Senior IT Systems Engineer

Rhythm Pharmaceuticals•Boston, MA

5d•$135,000 - $215,000•Hybrid

About The Position

Reporting to the Director of IT Operations at Rhythm Pharmaceuticals, as the Senior IT System Engineer, you will own day to day reliability, security, and performance of our cloud and hosting environments across AWS, Google Cloud, and WPEngine, as well as core systems administration (Linux/Windows), DNS/SSL, and network devices. You’ll be the hands-on technical backbone for our infrastructure—provisioning and hardening servers, implementing backup and disaster recovery, monitoring health and costs, and partnering closely with vendors to keep sites and services secure and stable. The role will interface with the Rhythm IT operations team and the cybersecurity team and will participate in a variety of IT operations tasks and projects across Rhythm global offices as needed. The role will leverage your ability to multitask in a professional environment while working with people at all levels across the entire organization. You will provide these services in an effective and efficient manner, ensuring a high level of customer service.

Requirements

6+ years in cloud operations and systems administration (AWS and Azure).
Bachelor’s degree in Information Technology, Computer Science or related field preferable or combination of education and experience.
Hands‑on with AWS (EC2, S3, IAM, VPC, Security Groups) and networking fundamentals (routing, firewalls, VPNs).
Hands‑on with Azure and Microsoft 365 Admin Center (Virtual Machines, Storage Accounts, Azure Active Directory, Intune, Virtual Networks, Network Security Groups) and networking fundamentals (routing, firewalls, VPNs).
Experience with DNS management, SSL/TLS lifecycle, and web hosting platforms (e.g., WPEngine).
Strong Linux/Windows administration, patching, and hardening; scripting (Bash, PowerShell).
Identity & access management experience (e.g. Entra AD).
Familiarity with monitoring/observability (CloudWatch, Stackdriver, Datadog, ELK, or similar).
Experience with incident response and root‑cause analysis.
Ability to collaborate with vendors/agencies and communicate with non‑technical stakeholders.
Knowledge of compliance and risk practices (e.g., SOX/GxP environments, change management, access reviews).
Able to review and suggest improvements to IT processes and technology setup.

Nice To Haves

Microsoft and/or AWS certifications preferred.
Lifesciences experience is a plus.

Responsibilities

Build, configure, and maintain resources in AWS (e.g., EC2, S3, IAM, VPC, Security Groups).
Deploy, configure, and manage Azure services, including Virtual Machines, Storage Accounts, Virtual Networks, Network Security Groups, Load Balancers, and Microsoft Entra ID, to ensure secure, reliable, and scalable cloud infrastructure operations.
Administer Microsoft Entra ID by managing user and group access, enforcing conditional access policies, maintaining identity security, and supporting SSO integrations through proper role‑based access controls.
Operate and optimize WPEngine managed WordPress hosting; coordinate environment setup.
Implement backup & disaster recovery policies; perform integrity testing and recovery drills.
Monitor availability, performance, and costs; right-size, schedule, and tag resources to meet SLAs and budgets.
Enforce cloud security baselines (least‑privilege IAM, key rotation, secrets handling, network segmentation).
Administer Linux and Windows servers: patching, configuration, hardening, monitoring, and troubleshooting.
Manage DNS, domain registration, redirects, SSL/TLS lifecycle, and IP allow/deny lists.
Handle account provisioning/deprovisioning and access reviews across systems.
Support web development in coordination with development/agency teams, and implement observability for hosted sites (availability checks, error rates, logs).
Partner with development/agency teams on operational needs (e.g., caching, CDN, cookie consent tooling such as OneTrust).
Respond to alerts, triage incidents, and drive root‑cause analysis with corrective actions.
Prevent recurrence via automation, hardening, and guardrails.
Use scripting (Bash, PowerShell, Python) to standardize changes.
Maintain clear documentation for infrastructure, access, deployment processes, standard operating procedures, and recovery steps.
Contribute to ticket workflows and change management.
Coordinate with managed service providers, hosting providers, and agencies.
Communicate status and risks to stakeholders; propose pragmatic improvements and roadmaps.