What are the responsibilities and job description for the System Engineer position at EnCompass?
Systems Engineer
Location: Cedar Rapids, IA Department: Managed Services Role Type: Full‑Time
Role Summary
The Systems Engineer is responsible for designing, implementing, and supporting the full ecosystem (Endpoints, Operations, Users) across client environments. This role ensures secure, reliable, and compliant operation of endpoints, user identities, automations, monitoring, and IT workflows. The engineer will leverage RMM, EDR, MDR, backup, automation, and AI‑enabled tooling to deliver a modern, efficient, and proactive managed‑services experience.
Core Responsibilities
Endpoints
- Deploy, configure, and maintain RMM agents, monitoring policies, and remediation workflows.
- Manage EDR, antivirus, ransomware detection, and endpoint security baselines.
- Integrate and coordinate with MDR/SOC for escalations and threat response.
- Oversee patching and software deployment across Windows.
- Administer endpoint backup policies and perform recovery operations when needed.
- Troubleshoot endpoint performance, security alerts, and agent‑related issues.
Operations
- Build and maintain automations and workflows for routine IT tasks.
- Configure Operations modules for:
- Asset lifecycle management
- Ticketing integrations
- Alert routing and escalation
- SLA‑driven remediation
- Develop scripts to streamline operations.
- Maintain dashboards for patch compliance, vulnerability posture, and operational KPIs.
- Support cross‑platform integrations (Azure, M365, identity, backup, security tools).
Users
- Manage user lifecycle operations: provisioning, deprovisioning, and licensing.
- Administer user‑level protections including AV/EDR, backup, and policy enforcement.
- Ensure consistent security posture across all devices assigned to each user.
- Support identity and access management (Microsoft Entra ID / Azure AD).
- Maintain user‑focused backup and recovery workflows for documents, photos, and business files.
- Provide support for user‑level issues across endpoints, identity, and collaboration tools.
Microsoft 365, Azure & Identity Responsibilities
- Administer Exchange Online, SharePoint, Teams, OneDrive, mail flow, and permissions.
- Manage Entra ID: conditional access, MFA, SSO integrations, app registrations, and identity lifecycle.
- Support Intune for MDM/MAM, Autopilot, configuration profiles, compliance policies, and Defender for Endpoint.
- Maintain on‑premises AD (if applicable): GPO, replication, OU structure, and security hardening.
- Assist with Azure networking, VPN, firewall rule coordination, and hybrid identity.
Automation & Scripting
- Write and maintain scripts for provisioning, reporting, patching, and remediation.
- Use Operations automation and Power Automate to reduce manual workloads.
Security & Compliance
- Enforce endpoint security baselines, encryption, and MFA.
- Collaborate with MDR/SOC teams on threat investigations and incident response.
- Monitor vulnerability reports and coordinate remediation across endpoints and users.
Monitoring, Ticketing & Support
- Serve as escalation for endpoint, identity, and automation issues.
- Maintain SLA commitments and document resolution steps for knowledge base entries.
- Proactively monitor systems and address alerts before they impact users.
Qualifications Required
- 1 years in systems engineering, endpoint management, or MSP operations.
- Hands‑on experience with RMM platforms.
- Experience with Microsoft 365, Intune, Entra ID, and endpoint security tools.
- Solid understanding of patching and vulnerability management.
Preferred
- Experience with MDR/SOC workflows.
- Familiarity with automation platforms.
- Knowledge of documentation platforms.
- Exposure to AI‑enabled productivity tools (Copilot).
Schedule Interview: www.encompassiowa.com/career-opportunities/
Pay: $30,000.00 - $40,000.00 per year
Benefits:
- 401(k)
- 401(k) matching
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Education:
- Associate (Required)
License/Certification:
- Drivers License (Required)
Ability to Commute:
- Cedar Rapids, IA 52401 (Required)
Work Location: In person
Salary : $30,000 - $40,000