System Engineer Manager

Spring Venture Group•Kansas City, MO

About The Position

Spring Venture Group is seeking a player-coach Systems Engineer Manager to lead a small team of system engineers while executing core technical initiatives. The role is split approximately 60% hands-on engineering and 40% team management. The manager leads a team of 2–3 engineers and owns identity boundaries, endpoint management pipelines, workspace infrastructure, and edge services, while advancing cloud-first modernization and AI-driven IT operations. The position reports to the Director, Technology Operations in the Technology department. The manager oversees team delivery, operational metrics, cross-functional partnerships, and infrastructure vendor relationships. Hands-on responsibilities include identity and access management, Windows and macOS endpoint and workspace systems, automation, network access and infrastructure services, security and vulnerability remediation, and complex cross-system troubleshooting. The role works with tools and services including Active Directory, Azure, Okta, Google Workspace, NinjaOne, JAMF, AWS WorkSpaces, PowerShell, Bash, Python, and related infrastructure technologies.

Requirements

  • At least 8 years of hands-on experience in systems engineering, endpoint management, and identity infrastructure.
  • At least 2 years in a management or lead capacity.
  • Deep expertise in Active Directory, Group Policy, Azure AD Sync, Okta (SAML, Workflows, MFA), and Google Workspace administration, including OU management, Vault, GCP, GAM, security configurations, and enterprise user provisioning.
  • Experience managing Windows and macOS environments at scale using JAMF, NinjaOne, PDQ SmartDeploy, and AWS WorkSpaces.
  • Strong proficiency in PowerShell, Bash, Python, or similar scripting languages.
  • Demonstrated experience using AI-assisted coding platforms such as Cursor or GitHub Copilot for scripting and automation.
  • Understanding of DNS, PKI/certificate authorities, AWS FSx, AWS File Gateway, and core networking principles.
  • Ability to work as a player-coach, balancing planning with direct technical execution.
  • Strong emotional intelligence, transparent communication, and collaborative problem-solving skills.
  • Experience managing IT projects using Jira and Confluence with Agile or Kanban frameworks.

Nice To Haves

  • Relevant certifications, such as Okta Certified Administrator, Jamf Certified Admin, AWS Certified Solutions Architect, or Microsoft Certified: Identity and Access Administrator.
  • Experience in healthcare or other regulated environments subject to HIPAA compliance.

Responsibilities

  • Lead, mentor, and manage a team of 2–3 system engineers, maintaining quality and efficiency.
  • Manage the team backlog using Agile or Kanban practices; establish priorities, maximize throughput, and maintain predictable delivery schedules.
  • Track operational metrics for monthly leadership reporting and capacity planning.
  • Collaborate with Service Desk, Enterprise Applications, and DevOps leaders on technical initiatives, escalation paths, and operational efficiencies.
  • Manage infrastructure vendors and managed services, including SLA compliance, change validation, contract renewals, and licensing spend.
  • Architect, deploy, and maintain identity infrastructure across Active Directory, Azure hybrid environments, Okta, and Google Workspace, enforcing HIPAA-compliant role-based access and zero-trust controls.
  • Own lifecycle management, system design, and security for Windows and macOS endpoints and virtual endpoints; modernize legacy deployment workflows into cloud-first solutions.
  • Write and maintain PowerShell, Bash, and Python scripts using AI-assisted development platforms to automate IT tasks, patch pipelines, and administrative processes.
  • Administer Active Directory-integrated RADIUS authentication, GlobalProtect VPN provisioning and client software, internal DNS, PKI and certificate authorities, AWS FSx, AWS File Gateway, and Cisco voice/Jabber services.
  • Partner with managed network providers to review, test, and validate office network and Palo Alto firewall updates.
  • Execute endpoint encryption using BitLocker and JAMF and remediate endpoint operating system and application vulnerabilities with Information Security.
  • Serve as a primary technical escalation point and lead root-cause analysis and resolution for complex, integrated systems to minimize downtime.

Benefits

  • Medical, dental, and vision benefits after a short waiting period.
  • 401(k) matching program.
  • Paid time off and an additional company break during the holidays.
  • Annual Volunteer Time Off and a donation matching program.
  • Life insurance.
  • Employee Assistance Program for health and well-being.
  • Rewards and recognition.
  • Maternity and parental leave.
  • Training program and ongoing career support.
  • Optional HSA/FSA, AD&D, spousal/dependent life insurance, short-term and long-term disability, travel assistance, and legal plans.
  • Diverse, inclusive, and welcoming culture.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service