Systems Engineer

MBI - Malibu Boats, Inc•Loudon, TN

1d•Onsite

About The Position

The Systems Engineer designs, builds, secures, and supports Malibu's identity, collaboration, and cloud infrastructure across all MBI brands. The role focuses on Microsoft Entra ID, Microsoft 365, Active Directory, and AWS, with an emphasis on automation, infrastructure as code, and standardization. The engineer partners with the networking team on connectivity, segmentation, and hybrid cloud integration across on-premises, AWS, and Azure environments, and collaborates with security, platform, and support teams to deliver reliable, scalable, well-documented systems. The role also serves as an escalation point for complex technical issues and participates in an after-hours on-call rotation. The position administers identity and collaboration services, endpoint management, Windows Server and directory services, and AWS and Azure infrastructure, including Microsoft Fabric. It develops automation and infrastructure-as-code solutions, monitors system health, supports security controls and compliance, and maintains backup and disaster recovery capabilities. The engineer documents systems and changes, communicates with users and vendors, and provides technical guidance to support teams.

Requirements

At least 6 years supporting, troubleshooting, and maintaining IT systems, including physical, virtual, and cloud servers, client endpoints, and enterprise applications.
At least 4 years administering Active Directory, Group Policy, DNS, DHCP, and Windows Server systems.
At least 4 years administering Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, and Teams.
At least 4 years administering Microsoft Entra ID, including Conditional Access, MFA, hybrid identity using Entra Connect, and SSO using SAML or OIDC.
At least 3 years supporting and administering AWS infrastructure, including EC2, VPC, IAM, and S3; AWS experience is required.
At least 3 years of experience with endpoint management using Intune.
At least 2 years scripting and automating with PowerShell.
At least 2 years configuring and maintaining backup and disaster recovery systems or processes.
At least 1 year of experience with Terraform, CloudFormation, Ansible, or similar infrastructure-as-code tools.
Strong working knowledge of networking fundamentals, including TCP/IP, DNS, VPN, LAN/WAN, and firewalls.
General understanding of business processes, application logic, development environments, databases, data management, and infrastructure capabilities and constraints.
Ability to think strategically about business, products, and technical challenges.
Strong verbal and written communication skills, including the ability to express complex technical concepts in business terms.
Ability to lead meetings and discuss implications of systems implementations, deployments, and changes.
Teamwork and interpersonal skills, and ability to communicate with customers, associates, and management.
Strong problem-solving and conceptual skills.
Ability to read, analyze, and interpret common scientific and technical journals, financial reports, and legal documents; respond to inquiries or complaints; and present information effectively to management.
Ability to calculate figures and amounts and apply basic algebra and geometry concepts.
Ability to define problems, collect data, establish facts, draw valid conclusions, interpret technical instructions in mathematical or diagram form, and work with abstract and concrete variables.
Bachelor's degree in Computer Science, Information Systems, Business, or a related field; an associate degree or an equivalent combination of education and experience is also accepted. The education and experience section specifies a bachelor's degree preferred, an associate degree, six years of related experience and/or training, or an equivalent combination.

Nice To Haves

Microsoft certifications such as MS-102 Microsoft 365 Administrator or SC-300 Identity and Access Administrator.
AWS certifications such as Solutions Architect – Associate or CloudOps Engineer – Associate.
Azure administration experience.
Microsoft Graph API and Python experience.
Experience with GitHub Actions or AWS CodePipeline.
Experience with Fortinet and Cisco firewalls; AWS Transit Gateway experience.
Experience supporting audit and compliance requirements, such as SOX ITGC user access reviews.
Experience in manufacturing or multi-site environments.

Responsibilities

Administer, secure, and maintain Microsoft Entra ID, including identity lifecycle, Conditional Access, MFA, PIM, app registrations, enterprise applications, and third-party SaaS SSO integrations.
Maintain hybrid identity between on-premises Active Directory and Entra ID, including Entra Connect or Cloud Sync, hybrid join, and directory synchronization health.
Administer Active Directory Domain Services, Group Policy, DNS, DHCP, and Windows Server systems across MBI sites; maintain directory health, replication, and a tiered administrative access model.
Administer Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, and Teams; manage tenant configuration, licensing, mail flow, retention, and collaboration governance.
Manage endpoint configuration and compliance through Microsoft Intune, including Windows Autopilot, configuration profiles, compliance policies, application deployment, and patch management.
Design, provision, and manage AWS infrastructure to ensure standardization, security, cost-efficiency, and supportability.
Design, provision, and manage Azure infrastructure and Microsoft Fabric to ensure standardization, security, cost-efficiency, and supportability.
Implement and maintain identity federation between Entra ID and AWS IAM Identity Center and other platforms, applying least-privilege and role-based access principles.
Develop and maintain infrastructure as code using Terraform, CloudFormation, Ansible, or similar tools, and contribute to CI/CD pipelines for infrastructure changes.
Develop automation scripts and tools using PowerShell, Microsoft Graph, AWS CLI or SDK, Python, or similar tools for provisioning, configuration management, and recurring administrative tasks.
Monitor system health, performance, and capacity using logging, metrics, and alerting; drive root-cause resolution for recurring issues.
Partner with the security team on security controls, hardening baselines, vulnerability remediation, and audit and regulatory compliance requirements, including SOX IT general controls.
Test, implement, and maintain backup and disaster recovery systems for on-premises, AWS, and Microsoft 365 workloads, and participate in disaster recovery exercises.
Support network and security infrastructure related to systems, including firewalls, VPNs, site-to-site connectivity, and AWS connectivity, in coordination with network and security engineers.
Create and maintain documentation, runbooks, standards, and architecture diagrams; work with platform, development, security, and support teams to optimize platform performance.
Communicate with users, technical teams, and vendors about system implementations, changes, and interruptions, following established change management processes.
Serve as an escalation point for service desk and support teams, and provide technical guidance on identity, Microsoft 365, and cloud issues.
Participate in the after-hours on-call rotation.
Perform other duties as assigned.