubleshoot, validate, and support Conditional Access policies aligned to Zero Trust principles
• Act as the escalation owner for Mimecast email security, including policy troubleshooting, threat protection, DMARC enforcement and monitoring, and continuity services

DNS, Networking, and Security

• Serve as the DNS authority for both public and private DNS—managing zones, records, delegation, split-horizon configurations, and DNS security practices
• Design, implement, and support network infrastructure, including routers, switches, firewalls (including Fortinet), and connectivity solutions
• Leverage deep knowledge of TCP/IP, routing protocols (BGP, O