Senior Analyst (Systems Engineer)

Golub Capital•Chicago, IL

26d•$80,000 - $120,000•Hybrid

About The Position

The Technology Solutions (“TS”) Department is responsible for designing and delivering state of the art technology solutions that are designed to create efficiency, mitigate risk and grow revenue for the Firm. Technology Solutions is also responsible for defining, managing and executing a robust Cyber Security program following the NIST Cyber Security Framework. Technology Solutions focuses on technical excellence through innovative application designs, robust data integration and analytics, high availability infrastructure and gold level service for our key stakeholders with information security embedded throughout. Critical functions within Technology Solutions include Project Management, Vendor Management, Business Analysis, Enterprise Data Governance and Stewardship, Application Development and 3rd Party Integration and Strategic and Secure Infrastructure and Operations. The Technology Solutions Department collaborates closely with Firm leadership and business unit heads to develop plans in line with business objectives. This hands-on engineering role will design, automate, secure and operate Microsoft-centric cloud and hybrid infrastructure while providing technical leadership for modernization, resiliency and operational improvement initiatives. A successful candidate will be comfortable moving between architecture, implementation, troubleshooting, documentation and stakeholder communication.

Requirements

Bachelor’s degree in Computer Science, Information Systems or a related field is required
5+ years of relevant experience in infrastructure, cloud or systems engineering
Deep hands-on experience administering and engineering Microsoft Azure and Microsoft 365 enterprise environments
Strong Azure experience across virtual machines, storage, virtual networks, private endpoints, load balancing, identity dependencies, App Service, Functions, Logic Apps, Key Vault and Azure SQL connectivity
Advanced PowerShell skills and working proficiency with Azure CLI, REST APIs and Microsoft Graph
Hands-on Infrastructure as Code and CI/CD experience, preferably Bicep, Azure DevOps Pipelines and Git
Experience with Microsoft Entra ID, Conditional Access, PIM, enterprise applications, managed identities, certificates, secrets and modern authentication
Experience with Azure Virtual Desktop, Intune, Autopilot and Windows endpoint or server lifecycle management
Experience with monitoring and troubleshooting using Azure Monitor, Log Analytics, Application Insights, Defender XDR or Microsoft Sentinel, including practical KQL skills
Experience with backup, disaster recovery and resiliency design
Working knowledge of Windows Server, Active Directory, Group Policy, DNS, PKI, Kerberos and hybrid identity; experience modernizing away from legacy domain dependencies is highly desirable
Experience with security hardening, vulnerability remediation, audit evidence collection and control frameworks such as NIST CSF and CIS benchmarks
Supporting production releases, structured change management, incident management and problem management in a regulated enterprise environment
Ability to translate business and risk requirements into supportable technical designs and to explain tradeoffs to both technical and non-technical stakeholders
Strong documentation, communication, mentoring and cross-team collaboration skills
Self-directed and accountable, with the judgment to work independently, escalate appropriately and remain effective in a fast-paced environment
Willingness to participate in a 24x7 Infrastructure on-call rotation

Nice To Haves

Veeam experience and multi-region Azure architecture experience are beneficial
Preferred Microsoft certifications such as Azure Administrator Associate, Azure Solutions Architect Expert, Azure Network Engineer Associate, Cybersecurity Architect Expert or Microsoft 365 Administrator Expert
Experience with Infoblox, Zscaler, CyberArk, Patch My PC, ServiceNow, OnePlan or comparable enterprise platforms is preferred
Experience designing cloud-native server management, configuration management and software deployment patterns that reduce reliance on SCCM and traditional Group Policy is preferred
Experience applying AI-assisted engineering or agentic automation to operational workflows with appropriate security, identity and governance controls is preferred
ITIL Foundation or comparable experience with disciplined service management practices is preferred
Demonstrated ability to effectively leverage AI tools in day-to-day work, with strong critical thinking to assess accuracy, limitations and appropriate use of AI generated outputs
Enthusiastic about working in office and creating a Gold Standard hybrid work culture

Responsibilities

Designing, building and operating Azure infrastructure across compute, storage, networking, identity and platform services with strong attention to availability, performance, security and cost
Providing senior-level administration and engineering for Exchange Online, Teams, SharePoint Online, OneDrive and related Microsoft 365 services
Administering Microsoft Entra ID, Conditional Access, enterprise applications, managed identities, authentication methods and Privileged Identity Management using least-privilege principles
Engineering and supporting Azure Virtual Desktop host pools, application delivery, profile management, image lifecycle, monitoring, performance and resiliency
Supporting Microsoft Intune, Autopilot, Windows Server and the transition toward cloud-native management including reduction of legacy SCCM and Group Policy dependencies
Developing production-quality PowerShell and Azure CLI automation; use Git-based workflows, code review and controlled promotion across environments
Using Azure Monitor, Log Analytics, Application Insights, Defender tooling and KQL to detect, diagnose and remediate service health, security and performance issues
Designing and testing backup, recovery, high availability and multi-region patterns using Azure-native services and Veeam where appropriate
Supporting Azure App Service, Functions, Logic Apps, Key Vault, private endpoints, API connectivity, Power BI gateways and related application infrastructure
Partnering with networking teams to manage and enhance Azure connectivity, private access, segmentation and the Infoblox cloud DNS environment
Building systems aligned with NIST and CIS expectations, remediate vulnerability findings, maintain certificates / secrets and produce audit-ready technical evidence
Participating in the Infrastructure on-call rotation, leading response to critical incidents, performing root-cause analysis and documenting, automating and monitoring recurring operational work
Creating and maintaining support articles, operating procedures, architecture diagrams / runbooks and mentoring team members through reviews and knowledge transfer
Leading technical workstreams, estimating and sequencing delivery, coordinating with vendors and partner teams, managing risks / dependencies and communicating clearly with technical and executive stakeholders
Evaluating practical uses of agentic AI and Microsoft Copilot capabilities for infrastructure operations, documentation, monitoring and workflow automation while following security and governance requirements