Systems Engineer

Systems Engineer

Department:         Managed Services

Reports to:            Enterprise Architect

FLSA Status:         Non-Exempt

Job Summary

The Systems Engineer owns day-to-day operation and reliability of West Carolina's core infrastructure, including the Windows server environment, Microsoft 365 and identity platforms, virtualization stack, backup systems, and enterprise firewall fleet. This role is the operational backbone of the IT team, partnering with the Enterprise Architect on complex firewall and network architecture and supporting the Cybersecurity Engineer where security tooling intersects with operations.

Duties & Responsibilities

• Administer and maintain the Windows server environment, virtualization platform, and endpoint lifecycle, including patching, imaging, and hardware refresh across servers and workstations.
• Administer Microsoft 365, Entra ID, and Active Directory, including user lifecycle, licensing, group and mailbox management, DNS, DHCP, GPO, and file shares.
• Serve as primary operational owner of the enterprise firewall platform, including policy changes, VPN user management, firmware updates, HA health monitoring, and vendor support engagement; escalate complex routing, IPsec, and architectural decisions to the Enterprise Architect.
• Manage the backup and recovery platform, including daily job monitoring, restore testing, and maintaining documented recovery procedures for servers, file shares, and M365 data.
• Support endpoint management and application allow listing tooling, including approval queue handling and learning-mode review, under the direction of the Cybersecurity Engineer.
• Respond to incidents and perform break-fix troubleshooting for server, endpoint, identity, and firewall issues; provide technical guidance and escalation support to Managed Service Technicians.
• Follow formal change management processes, participate in the Change Control Board (CCB), cross-train with team members to reduce single points of failure, and maintain current documentation for system configurations, runbooks, and recovery procedures.
• Collaborate with IT staff and business stakeholders to translate operational requirements into reliable system configurations and adhere to company IT security standards and practices.
• Performs other duties as assigned by management. *

The duties and responsibilities outlined herein are intended to describe the general nature and level of work performed by employees in this position. This list is not exhaustive, and the employee may be required to perform other duties as assigned to meet the organization’s needs.

Knowledge, Skills, & Abilities

• Strong hands-on experience with Windows Server, Active Directory, Microsoft 365, and Entra ID administration in a production environment.
• Operational experience with enterprise next-generation firewall platforms, including policy administration, VPN management, and firmware lifecycle; solid understanding of core networking concepts (TCP/IP, DNS, DHCP, routing, VLANs).
• Working knowledge of enterprise virtualization, backup and recovery platforms, and endpoint management and application allow listing tooling.
• Practical PowerShell scripting ability for administrative tasks and reporting.
• Strong analytical and structured troubleshooting skills; ability to remain composed and methodical during incidents and outages.
• Disciplined documentation habits, attention to detail, and ability to work within formal change management and CCB processes.
• Effective written and verbal communication with both technical and non-technical audiences; ability to work independently and manage competing priorities.
• Willingness to develop working knowledge of the company’s products and service offerings.

Education & Experience

Minimum Requirements: Valid driver’s license. High school diploma or GED required. Associate or bachelor’s degree in a related technical field. Minimum four (4) years of progressive IT experience in a systems administration or systems engineering role, with at least two (2) years of hands-on production experience administering enterprise next-generation firewalls.

Preferred Qualifications: Relevant industry certifications (firewall vendor certifications, Microsoft Azure/M365 administration, CompTIA Network or Security , or equivalent). Documented experience administering Microsoft 365, Entra ID, and Active Directory in a production environment.

Working Conditions & Physical Requirements

• Sedentary work in a professional office and data center environment; must be able to remain stationary for extended periods and operate standard computer and office equipment.
• Must be able to lift up to 40 pounds (server and network equipment) and move throughout the office, data center, and remote company sites to install, inspect, and service equipment.
• Must be able to communicate and collaborate with coworkers and business partners in person, virtually, and by phone.
• May be called upon to work after-hours, nights, or weekends for planned maintenance or emergencies; this is not a formal on-call rotation.

*To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

West Carolina is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, age, national origin, religion, disability, marital status, citizenship, pregnancy or maternity, veteran status, or any other status protected by applicable national, federal, state or local law.