Senior Systems Engineer

The NORDAM Group LLC•Tulsa, OK

11d

About The Position

The Senior Systems Engineer for Enterprise Cloud Identity & Security owns the organization’s identity, authentication, authorization, trust boundaries, and security posture across cloud and hybrid identity systems. The role administers Entra ID users, groups, domains, privileged roles, identity governance, hybrid identity integration with Active Directory, and authentication and single sign-on architecture. It defines cross-tenant trust controls, device identity posture, Intune policy enforcement, Conditional Access requirements, and identity and security signals used by downstream systems, including Microsoft 365 and Copilot. The role ensures that only trusted users, devices, and external identities can authenticate and gain access under appropriate security conditions. Applies mastery of technical skills, principles, theories, concepts, industry practices, and standards to technical planning, systems integration, verification and validation, cost and risk analysis, supportability, and effectiveness analysis. Works with IT leadership to assess and define system requirements; analyzes network data and infrastructure; maintains system efficiency, stability, security, and integrity; and responds to complex outages and other issues. Manages project timelines, budgets, and documentation, supports project teams with infrastructure and system architecture, monitors operational status and performance, troubleshoots technical issues, performs root-cause analysis, and develops preventative measures, analytics, reports, operational manuals, processes, backup procedures, and test plans. Coordinates software, hardware, and operating-system updates and keeps current with technology, protocols, and best practices. Provides coverage in a rotating after-hours on-call schedule and performs other duties as required.

Requirements

A computer science or related technical degree; a combination of experience and training may substitute for the education requirement.
4–8 or more years of experience with Microsoft systems and solutions, both on-premises and in the cloud.
Experience in a global networked environment.
Experience creating and managing project plans and implementations, assisting with teammates’ projects, and providing technical guidance and support.
Experience administering and assisting with planning, implementing, and executing incident response and disaster recovery procedures.
Experience with Windows Server environments, both on-premises and cloud-based, and a solid understanding of storage and virtualization management.
Effective written, verbal, and electronic communication skills, including the ability to develop and deliver executive-level presentations.
Competence using standard office equipment and software applications such as Microsoft Word, Excel, and PowerPoint.
Interpersonal and team-building skills, along with analytical, problem-identification, and resolution skills and the ability to translate data into business processes.
Willingness to work closely with IT and business teams to provide customer service.
Knowledge of IT security best practices and commitment to applying them across projects.
Expert working knowledge of Product Lifecycle Management/Product Data Management (PLM/PDM) concepts and administration.
Ability to quickly resolve system failures and minimize outages and network interruptions in a 24x7x365 LAN/WAN environment.
Ability to work more than eight hours per day and five days per week when required.
Ability to provide rotating after-hours on-call coverage.

Nice To Haves

Experience in the aerospace industry is strongly desired.

Responsibilities

Administer Entra ID users, groups, administrative roles, privileged identity management, and domains.
Coordinate identity governance with IT Security, including delegated administration models (GDAP/DAP), access reviews, least-privilege role design, and directory hygiene.
Administer on-premises Active Directory and synchronization, including hybrid identity, provisioning, and inter-directory synchronization through Entra Connect or Cloud Sync.
Manage authentication architecture and single sign-on, including SAML, federation, certificates, token lifecycles, and claim mapping.
Manage B2B trust controls, including cross-tenant access settings, external collaboration posture, identity-provider federation, and inbound and outbound trust rules.
Maintain device identity posture across Entra Join and Hybrid Join, device trust, stale-device cleanup, and platform SSO.
Ensure device identity claims and identity, device, MFA, risk, and access posture are trustworthy for Copilot and Security Copilot.
Oversee the Intune policy lifecycle for managed endpoints, including MDM/MAM profiles, compliance policies, device and location controls, and compliance signals for Conditional Access.
Oversee secure cloud data exchanges with external platforms, such as HR, payroll, and benefits systems, ensuring correct provisioning mappings, Conditional Access protections, and compliance alignment.
Partner with the Security team, which owns global compliance, DLP, MFA, SIEM, and SOC operations, and coordinate with other IT or business teams as needed.
Meet with IT leadership to assess and define system requirements.
Analyze network data and infrastructure to identify inefficiencies and problems.
Maintain operating efficiency and stability, protect system and data security and integrity, and respond to complex outages and other issues.
Manage project timelines, budgets, and documentation; collaborate with project teams on infrastructure, system technology architecture, and complex projects and products.
Use tools and custom applications to monitor applications, infrastructure, networks, and databases and optimize system performance.
Troubleshoot technical issues, prepare root-cause analyses of service interruptions, support recovery, and create preventative measures.
Prepare network analytics, data reports, and operational manuals.
Coordinate with department leadership to plan, design, and schedule software, hardware, and operating-system updates.
Develop and enhance processes and technical documentation, backup procedures, test plans, and reports.
Provide coverage in a rotating, after-hours on-call schedule.
Perform other duties as required, including assignments in other job classifications or departments.