Senior IT Systems Engineer

Nexxen•New York, NY

4d•$100,000 - $130,000

About The Position

The Senior IT Systems Engineer is a senior technical leader responsible for the design, administration, security, reliability, and operational excellence of Nexxen’s enterprise technology platforms across cloud, SaaS, and on-premises environments. The role leads infrastructure strategy and modernization, strengthens security and compliance controls, and serves as a key escalation point for complex technical issues. With substantial autonomy, the engineer partners with business and technical teams to deliver highly available, secure, and scalable technology solutions. The role also improves operational efficiency through automation, standardization, and process improvement.

Requirements

At least 7 years of experience in systems engineering, infrastructure engineering, or related enterprise IT roles.
Demonstrated experience managing complex enterprise environments across cloud, SaaS, and on-premises platforms.
Strong expertise with AWS cloud infrastructure and services.
Strong expertise with Microsoft 365 and Entra ID.
Strong expertise with Active Directory and identity services.
Strong expertise with VMware administration.
Strong expertise with enterprise networking, routing, switching, firewalls, VPNs, and high-availability architectures.
Experience implementing and supporting SSO, MFA, SCIM provisioning, RBAC, and access governance.
Advanced PowerShell scripting and automation experience using APIs and Microsoft Graph.
Strong knowledge of cybersecurity principles, vulnerability management, risk management, and compliance frameworks.
Experience leading infrastructure projects, migrations, and operational improvement initiatives.
Proven ability to perform advanced troubleshooting and root cause analysis across infrastructure, networking, cloud, and SaaS technologies.
Strong documentation, communication, and cross-functional collaboration skills.

Nice To Haves

Industry certifications in AWS, Microsoft, VMware, Security, or Networking.
Experience with Google Cloud Platform (GCP).
Experience administering PagerDuty or similar incident management platforms.
Experience supporting global, geographically distributed organizations.

Responsibilities

Design, implement, and support enterprise infrastructure across AWS, Azure, Microsoft 365, SaaS platforms, and on-premises environments.
Lead infrastructure modernization, platform standardization, migration, and lifecycle management initiatives.
Design and support highly available, scalable, and resilient systems, including disaster recovery and business continuity capabilities.
Perform capacity planning, performance optimization, proactive monitoring, and operational health management.
Lead complex troubleshooting, root cause analysis, and post-incident remediation activities.
Serve as the highest-level escalation point for infrastructure, networking, cloud, and identity-related issues.
Architect and administer Active Directory and Microsoft Entra ID environments.
Lead enterprise identity initiatives, including SSO, SCIM provisioning, MFA, and identity lifecycle management.
Implement and maintain RBAC, privileged access controls, and least-privilege security models.
Partner with application owners to integrate enterprise authentication and access governance solutions.
Administer and optimize Microsoft 365 services, including Exchange Online, SharePoint Online, Teams, and OneDrive.
Develop automation solutions using PowerShell, Microsoft Graph, APIs, and cloud-native technologies.
Implement AI-enabled operational efficiencies while maintaining governance, security, and compliance controls.
Support and integrate enterprise collaboration platforms, including Microsoft 365, Slack, and Jira Cloud.
Administer and optimize enterprise network infrastructure, including Cisco Meraki and Palo Alto Prisma Access/GlobalProtect environments.
Design and maintain secure remote access, VPN, segmentation, firewall, and network security architectures.
Implement security controls across cloud, identity, endpoint, and network environments.
Lead vulnerability management, patch management, endpoint protection, and remediation programs.
Assess infrastructure and technology risks and recommend mitigation strategies.
Define and maintain backup, retention, recovery, logging, and business continuity standards.
Support SOX, SOC 2, and other regulatory or audit requirements through control validation and documentation.
Develop and maintain architecture documentation, runbooks, operational procedures, and engineering standards.
Lead large-scale projects, technology migrations, integrations, and strategic initiatives.
Mentor engineers and contribute to technical leadership, knowledge sharing, and continuous improvement.