IT Senior Systems Engineer
About The Position
The IT Senior Systems Engineer (Senior Infrastructure & Systems Architect) serves as a principal technical authority for evaluating, designing, and integrating newly acquired environments into the organization’s enterprise infrastructure. The role architects Active Directory and Entra ID domain consolidations and federations, optimizes desktop and application virtualization platforms, and incorporates AI-assisted automation into recurring deployment and maintenance workflows. Security diligence is a central responsibility. The engineer enforces baseline security across migrated systems, manages SSL/TLS certificate lifecycles, and ensures adherence to healthcare regulatory frameworks and patient-data requirements, including HIPAA and HITECH. The position also supports high availability and application performance for distributed clinical and office users, and develops migration runbooks, operational reporting, and telemetry.
Requirements
- 8–10+ years in senior infrastructure systems engineering or solutions architecture.
- Demonstrated experience with multi-site migrations, M&A integrations, or large-scale domain consolidations.
- Proven experience architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID Connect or Cloud Sync.
- Deep hands-on expertise with Citrix Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC, Microsoft RDS, Azure Virtual Desktop, and IGEL thin-client deployments or management.
- Advanced proficiency in PowerShell or Azure CLI for systems administration.
- Proven experience integrating AI assistance or automation tools into operational deployment routines.
- Strong understanding of PKI, SSL/TLS certificate-chain deployment, Web Application Firewalls, and multi-factor authentication.
- Practical understanding of HIPAA Security and Privacy Rules, Business Associate Agreements, and clinical-system audit readiness.
- Bachelor’s degree in Computer Science, Information Technology, or equivalent military or professional experience.
- Work is typically performed in an office environment.
Nice To Haves
- Experience supporting or migrating healthcare workloads and EMR/EHR platforms such as Epic, AthenaHealth, or NextGen.
- Experience migrating workloads across on-premises datacenters, VMware vSphere, and public cloud platforms such as Azure or AWS.
- Citrix Certified Associate/Professional (CCA-V or CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator certification.
Responsibilities
- Lead technical due diligence on acquired entities by evaluating legacy IT environments, network topologies, identity structures, and clinical systems.
- Design and execute Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID tenants while avoiding business-hour downtime.
- Architect, maintain, and tune multi-site virtualization environments using Citrix Virtual Apps and Desktops, Citrix Cloud, Remote Desktop Services, and IGEL solutions.
- Optimize image baselines and FSLogix profile containers to improve host density and reduce compute resource usage.
- Configure and support remote access infrastructure, including NetScaler ADC, Citrix Gateway, load balancing, and StoreFront.
- Identify repetitive infrastructure tasks and design automated workflows for provisioning, image updates, patch testing, and user onboarding and offboarding.
- Use generative AI tools and scripting to accelerate script generation, log auditing, configuration troubleshooting, and runbook documentation.
- Manage SSL/TLS certificates, including renewals, private key security, gateway bindings, and cipher-suite hardening.
- Maintain application performance and high availability for clinicians and office personnel using line-of-business and EMR platforms.
- Create standardized migration runbooks, discovery checklists, and cutover playbooks for user profiles, mailboxes, and file services, targeting seamless transitions without data loss.
- Build operational reporting and telemetry to detect infrastructure bottlenecks, license drift, and capacity constraints proactively.
- Oversee post-acquisition identity governance, including Conditional Access policies, Microsoft Intune endpoint enrollment, and tenant consolidation.
- Enforce security practices across operating systems, hypervisors, and gateway access points, including nFactor MFA, SAML/SSO federation, and Conditional Access.
- Ensure architectural designs and integrated systems comply with HIPAA, HITECH, and clinical data governance guidelines.
- Conduct perimeter assessments and access reviews to protect protected health information and enterprise identities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
