Staff Systems Engineer

SmithRx•Plano, TX

2d•$136,000 - $160,000•Onsite

About The Position

SmithRx is seeking a visionary, strategic Staff Systems Engineer to serve as the technical authority and architect for enterprise endpoint infrastructure, vendor ecosystem, and IT asset strategy, and as the senior-most member of the IT team in the Plano, Texas office. The role defines the multi-year technology roadmap for endpoint environments, drives alignment on vendor integrations, and architects zero-touch, modern management frameworks at scale. With a security-first, compliance-driven approach, the engineer sets standards for Windows and mixed-OS fleets, designs cloud workspace strategies such as CloudPC and Azure Virtual Desktop, and mentors engineering teams. The role partners with executive leadership and Security and Compliance teams to build scalable infrastructure that meets HIPAA and SOC 2 requirements. SmithRx is a rapidly growing, venture-backed health-technology company working to improve the pharmacy benefit management sector through technology, cost-saving tools, and customer service. Its culture is mission-driven and collaborative, guided by the values of integrity, courage, and togetherness.

Requirements

At least 8 years of progressive experience in Systems Engineering, Enterprise Architecture, or IT Infrastructure Operations, with architectural leadership experience in high-growth, SaaS-driven, or regulated environments.
Deep architectural expertise in Windows OS, Microsoft Entra ID, Intune, dynamic groups, conditional access strategies, and zero-touch Autopilot deployments at scale.
Experience managing strategic vendor partnerships, establishing vendor selection and onboarding frameworks, and influencing cross-functional technical decisions.
Expertise architecting, deploying, and governing CloudPC (Windows 365), Azure Virtual Desktop (AVD), or VDI environments for remote and third-party workforces.
Advanced PowerShell and Python scripting proficiency, with experience using REST APIs and iPaaS platforms to automate complex, cross-system IT processes.
Experience designing end-to-end asset governance models, enterprise hardware standards, and SaaS portfolio management strategies.
Broad operational and architectural understanding of multi-platform environments, including macOS/Apple Business Manager, Jamf or Kandji, Google Workspace, and Okta.
Extensive experience designing infrastructure compliant with HIPAA, SOC 2, ISO 27001, or equivalent regulatory frameworks.
Strategic vision, organizational agility, and ability to explain complex technical architecture to C-level executives and business stakeholders.

Nice To Haves

Enterprise-level certifications such as Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Cybersecurity Architect Expert, or CISSP.
Experience implementing modern iPaaS or workflow platforms for enterprise identity lifecycle automation.
High-level knowledge of enterprise networking topology, including Ubiquiti, zero-trust network access (ZTNA), and SD-WAN, and cloud-first identity systems such as Okta and Entra ID.

Responsibilities

Architect the enterprise Windows and modern workspace ecosystem, defining multi-year technology roadmaps, architectural standards, and security baselines for global endpoint infrastructure.
Lead the strategic design, governance, and optimization of Microsoft Entra ID, Microsoft Intune, and Windows Autopilot; advance zero-touch provisioning and continuous compliance.
Direct vendor strategy and technical oversight, define onboarding frameworks, evaluate enterprise technologies, and align business units to maximize vendor investments.
Architect and govern virtual desktop infrastructure, including CloudPC and Azure Virtual Desktop, and third-party remote environments for partners, contractors, and distributed teams.
Establish lifecycle governance, hardware refresh strategies, and SaaS asset management frameworks; work with Finance and Operations to optimize hardware investments and licensing.
Develop scalable automation frameworks using PowerShell, Python, and APIs for identity lifecycle workflows, systems orchestration, and endpoint remediation.
Serve as the ultimate technical escalation point for complex enterprise incidents; lead root-cause analyses and implement long-term preventive measures.
Partner with Security and Compliance leadership to align endpoint and cloud strategies with HIPAA, SOC 2, and zero-trust frameworks; architect IAM controls and conditional access policies.
Set technical standards, author architecture designs and documentation such as ADRs and runbooks, and mentor IT support and engineering teammates.
Provide technical consulting and escalation for major incidents and support high availability across business-critical operations.