Senior IT Systems & Support Engineer

Halcyon Financial Technology•San Francisco, CA

5d•Hybrid

About The Position

HalcyonFT is hiring a full-time Senior IT Systems & Support Engineer in the Bay Area, with a focus on the Palo Alto area. This hybrid role supports multiple clients onsite and remotely, handling a wide range of technical problems with expertise and sound judgment. The engineer provides high-touch, personalized support to end users at all levels and delivers proactive solutions that create a seamless client experience. The role administers Microsoft 365 and Google Workspace; manages identity and access across cloud platforms; builds automation and uses approved AI tools; manages cloud-native endpoints; maintains cybersecurity and compliance controls; supports cloud networking; and leads systems administration and cloud operations. The engineer also leads incident response and root cause analysis, and plans and delivers changes, upgrades, and migrations with clear runbooks and documentation. The position uses technologies spanning Microsoft and Google productivity platforms, Entra ID and access-management tools, Intune and endpoint platforms, cybersecurity and compliance products, automation and AI tools, Cisco Meraki networking, IT operations platforms, Azure and backup infrastructure, and collaboration and business applications.

Responsibilities

Administer Microsoft 365 and Google Workspace, including users, licenses, policies, and third-party SaaS integrations.
Resolve complex email, collaboration, and file-sharing issues, using service health and audit data to identify problems proactively.
Manage identity and access across cloud platforms, including single sign-on, MFA, conditional access, and least-privilege, role-based access.
Own secure onboarding, role changes, and offboarding, and troubleshoot authentication, federation, and application access issues.
Build automation to eliminate repetitive provisioning, reporting, and administrative work.
Use approved AI tools to speed up troubleshooting and documentation, and help shape how their use is governed.
Manage cloud-native endpoints from enrollment through retirement.
Deploy applications, configuration and compliance policies, security baselines, and encryption through Intune.
Maintain security controls across cloud, email, endpoints, and SaaS, including data loss prevention, retention, and alerting.
Investigate alerts and incidents, drive remediation, and support vulnerability management, hardening, and audits.
Support third-party risk management, cybersecurity policy management, business continuity, and governance.
Support networking for a distributed, cloud-first workforce, including DNS, DHCP, VPN, Wi-Fi, firewalls, and secure remote access.
Diagnose connectivity and performance issues between users, devices, and cloud services, and maintain firewall policies and segmentation.
Lead incident response and root cause analysis for major outages and recurring issues.
Plan and deliver changes, upgrades, and migrations end to end, supported by clear runbooks and documentation.
Provide onsite and remote technical support to multiple clients.