Systems Engineer

The Transmitter•New York, NY

12d•$110,000 - $135,000•Onsite

About The Position

The Systems Engineer is a hands-on role reporting to the Vice President of Business Technology. The position manages the Foundation’s Apple fleet using Jamf, administers SaaS applications and Microsoft Entra ID, automates workflows with scripts and APIs, and participates in security operations, including endpoint alert investigations. The role is based in the Simons Foundation’s New York City offices and is full-time. Occasional after-hours response to security incidents may be required.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.
At least 4 years of IT experience supporting macOS environments and cloud/SaaS applications.
Working understanding of systems and network protocols such as DHCP, DNS, TCP/IP, and SMTP.
Experience managing Apple devices with an MDM platform such as Jamf Pro, Kandji, Mosyle, or Microsoft Intune.
Experience administering an IAM platform such as Microsoft Entra ID or Okta, including SSO, MFA, and Conditional Access.
Experience with Google Workspace administration.
Hands-on administration experience with SaaS applications and security tools.
Familiarity with EDR platforms such as SentinelOne, CrowdStrike, or Microsoft Defender for Endpoint, and willingness to participate in security alert triage and incident response.
Proven experience with scripting and automation tools such as Bash, Python, or PowerShell.
Security-minded approach and understanding of least privilege and endpoint security.
Familiarity with SaaS application administration and security tightening.
Patient, friendly, and willing to find reasonable solutions.
Excellent interpersonal, verbal, and written communication skills.
Ability to work independently and collaboratively.
Ability to occasionally lift and move equipment weighing up to 30 pounds.
Submit a résumé and cover letter stating interest in the position.

Nice To Haves

Jamf certification (Jamf 200 or 300).
Experience evaluating or governing enterprise AI tools.

Responsibilities

Manage Apple devices in Jamf Pro, including Macs, iPhones, iPads, and Apple TVs, and support custom zero-touch enrollment through Jamf Setup Manager.
Manage devices in Apple Business Manager and configure Jamf configuration profiles, policies, and blueprints for Apple device software and configurations.
Maintain device compliance with security baselines, including FileVault; apply security patches, report on compliance, and drive operating system updates.
Administer SaaS applications, including Google Workspace configuration, integrations, permissions, and license management.
Manage identity and access, including SSO, MFA, automated user provisioning (SCIM), role-based access (RBAC), access reviews, SaaS configuration reviews, and support for onboarding and offboarding.
Troubleshoot endpoint, application, identity, and network connectivity issues.
Monitor and triage security tool alerts; investigate suspicious endpoint and account activity; take containment steps; and escalate and document incidents according to response procedures.
Automate repetitive IT tasks using scripts, workflow tools, and AI-assisted development, and maintain clear documentation and runbooks.
Lead or participate in projects supporting Foundation goals.
Guide and assist the IT support team with escalated requests and contact vendors for support as needed.
Perform other duties or tasks as assigned or required.