SENIOR SYSTEMS ENGINEER

The NORDAM Group•Tulsa, OK

13d

About The Position

The Senior Systems Engineer for Enterprise Cloud Identity & Security owns the organization’s identity, authentication, authorization, trust boundaries, and security posture across cloud and hybrid identity systems. The role administers Entra ID users, groups, domains, privileged roles, identity governance, hybrid identity integration with Active Directory, and authentication and single sign-on architecture. It defines cross-tenant trust controls, device identity posture, Intune policy enforcement, Conditional Access requirements, and identity and security signals used by downstream systems, including Microsoft 365 and Copilot. The position ensures that users, devices, and external identities authenticate and access resources only under appropriate security conditions. The role applies mastery of technical skills and systems-engineering principles to technical planning, systems integration, verification and validation, and cost, risk, supportability, and effectiveness analysis. It collaborates with IT Security, IT and business teams, and leadership to define requirements and deliver secure, reliable systems. It also manages project timelines, budgets, documentation, system performance, troubleshooting, updates, and operational procedures. The role participates in a rotating after-hours on-call schedule and may perform other duties, including assignments outside its primary classification or department.

Requirements

Computer Science or related technical degree; a combination of experience and training may substitute for the education requirement.
4–8 or more years of experience with Microsoft systems and solutions, both on-premises and in the cloud.
Experience creating and managing project plans and implementations, assisting with teammates’ projects, and providing technical guidance and support.
Experience administering and assisting with planning, implementing, and executing incident-response and disaster-recovery procedures.
Experience with Windows Server environments, both on-premises and cloud-based, and a solid understanding of storage and virtualization management.
Effective written and verbal communication, including use of electronic media.
Ability to develop and deliver executive-level presentations.
Competence with standard office equipment and software applications such as Microsoft Word, Excel, and PowerPoint.
Interpersonal and team-building skills, along with analytical, problem-identification, and resolution skills and the ability to turn data into business processes.
Willingness to work closely with IT and business teams to deliver customer service.
Knowledge of IT security best practices and ability to prioritize them in projects.
Expert working knowledge of Product Lifecycle Management/Product Data Management (PLM/PDM) concepts and administration.
Ability to resolve system failures quickly to minimize outages and network interruptions in a 24x7x365 LAN/WAN environment.
Ability to work more than eight hours per day and five days per week if required.
For employees working at the NORDAM Repair Division, ability to ascend and descend stairs.
Ability to meet the physical demands listed in the posting, including frequent walking, handling or manipulating objects, reaching, and talking/hearing; constant close vision, depth perception, and visual adjustment; occasional stooping, kneeling, crouching, crawling, driving between facilities, standing, climbing stairs, and lifting 25 pounds.

Nice To Haves

Experience in a global networked environment.
Experience in the aerospace industry.

Responsibilities

Administer Entra ID users, groups, administrative roles, privileged identity management, and domains.
Coordinate identity governance with IT Security, including delegated administration models, access reviews, least-privilege role design, and directory hygiene.
Administer on-premises Active Directory and synchronization, including hybrid identity, provisioning, and inter-directory synchronization using Entra Connect or Cloud Sync.
Manage authentication architecture and SSO, including SAML, federation, certificates, token lifecycles, and claim mapping.
Manage B2B trust controls, including cross-tenant access settings, external collaboration posture, identity provider federation, and inbound and outbound trust rules.
Maintain device identity posture across Entra Join and Hybrid Join, device trust, stale-device cleanup, and platform SSO.
Oversee the Intune policy lifecycle for managed endpoints, including MDM/MAM profiles, compliance policies, device and location controls, and the delivery of compliance signals to Conditional Access.
Oversee secure cloud data exchanges with external platforms such as HR, payroll, and benefits systems, ensuring provisioning mappings, Conditional Access protections, and compliance alignment.
Partner with the Security team, which owns global compliance, DLP, MFA, SIEM, and SOC operations.
Coordinate with other IT and business teams as needed.
Meet with IT leadership to assess and define system requirements.
Analyze network data and infrastructure to identify inefficiencies and problems; maintain system efficiency, stability, security, and data integrity; and respond to complex outages and other issues.
Manage project timelines, budgets, and documentation, and collaborate with project teams on infrastructure, system architecture, and complex projects and products.
Use tools and custom applications to monitor applications, infrastructure, networks, and databases and optimize system performance.
Troubleshoot technical issues, prepare root-cause analyses of service interruptions, support recovery, and create preventative measures.
Prepare network analytics, data reports, and operational manuals.
Keep abreast of advances in technology, protocols, and best practices.
Coordinate with department leadership to plan, design, and schedule software, hardware, and operating-system updates.
Develop and improve processes and technical documentation, backup procedures, test plans, and reports.
Provide coverage in a rotating after-hours on-call schedule.
Perform other duties as required, potentially including assignments in other job classifications or departments.