Senior System Engineer

Capio Group•Sacramento, CA

2d•$130,000 - $135,000•Onsite

About The Position

Capio Group is looking for an experienced Senior System Engineer with in-depth knowledge and hands-on experience in Software as a Service (SaaS) systems. The ideal candidate should be skilled in implementing, enhancing, configuring, customizing, and validating SaaS solutions. The Senior System Engineer shall maintain good working knowledge of SaaS applications such as ServiceNow, Salesforce, Electronic Content Management, Jama, and Riskonnect. In addition, responsibilities will include providing technical support, resolving defects, building dashboards, managing vendors, and overseeing contract management. This position is expected to work within the Enterprise IT Solutions & Innovation Division. The Senior System Engineer support various objectives, which may include, but are not limited to, the following: 1. Initiation and Evaluation Phase: Before the software is procured, the Senior System Engineer ensures it meets technical and organizational standards. Technical Evaluation: Review vendor architecture, Application Programming Interface (API) capabilities, and system compatibility. Security & Compliance Auditing: Verify System and Organization Controls 2 (SOC 2) and ISO 27001 compliance status. Identity Readiness Planning: Confirm the app supports Single Sign-On (SSO) with Entra ID. Service Level Agreements (SLA) Verification: Review vendor SLA for acceptable uptime and support response times. 2. Deployment and Integration Phase: During rollout, the Senior System Engineer builds the infrastructure required for users to access the tool. Identity & Access Management (IAM): Integrate the application with the identity provider (e.g., Entra ID). Role-Based Access Control (RBAC): Define permissions, user groups, and admin roles. Network & Endpoint Security: Configure IP whitelisting, Conditional Access policies, and MobileDevice Management (MDM) profiles. Data Integration: Connect APIs and data pipelines to existing internal systems or databases. 3. Operational Management Phase: The Senior System Engineer must manage the daily phase of maintaining availability, security, and user support. User Lifecycle Management: Oversee daily onboarding, offboarding, and transfer requests. Monitoring & Alerting: Track application uptime, API latency, and vendor status pages. Incident Response: Troubleshoot outages, manage vendor support tickets, and communicate downtime to users. 4. Optimization and Governance Phase: The Senior System Engineer must continually refine the footprint to control costs and maintain compliance. Software as a Service (SaaS) Spend Optimization: Audit usage metrics to reallocate or cancel inactive, expensive licenses. Feature Lifecycle Management: Test and roll out vendor updates, new features, and major user interface (UI) changes. Regular Compliance Audits: Conduct quarterly user access reviews to ensure permissions match current job roles. 5. Decommissioning and Offboarding Phase: When replacing or retiring a SaaS app, the Senior System Engineer securely removes it from the enterprise environment. Data Extraction & Archival: Download all enterprise data, audit logs, and configurations in reusable formats. Termination of Access: Disable SSO integrations, API keys, and System for Cross-domain Identity Management (SCIM) to prevent access leaks. Data Destruction Verification: Request a formal certificate of data erasure from the vendor. Contract and Domain Name System (DNS) Cleanup: Coordinate contract termination withprocurement and delete related DNS records or subdomains. 6. Transfer of knowledge to appropriate client employees is required, along with any requested materials and content for transfer of knowledge.

Requirements

A minimum of seven (7) years of experience in Software-as-a-Service (SaaS) application implementation, enhancement, and testing.
A minimum of seven (7) years of experience in technical and administrative support of SaaS applications, such as researching technical issues, debugging and resolving issues in a timely manner.
A minimum of seven (7) years of experience of onboarding SaaS applications including configuring SaaS systems, generating dashboards and working with the third-party vendors and SaaS clients.
A minimum of seven (7) years of experience in Software Development Life Cycle (SDLC) such as analyzing, solutioning, detail design, development, testing, automation and deployment.
In-depth knowledge and hands-on experience in Software as a Service (SaaS) systems.
Skilled in implementing, enhancing, configuring, customizing, and validating SaaS solutions.
Good working knowledge of SaaS applications such as ServiceNow, Salesforce, Electronic Content Management, Jama, and Riskonnect.
Experience providing technical support, resolving defects, building dashboards, managing vendors, and overseeing contract management.
Experience with identity providers (e.g., Entra ID) for IAM and SSO.
Experience with Role-Based Access Control (RBAC).
Experience with network and endpoint security configurations (IP whitelisting, Conditional Access, MDM).
Experience with data integration using APIs and data pipelines.
Experience with user lifecycle management.
Experience with monitoring and alerting for application performance.
Experience with incident response and vendor support ticket management.
Experience with SaaS spend optimization and feature lifecycle management.
Experience with compliance audits, including user access reviews.
Experience with data extraction, archival, and secure data destruction verification.
Experience with contract management and DNS cleanup.
Ability to adhere to working on-site 5 days a week at the client Headquarters, West Sacramento, CA.

Nice To Haves

A minimum of five (5) years of hands-on coding experience in algorithm and data structures.
Experience with technical integration between SaaS solutions and the ServiceNow “Now Platform” including but not limited to Incident Management, Change Management, Service Level Management, and Service Catalogue.
Experience in maintaining and administering ServiceNow Information Technology Service Management (ITSM), Information Technology Asset Management (ITAM), and Information Technology Operations Management (ITOM).
Extensive experience in using, defining, and generating reports (e.g., status, statistics, analysis) from ServiceNow for communication and periodic reporting of SaaS applications and solutions across the enterprise.
Experience with AI technologies such as MS Copilot, Claude, etc.
Experience in using tools to solve application performance issues.
Experience in metrics, analytics and logging.
Experience in working in an agile environment and working with cross-functional teams.

Responsibilities

Ensure software meets technical and organizational standards before procurement.
Review vendor architecture, API capabilities, and system compatibility.
Verify System and Organization Controls 2 (SOC 2) and ISO 27001 compliance status.
Confirm application supports Single Sign-On (SSO) with Entra ID.
Review vendor SLA for acceptable uptime and support response times.
Build the infrastructure required for users to access the tool during rollout.
Integrate applications with identity providers (e.g., Entra ID).
Define permissions, user groups, and admin roles (RBAC).
Configure IP whitelisting, Conditional Access policies, and MDM profiles.
Connect APIs and data pipelines to existing internal systems or databases.
Manage daily operations including availability, security, and user support.
Oversee user lifecycle management (onboarding, offboarding, transfers).
Track application uptime, API latency, and vendor status pages.
Troubleshoot outages, manage vendor support tickets, and communicate downtime.
Refine the SaaS footprint to control costs and maintain compliance.
Audit usage metrics for SaaS spend optimization.
Test and roll out vendor updates, new features, and UI changes.
Conduct quarterly user access reviews for compliance.
Securely remove SaaS applications from the enterprise environment when retiring them.
Download enterprise data, audit logs, and configurations.
Disable SSO integrations, API keys, and SCIM.
Request vendor certificates of data erasure.
Coordinate contract termination with procurement and clean up DNS records.
Transfer knowledge to client employees with requested materials.