Senior Engineer, Software

Thank you for considering a career at Ensemble!

Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

Ensemble RCM LLC seeks a Sr. Engineer, Software in Blue Ash, OH to design, deploy, and maintain Azure infrastructure, including virtual networks, VMs, storage accounts, and other Azure resources, ensuring cost-effective, secure, and scalable solutions. Develop automation scripts in PowerShell to streamline infrastructure management tasks, including configuration, patching, and backup procedures. Support Cloud infrastructure, managing identity and access controls, resource allocation, and network security. Implement and manage Azure Resource Manager (ARM) templates, Azure Policies, and role-based access control (RBAC) for optimized resource management and security across Azure and AWS environments. Administer Intune Endpoint Security and Microsoft Endpoint Configuration Manager (SCCM) to ensure endpoint compliance and security. Address vulnerabilities in Windows servers and workstations, implement Intune Endpoint Protection, and enforce device security policies. Responsible for third-party application patching, OS/SCCM upgrades, and Windows 11 upgrade processes. Responsible for Microsoft Entra ID and SSO configurations, including the secure onboarding of applications and management of user identities. Administer BitLocker and LAPS for secure device encryption across Azure AD and Hybrid AD environments. Configure and manage client secrets, app registrations, Windows Hello, and NDES for secure access. Responsible for Vyne eFax infrastructure, including user migration from RingCentral to Vyne Trace eFax. Troubleshoot eFax connectivity and performance issues, ensuring seamless document transmission and minimal downtime. Collaborate with internal teams to onboard new clients to Vyne Fax, integrating solutions within existing infrastructure. Update and test infrastructure backups, snapshots, and disaster recovery configurations. Configure and maintain access to shared resources across Azure, including monitoring service health and managing client secrets and app registrations. Coordinate MECM/SCCM and Intune administration for application packaging, Windows 11 upgrades, and ongoing maintenance. Design Windows Forms applications in .NET for simplified internal processes and administrative support. Design, deploy and manage Microsoft Intune for mobile device management (MDM), mobile application management (MAM), and compliance policies across the organization. Implement security policies and endpoint protection using Microsoft Intune, ensuring all devices (Windows, iOS, Android, macOS) to ensure they comply with organizational standards. Administer and maintain the System Center Configuration Manager (SCCM) infrastructure, ensuring effective patch management, software deployment, and operating system imaging across a large-scale environment. Manage and optimize Azure Active Directory (Azure AD), including Azure AD Join, Conditional Access, and Identity Protection, ensuring security and compliance in a hybrid cloud environment. Implement and manage Azure-based services and virtual networks, including but not limited to Azure automation, Azure monitor, and Azure Security Center.

Minimum Requirements:

Requires a Master's degree in Computer Science, Applied Engineering, Electronic Engineering, Information Technology or a related field and two years (or Bachelor's degree and 5 progressive years) of software engineering experience in:

• Azure and cloud administration, endpoint security, and infrastructure management
• Microsoft Intune, SCCM, and vulnerability management for enterprise security
• AWS IAM, cloud networking, and multi-cloud integrations