Staff Systems Engineer

SmithRx • Plano, TX

2d • $136,000 - $160,000 • Onsite

About The Position

SmithRx is seeking a visionary and highly strategic Staff Systems Engineer to serve as the overarching technical authority and architect for our enterprise endpoint infrastructure, vendor ecosystem, and IT asset strategy, while also serving as the senior most member of the IT team in our Plano, TX office. In this high-impact role, you will define the multi-year technology roadmap for our endpoint environments, drive organizational alignment on vendor integrations, and architect our zero-touch, modern management frameworks at scale. Operating with a security-first, compliance-driven mindset, you will set the engineering standards for our Windows and mixed-OS fleets, design cloud workspace strategies (CloudPC/AVD), and mentor engineering teams across the organization. You will partner directly with executive leadership, Security, and Compliance to ensure our infrastructure scales seamlessly while meeting stringent HIPAA and SOC 2 requirements.

Requirements

• 8+ years of progressive experience in Systems Engineering, Enterprise Architecture, or IT Infrastructure Operations, with a proven track record of architectural leadership in high-growth, SaaS-driven, or regulated environments.
• Deep architectural expertise in Windows OS, Microsoft EntraID, Intune, dynamic groups, conditional access strategies, and zero-touch Autopilot deployments at scale.
• Demonstrated ability to manage strategic vendor partnerships, establish vendor selection and onboarding frameworks, and influence cross-functional technical decisions.
• Proven expertise architecting, deploying, and governing CloudPC (Windows 365), Azure Virtual Desktop (AVD), or VDI environments for remote and third-party workforces.
• Advanced scripting proficiency (PowerShell, Python) with experience utilizing REST APIs and iPaaS platforms to automate complex, cross-system IT processes.
• Experience designing end-to-end asset governance models, enterprise hardware standards, and SaaS portfolio management strategies.
• Broad operational and architectural understanding of multi-platform environments (macOS/Apple Business Manager, Jamf/Kandji, Google Workspace, Okta).
• Extensive experience designing infrastructure compliant with HIPAA, SOC 2, ISO 27001, or equivalent regulatory frameworks.
• Strong strategic vision, organizational agility, and the ability to articulate complex technical architecture directly to C-level executives and key business stakeholders.

Nice To Haves

• Enterprise-level certifications (e.g., Microsoft Certified: Enterprise Administrator Expert, Microsoft Certified: Cybersecurity Architect Expert, CISSP).
• Proven experience implementing modern iPaaS/workflow platforms for enterprise identity lifecycle automation.
• High-level knowledge of enterprise networking topology (Ubiquiti, zero-trust network access/ZTNA, SD-WAN) and cloud-first identity systems (Okta, Entra ID).

Responsibilities

• Serve as the architect for the enterprise Windows and modern workspace ecosystem. Define the multi-year technology roadmap, architectural standards, and security baselines for all global endpoint infrastructure.
• Lead the strategic design, governance, and optimization of Microsoft EntraID, Microsoft Intune, and Windows Autopilot. Drive zero-touch provisioning and continuous compliance models to support rapid enterprise growth.
• Direct the overall vendor strategy and technical oversight for external partners. Define onboarding frameworks, evaluate enterprise-grade technologies, and align cross-functional business units to maximize vendor investments.
• Scope, architect, and establish governance for virtual desktop infrastructures (CloudPC / Azure Virtual Desktop) and third-party remote environments, ensuring secure access for partners, contractors, and distributed teams.
• Establish total lifecycle governance, hardware refresh strategies, and SaaS asset management frameworks. Partner with Finance and Operations to optimize hardware asset investments and licensing footprints.
• Lead the push toward an automation-first culture by architecting scalable automation frameworks (PowerShell, Python, APIs) to streamline identity lifecycle workflows, systems orchestration, and complex endpoint remediations.
• Act as the ultimate technical escalation point for complex enterprise incidents. Lead systemic root-cause analyses (RCAs) and implement long-term structural preventions across the IT ecosystem.
• Partner as a core peer with Security and Compliance leadership to ensure all endpoint and cloud strategies align with HIPAA, SOC 2, and zero-trust frameworks. Architect robust IAM controls and conditional access policies.
• Set technical standards, author high-level architecture designs (ADRs/runbooks), and actively mentor IT support and engineering teammates to raise the technical bar across the organization.
• Serve as a technical consultant and escalation point for major incidents, ensuring resilient high availability across all business-critical operations.

Benefits

• Highly competitive wellness benefits including Medical, Pharmacy, Dental, Vision, and Life Insurance and AD&D Insurance
• Flexible Spending Benefits
• 401(k) Retirement Savings Program
• Short-term and long-term disability
• Discretionary Paid Time Off
• Paid Company Holidays
• Wellness Benefits
• Commuter Benefits
• Paid Parental Leave benefits
• Employee Assistance Program (EAP)
• Well-stocked kitchen in office locations
• Professional development and training opportunities

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed