IT Systems Engineer, Senior

Central Arizona Project•Headquarters - Phoenix 85024, AZ

6h•Hybrid

About The Position

The Central Arizona Project (CAP) is seeking a Senior IT Systems Engineer to provide advanced functional support, subject matter expertise, and end-user support for CAP's enterprise applications. This role involves engineering, administering, and troubleshooting CAP's enterprise systems, resolving functional problems, and collaborating with technical staff and external consultants. The position also includes training clients, communicating critical functional issues to management, coordinating user upgrade testing, production patching, and maintaining security posture. The Senior IT Systems Engineer will maintain contact with customers, vendors, and user groups to understand trends and assist CAP in making strategic decisions, determine job priorities based on criticality and business need, and act as a Subject Matter Expert (SME) and mentor to other Systems Engineers, Administrators, and Technical Specialists.

Requirements

Bachelor degree in Information Systems or a related field with 5 years experience or Associates degree with 7 years experience or High School diploma/equivalent with 14 years of experience.
Demonstrated expert level engineering and administration skills of applicable applications listed above.
Experience with configuring and installing applications.
Intermediate level skills in server architecture design.
Intermediate level skills in Microsoft Azure, IaaS, PaaS and SaaS.
Proven ability to write clear and concise documentation, procedures, and correspondence.
Must possess a valid driver's license and maintain a good driving record.

Nice To Haves

Expert level experience with Windows Domain environment - AD, DNS, DHCP, GPO, PKI.
Expert level experience with Microsoft 365 ecosystem and Windows Servers
Intermediate level experience with security patching and vulnerability mitigation in a Windows environment.
Intermediate level experience with virtualized server environments (VMWare)
Intermediate experience with cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks
Exposure to various storage and backup technologies.
Experience with Microsoft Intune and Defender is a plus.

Responsibilities

Directs the full lifecycle of Windows Server infrastructure (provisioning, patch orchestration, upgrade/migration, vulnerability mitigation, and structured decommissioning).
Architects and secures enterprise Active Directory, DNS/DHCP, and PKI environments, GPO governance, privileged access segmentation, high availability service configuration, certificate lifecycle automation, and integration with MFA based authentication and device trust systems.
Manages and optimizes the Microsoft 365 ecosystem, including Exchange Online, Teams, SharePoint Online, and Azure AD Connect; enforce identity governance, conditional access, and tenant level security baselines.
Works with the Cloud Architect on cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks.
Maintain a working knowledge of virtualization platforms and concepts, including virtual networking, storage abstractions, and VM lifecycle operations, with practical understanding of resource optimization and host cluster management.
Manage and prioritize all enterprise system problems and changes originating from the IT Computer Support Desk and Change Review Committee.
Resolve functional issues and obtain assistance if necessary from support, outside consultants, or internal technical staff.
Open and manage service requests with the Computer Support desk.
Work with technical systems administrators, super users, and database administrators to coordinate the application and testing of upgrades or patches.
Communicate the status of open problems and changes to clients and management.
Participate on applicable meetings and discussions supporting enterprise system issues.
Provide status of open issues and client requests as requested.
Partner with security, networking, cloud, and application teams to deliver integrated infrastructure solutions, secure and resilient and hybrid identity initiatives.
Expert level knowledge of applicable functional areas such as Windows Domain environment (AD, DNS, DHCP, GPO, PKI), Microsoft 365 ecosystem, Windows Servers, security patching and vulnerability mitigation in a Windows environment.
Intermediate level knowledge of virtualization platforms and concepts, including virtual networking, storage abstractions, and VM lifecycle operations, with practical understanding of resource optimization and host cluster management.
Intermediate level knowledge of cloud integration and workload migrations across IaaS and PaaS platforms such as Azure App Services, Azure Storage, Azure SQL, and Azure Virtual Networks.
Work with technical staff and super users to develop test plans, implement test plans, move fixes from test to production environment, and provide post-installation support.
Manage the testing of upgrades or patches and report the status on a periodic basis.
Partner with the user community to develop requirements for major enhancements, additional functionality, or changes necessary to other Enterprise systems.
Lead major projects across divisional lines to accomplish the defined goals.
Create and maintain detailed project plans to keep the project within scope and on time.
Locate and bring outside resources into the project when necessary.
Perform any required training of super users or clients on the functions of the applicable application.
Partner with the training department to develop or obtain the necessary training materials.
Mentoring of team members for added responsibilities.