IT Systems Engineer

Watchmaker Genomics•Boulder, CO, CO

1d•$85,000 - $110,000•Onsite

About The Position

Watchmaker Genomics is inviting applications for the full-time position of IT Systems Engineer, an onsite role in our Boulder, Colorado office. This position reports to the Director IT, Boulder site for day-to-day execution and service delivery. The position will implement and maintain IT infrastructure and cloud services, change management, problem identification and resolution, and configuration management activities. Additionally, this position is expected to assist in the creation of new processes, work instructions, infrastructure documentation and knowledge base articles. The successful candidate will thrive in a dynamic, fast-paced working environment and contribute directly to our company culture and success. This position will offer unique challenges, learning and growth including the opportunity to build and supervise a global service desk team.

Requirements

Extensive experience designing, implementing, and managing complex IT infrastructure, including servers, storage, virtualization, and cloud services (Microsoft Azure);
Proven, hands-on experience configuring and administering the Microsoft cloud platform, these are critical requirements for the position:
Microsoft Entra (identity management, identity and access administration),
Microsoft Azure (infrastructure and cloud services),
Microsoft Intune (endpoint management),
Microsoft Defender (security and cyber security protection);
macOS endpoint management via JAMF, a critical requirement for the position;
Advanced network knowledge and hands-on network infrastructure configuration, including routing, switching, wireless, firewalls, VPNs, and load balancing, essential for this position;
Strong knowledge of network protocols and experience with security best practices, including vulnerability assessments, patching, and implementing security frameworks;
Proficiency in managing and administering Windows servers, including Active Directory, DNS, DHCP, and other core services;
Experience with automation tools and scripting languages (e.g., PowerShell, Python, Bash) for automating system administration tasks and managing large-scale environments;
Practical experience designing and executing disaster recovery plans, including the management and verification of backup systems and ensuring business continuity;
Experience leading or participating in IT projects, including system upgrades, migrations, and deployments, with the ability to coordinate across teams;
A disciplined, documentation-first approach to operations with a proactive risk mindset, anticipating issues, communicating early, and escalating appropriately;
Strong interpersonal skills and an ability to work as an effective member of a team.

Nice To Haves

Experience in multi-national or corporate environments are essential;
Experience with the ITIL framework and other IT Service management tools;
Familiarity with industry standards and regulations such as ISO, NIST, POPIA, GDPR, or HIPAA, and experience implementing security policies to meet compliance requirements;
Computer Systems Validation (CSV) experience in manufacturing environments;
Microsoft role-based certifications (e.g., Azure Administrator Associate, Endpoint Administrator Associate, Security Operations Analyst) and JAMF certifications are advantageous.

Responsibilities

Implement complex IT infrastructure, including servers, storage, networks, and cloud services, in line with Watchmaker's global architecture standards.
Administer identity, authentication and access management in Microsoft Entra, including conditional access, multi-factor authentication, and joiner/mover/leaver processes.
Build, administer, and maintain infrastructure and cloud services in line with global standards.
Manage Windows endpoints and macOS endpoints, including enrollment, compliance, configuration baselines, and application deployment.
Operate security systems across endpoints and cloud workloads; monitor, triage, and respond to security alerts; execute patch and vulnerability management.
Configure, maintain, and troubleshoot the site network infrastructure, including switching, wireless, firewalls, and VPNs.
Execute or oversee the installation, configuration, and maintenance of servers, virtual environments, and enterprise applications.
Monitor system performance, troubleshoot issues, and optimize infrastructure for stability, security, and efficiency.
Develop and use automation tools/scripts to streamline operations and system management.
Perform required Computer Systems Validation actions.
Maintain accurate and current infrastructure documentation, work instructions and knowledge base articles; execute all changes through formal change management.
Proactively identify, communicate, and escalate risks, incidents and capacity constraints to the Director IT, Boulder site and the Global IT Systems Engineer in a timely manner.
Provide guidance to service desk staff and collaborate with cross-functional and global teams to meet business objectives.
Design and implement disaster recovery (DR) plans, ensuring critical systems and data can be restored in case of failure or outage.
Oversee regular backups of data, systems, and configurations, ensuring that backups are complete, secure, and recoverable, and that restores are verified through scheduled test recoveries.
Implement and maintain redundancy for key systems (e.g., servers, storage, network components) to minimize downtime and ensure business continuity during failures.
Conduct regular DR testing and simulations to validate the effectiveness of recovery plans, ensuring systems can be restored according to recovery time objectives (RTOs) and recovery point objectives (RPOs).
Lead response efforts during major system outages or disasters, coordinating recovery activities, and communicating status updates to stakeholders.
Maintain detailed documentation of continuity and recovery procedures, regularly reviewing and updating plans to align with business changes and new technologies.
Identify, analyze, and resolve issues related to servers, networks, storage, and applications.
Investigate recurring problems to determine the underlying causes and implement long-term solutions.
Troubleshoot slow or underperforming systems by analyzing resource usage (CPU, memory, disk) and resolving bottlenecks.
Diagnose and resolve network outages, latency, or connectivity problems across local and wide-area networks (LAN/WAN).
Address security issues like unauthorized access, malware, or firewall misconfigurations, ensuring system integrity and protection.
Continuously track the performance of servers, networks, and storage systems to identify and resolve bottlenecks.
Regularly assess the status of hardware, software, and virtual environments to ensure they are running optimally.
Monitor for security threats, vulnerabilities, and unusual activities using tools like firewalls, intrusion detection systems (IDS), and security information and event management (SIEM).
Respond to system alerts, outages, and incidents promptly, ensuring minimal downtime and quick recovery.
Monitor resource usage (CPU, memory, storage) and forecast future needs to ensure system scalability and reliability.
Cloud infrastructure monitoring and maintenance.
Regular cloud costing reviews.
Support cloud engineers in troubleshooting.
Monitor adherence to internal business processes and procedures.
Submit, track and optimize purchasing from existing and new suppliers.