What are the responsibilities and job description for the Systems Engineer position at AAAE?
The Systems Engineer is responsible for designing, deploying and maintaining cloud infrastructure primarily on AWS, while also owning identity and access management functions in Azure Entra ID. This role requires close collaboration with development, operations, and security teams to ensure reliable, scalable, and secure cloud services across a multi-cloud environment, and will be expected to work on complex assignments and perform a wide range of engineering and operational activities. A self-starter in this role is a must.
Primary duties and responsibilities:
- Design, deploy, and maintain cloud infrastructure in AWS, including services such as EC2, RDS, S3, CloudFront, VPC, and related networking components.
- Implement and manage AWS networking solutions such as VPCs, subnets, route tables, NAT gateways, and VPN connections.
- Manage and administer Microsoft Entra ID, including:
- User and group management
- Application registrations and enterprise applications
- SSO and federation
- Conditional Access and identity security controls
- Integrate AWS-hosted applications with Entra ID for authentication and authorization.
- Implement and maintain cloud security best practices across infrastructure and identity.
- Monitor and maintain cloud environments to ensure high availability, optimal uptime, system performance.
- Manage AWS security services, including IAM roles/policies, Security Groups, WAF and KMS encryption.
- Implement and manage AWS monitoring tools such as CloudWatch, CloudTrail, and AWS Config.
- Perform system updates, patching, and routine maintenance to ensure system integrity.
- Support building new systems requirements, and upgrading/ patching existing ones, through use of automation tooling.
- Automate system processes using scripting languages like Python, Bash, or PowerShell.
- Partner with development, operations, and security teams on architecture, deployments, and incident response.
- Design backup, disaster recovery, and high-availability strategies for AWS services.
- Stay updated with the latest AWS services, tools, and industry trends.
- Maintain flexibility in the approach to work and ability to work outside of normal office hours from time to time for planned/unplanned system upgrades/fixes.
- Perform other related duties and assignments as required.
Education, prior work experience, and specialized skills and knowledge:
- BS in Computer Science or similar is required
- 5-7 or more years’ IT experience is required
- Experience with various Firewall architectures and Network Security concepts
- Strong hands-on experience administering AWS cloud infrastructure in production environments
- Practical experience managing Azure Entra ID in an enterprise or multi-cloud setting
- Solid understanding of identity and access management (IAM) concepts, SSO, and federation
- Support for web server technologies such as IIS.
- Must have a good understanding of security vulnerabilities including rule-based access control, ports, and protocols, and virus/malware protections
- Strong experience working with virtualized IT infrastructures
- Ability to adapt and work on multiple issues simultaneously with the ability to meet deadlines and achieve goals
- Strong analytical and problem-solving skills
- Excellent interpersonal skills and ability to work as part of a team
- Proven decision-making experience with the ability to be autonomous and maintain confidentiality
Typical physical demands/work environment:
To successfully perform the essential functions of this job, with or without reasonable accommodation, an employee is occasionally required to stand; walk; sit; use hands to grasp objects; reach with hands/arms; balance, stoop, kneel, or crouch; speak or listen; lift and/or carry up to 25 pounds; use close, distance, color, peripheral, depth perception, and focused vision. While performing the duties of this job, the employee is not exposed to weather conditions and the noise level is moderate.