Systems Engineer

PTMA Financial Solutions, provides treasury management, liquidity management, and other financial products and services to the public sector. In addition to more than 12,000 local governments, school districts and other public entities, we also partner with over 1,000 financial institutions to help strengthen communities from coast to coast. Our family of financial services companies offers local government investment pool administration, investment advisory services, term investments, cashflow analysis, bond proceeds management, and public finance services for public entities plus stable deposit funding solutions for financial institutions. Our financial expertise, comprehensive products, and advanced technology help clients achieve more today for a better tomorrow. The firm’s primary operational hubs are in Denver, Colorado, and Naperville, Illinois, with other offices throughout the United States.

Job Summary

We are seeking a Systems Engineer to serve as a technical anchor within our IT department. Supporting 300 users in a Microsoft-centric, SaaS-driven environment, you will act as the escalation point for the Service Desk and a strategic partner to the Engineering team. Your mission is to ensure 99.9% uptime for our cloud server infrastructure, eliminate single points of failure through rigorous documentation, and automate complex workflows to scale our operations within a highly regulated financial environment.

Key Responsibilities

Microsoft Stack & Shared Administration

• Collaborative Governance: Partner with fellow engineers to co-manage the Microsoft 365, Azure, and Entra ID environments.
• Identity & Access: Jointly oversee identity management and zero-trust security through robust Conditional Access and MFA policies.
• Infrastructure Availability: Maintain high availability and system redundancy across all core cloud services.
  
  

Cloud Server & Infrastructure Management

• IaaS Lifecycle: Provision, configure, and maintain Azure Virtual Machines and cloud-hosted servers, ensuring optimal performance and cost-efficiency.
• Networking & Connectivity: Support core networking infrastructure, including Fortinet hardware, VPNs, and secure connectivity between on-premises and cloud environments.
• Business Continuity: Implement and test disaster recovery plans, utilizing tools to guarantee resilience.
  
  

SaaS & Modern Management

• Hybrid Endpoint Management: Coordinate automated Windows deployment via Microsoft Intune (Autopilot) and enforce compliance policies across Windows and macOS devices.
• Centralized Security: Leverage ManageEngine for unified security patching and application updates to ensure all endpoints remain compliant with financial regulations.
• SaaS Integration: Manage the secure onboarding and integration of the organization’s SaaS application suite.
  
  

Knowledge Management & Mentorship

• Documentation Excellence: Work with the engineering team to build and maintain a comprehensive IT Knowledge Base (SOPs) to eliminate single points of failure.
• Team Upskilling: Facilitate "Teach-Back" sessions to upskill Service Desk technicians, driving "shift-left" initiatives that reduce repetitive escalations
  
  

Technical Requirements

• Cloud Infrastructure: Deep experience with Microsoft Azure (VNets, Storage, Compute) and the M365 stack (Exchange, SharePoint, Teams).
• Identity & Access Governance: Proficiency in Microsoft Entra ID (formerly Azure AD). Experience with Privileged Identity Management (PIM) and performing quarterly user access reviews (UARs) is highly preferred.
• Networking: Strong understanding of TCP/IP, DNS, DHCP, and VPN management, specifically interfacing with cloud-based SaaS services.
• Data Protection: Experience managing immutable cloud backups to safeguard record integrity against ransomware and ensuring compliance with FINRA.
  
  

Required Certifications

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• CompTIA Security
• CompTIA Network
• Microsoft 365 Certified: Administrator Expert (MS-102)
  
  

Preferred Certifications

• Microsoft Certified: Azure Network Engineer Associate (AZ-700)
• ITIL 4 Foundation
• FortiGate Operator
• Cisco Certified Network Associate (CCNA)
  
  

Education & Experience

• Experience Priority: Minimum of 5–7 years of progressive experience in Systems Engineering or Senior Administration. Proven expertise in managing Microsoft/Azure stacks in a regulated environment is the primary requirement.
• Education: Bachelor’s degree in Computer Science, Information Technology, or a related field is preferred but not required in lieu of equivalent professional experience and advanced technical certifications.
• Continuous Learning: A documented history of staying current with the Microsoft/Azure ecosystem through ongoing certification and professional development.
  
  

Soft Skills

• Collaborative Mindset: Ability to work effectively in a shared-responsibility team where documentation and communication are vital.
• Documentation Discipline: A "documentation-first" approach to creating SOPs to eliminate single points of failure.
• Mentorship: A passion for upskilling junior staff and sharing knowledge through training or "Teach-Back" sessions.
  
  

The Pay Range For This Role Is

95,000 - 135,000 USD per year(Colorado)