IT Systems Engineer

CSM Corporation•Minneapolis, MN

1d•$100,000 - $120,000

About The Position

The Systems Engineer performs advanced systems administration, cloud engineering, and infrastructure design work. The role will primarily focus on continuously designing, building, and optimizing all CSM systems, including but not limited to Microsoft cloud technologies, endpoint management, identity security, and on premise infrastructure. This role combines hands-on operational support, engineering design and build responsibilities, and service coverage within a small, centralized IT Operations and Security team. Additionally, the Systems Engineer serves as the technical escalation point for more technically challenging service requests or incidents, regularly receiving and working service request and incident escalations from the IT Support Specialist II role. This role will contribute to frontline support during early business hours, absences, and during events generating elevated call volume. This position requires a strong technical foundation, a service-oriented mindset, and the ability to shift fluidly between deep engineering work and end-user support when necessary.

Requirements

At least a Bachelor’s (4 year) degree in a relevant field such as Computer Science, Cybersecurity, or Systems Management.
At least 5+ years of IT Administration or Systems experience, preferably in a multi-site or hospitality/retail environment.
Demonstrated proficiency with: Microsoft 365 engineering and administration (Exchange Online, SharePoint, OneDrive, Teams) Azure Cloud Infrastructure Designing and implementing Microsoft Intune environments Windows 10/11 Provisioning and managing endpoints using Microsoft Intune and Microsoft Autopilot Migrating endpoints, users, and applications from On-Premise Active directory and ADFS to Entra ID. Troubleshooting networking fundamentals (DNS, DHCP, VPN, Wi-Fi, TCP/IP)
Experience conducting troubleshooting and technical escalations for issues related to both on premise and cloud environments leveraging Microsoft Windows
Demonstrated proficiency with managing Cybersecurity incident response processes, including quarantining affected systems, conducting forensic investigations, remediating, and coordinating with external security resources like MDR partners.
Deep understanding and demonstration of proficiency with ITSM best practices regarding management of issues, problems, and knowledge/documentation.
Strong written and verbal communication skills and a commitment to accurate documentation.

Nice To Haves

Experience with cloud based ITSM/CMDB tools such as SysAid, Freshservice, NinjaOne, or equivalent
Understanding of cybersecurity principles and frameworks (CIS v8, NIST).

Responsibilities

Designs, tests, implements, and maintains Microsoft Intune configurations including device enrollment, compliance policies, configuration profiles, application deployment, and update/patching rings.
Designs, tests, implements and maintains Azure cloud systems and components relevant to endpoint management, identity, and security, aligned with organizational standards and scale.
Designs, tests, Implements and maintains conditional access policies, identity protection controls, and authentication standards across Entra ID.
Designs, tests, deploys, and supports Windows Hello for Business and other modern security/authentication configurations across managed Windows environments.
Configures and supports other Microsoft security functionality as necessary to support compliance with security benchmarks, and creates automations to establish and maintain compliance with CSM’s secure configuration baseline.
Develops and maintains PowerShell scripts, Power Automate flows, and Microsoft Graph APIs to automate repetitive administrative tasks such as deployments, audits, and remediations.
Designs automated approaches that reduce manual effort for both engineering and frontline support functions.
Maintains script documentation, version control practices, and safe execution standards.
Acts as the escalation resource for the Senior IT Support Specialist, doing in-depth root cause analysis and remediation for service requests needing more specialized technical knowledge
Conducts advanced troubleshooting for identity, endpoint, Microsoft 365, networking-adjacent, and security-related issues.
Serves as primary support resource on phones and email during early business hours (7:30–9:00 AM) and during planned or unplanned absences of the Senior IT Support Specialist, or when the Senior IT Support Specialist is busy with other requests/ calls.
Serves as co- primary support resource during events that drive elevated call volume, including but not limited to: Changes affecting end user experience Security Incidents Outages
Coordinate additional support coverage with the IT Operations & Security Manager and Technical Architect as necessary.
Takes all end user requests with a strong customer service mindset, communicating all instructions, next steps, and resolutions with clarity and professionalism.
Document all end user communication, remediation steps, workarounds, recommendations, and other notes in the ITSM platform, utilizing all ITSM functionality to ensure a high-quality database of best practices and documentation is maintained.