Job Description Job Description GTI is a contract manufacturing partner supporting customers in renewable energy, power generation, infrastructure, and industrial systems. We fabricate custom designed, purpose-built enclosures and skids for our customers and perform mechanical and electrical integration in-house, delivering a true turn-key product to our customers. Our scope spans Engineering, prototype builds, through full production, requiring teams that can move fast, adapt, and execute with precision. GTI Values: Safety I Quality I Customer Obsession I Speed I Agility The Sr. Network & Systems Engineer serves as the senior technical engineering resource within GTI's Infrastructure organization. Reporting to the Network & Infrastructure Manager, this role is responsible for engineering, implementing, modernizing, and supporting GTI's enterprise infrastructure across manufacturing facilities, corporate offices, and cloud environments. This position leads the technical execution of enterprise infrastructure initiatives, including network implementations, Microsoft cloud platforms, virtualization, server infrastructure, operational technology (OT), and major infrastructure projects. The role also serves as the primary Tier III escalation point for complex infrastructure and networking issues while mentoring junior technical staff. Success in this role is measured by successful project delivery, infrastructure reliability, technical innovation, documentation quality, and the ability to build scalable technology solutions that support GTI's continued growth. Strategic Responsibilities Enterprise Infrastructure Engineering Design, implement, and maintain enterprise Windows Server, VMware, Azure, Microsoft 365, storage, backup, disaster recovery, and endpoint management solutions. Engineer enterprise infrastructure upgrades, migrations, lifecycle replacements, and modernization initiatives. Develop infrastructure standards, documentation, and engineering best practices. Enterprise Network Engineering Design, implement, and support enterprise LAN/WAN, routing, switching, wireless, VPN, firewall operations, VLANs, internet connectivity, and manufacturing networking. Perform network performance tuning, troubleshooting, and capacity planning. Support secure and reliable connectivity across all GTI facilities. Microsoft Cloud & Collaboration Platforms Engineer and support Microsoft 365, Azure, Entra ID, Active Directory, Exchange Online, SharePoint Online, Teams, Intune, and OneDrive. Implement tenant improvements, identity services, and cloud modernization initiatives. Infrastructure Project Delivery Lead the technical implementation of infrastructure projects from planning through operational handoff. Deliver new facility network implementations, office expansions, network refreshes, Azure migrations, Microsoft 365 initiatives, server refreshes, storage upgrades, telecommunications upgrades, and infrastructure supporting new business systems. Coordinate technical activities with vendors, contractors, and internal stakeholders. Operational Technology (OT) Support manufacturing technology infrastructure including plant networking, MDF/IDF rooms, fiber, wireless, cameras, badge systems, rack infrastructure, UPS systems, and facility technology. Tier III Engineering & Operational Support Provide Tier III support for complex infrastructure and networking issues. Perform root cause analysis, proactive monitoring, automation, scripting, documentation, and continuous improvement initiatives. Develop and maintain technical standards, SOPs, and engineering documentation. Leadership Responsibilities Serve as the senior technical mentor for Systems Administrators and Help Desk personnel. Provide technical leadership during infrastructure projects and major incidents. Assist the Network & Infrastructure Manager with technical planning, standards development, and solution reviews. Review engineering designs and recommend improvements. Promote operational excellence through automation, standardization, and documentation. Qualifications Required 7+ years of enterprise infrastructure, systems engineering, or network engineering experience. Strong expertise with Microsoft Azure, Microsoft 365, Entra ID, Active Directory, VMware, Windows Server, enterprise networking, storage, backup, and disaster recovery. Experience delivering enterprise infrastructure and networking projects. Strong troubleshooting, communication, documentation, and analytical skills. Preferred Experience in manufacturing or multi-site operational environments. Experience supporting ERP infrastructure and enterprise business systems. PowerShell or other infrastructure automation experience. Experience with operational technology (OT) environments. Relevant Microsoft, VMware, Sophos firewalls, Ubiquiti Access Points/Controllers, or networking certifications. Perks & Benefits GTI offers a competitive compensation and benefits package designed to support employees and their families while providing long-term career growth opportunities within a fast-growing manufacturing organization. Benefits may include: Medical, dental, and vision insurance 401(k) with company match (where applicable) Paid Time Off (PTO) and paid holidays Sick time in accordance with state and local requirements Company-paid life insurance and disability coverage Career advancement opportunities within a rapidly growing organization Exposure to advanced manufacturing, modular infrastructure, and large-scale industrial projects Collaborative, fast-paced environment with strong operational and engineering leadership Employee-focused culture centered on safety, quality, accountability, and continuous improvement Benefits eligibility and offerings may vary based on position, location, and employment classification. GTI promotes a diverse and inclusive workforce and is an Equal Opportunity Employer that does not discriminate against employees or applicants for employment on the basis of race, color, national origin, ancestry, age, religion, sex, gender, gender identity, gender expression, sexual orientation, physical or mental disability, medical condition, genetic information, military or veteran status, marital status, or any other Federal or State legally-protected classes. We also value the safety of all employees and work hard to maintain a Drug Free Workplace. Privacy Policy Terms & Conditions We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
11/07/2026
Full time
Job Description Job Description GTI is a contract manufacturing partner supporting customers in renewable energy, power generation, infrastructure, and industrial systems. We fabricate custom designed, purpose-built enclosures and skids for our customers and perform mechanical and electrical integration in-house, delivering a true turn-key product to our customers. Our scope spans Engineering, prototype builds, through full production, requiring teams that can move fast, adapt, and execute with precision. GTI Values: Safety I Quality I Customer Obsession I Speed I Agility The Sr. Network & Systems Engineer serves as the senior technical engineering resource within GTI's Infrastructure organization. Reporting to the Network & Infrastructure Manager, this role is responsible for engineering, implementing, modernizing, and supporting GTI's enterprise infrastructure across manufacturing facilities, corporate offices, and cloud environments. This position leads the technical execution of enterprise infrastructure initiatives, including network implementations, Microsoft cloud platforms, virtualization, server infrastructure, operational technology (OT), and major infrastructure projects. The role also serves as the primary Tier III escalation point for complex infrastructure and networking issues while mentoring junior technical staff. Success in this role is measured by successful project delivery, infrastructure reliability, technical innovation, documentation quality, and the ability to build scalable technology solutions that support GTI's continued growth. Strategic Responsibilities Enterprise Infrastructure Engineering Design, implement, and maintain enterprise Windows Server, VMware, Azure, Microsoft 365, storage, backup, disaster recovery, and endpoint management solutions. Engineer enterprise infrastructure upgrades, migrations, lifecycle replacements, and modernization initiatives. Develop infrastructure standards, documentation, and engineering best practices. Enterprise Network Engineering Design, implement, and support enterprise LAN/WAN, routing, switching, wireless, VPN, firewall operations, VLANs, internet connectivity, and manufacturing networking. Perform network performance tuning, troubleshooting, and capacity planning. Support secure and reliable connectivity across all GTI facilities. Microsoft Cloud & Collaboration Platforms Engineer and support Microsoft 365, Azure, Entra ID, Active Directory, Exchange Online, SharePoint Online, Teams, Intune, and OneDrive. Implement tenant improvements, identity services, and cloud modernization initiatives. Infrastructure Project Delivery Lead the technical implementation of infrastructure projects from planning through operational handoff. Deliver new facility network implementations, office expansions, network refreshes, Azure migrations, Microsoft 365 initiatives, server refreshes, storage upgrades, telecommunications upgrades, and infrastructure supporting new business systems. Coordinate technical activities with vendors, contractors, and internal stakeholders. Operational Technology (OT) Support manufacturing technology infrastructure including plant networking, MDF/IDF rooms, fiber, wireless, cameras, badge systems, rack infrastructure, UPS systems, and facility technology. Tier III Engineering & Operational Support Provide Tier III support for complex infrastructure and networking issues. Perform root cause analysis, proactive monitoring, automation, scripting, documentation, and continuous improvement initiatives. Develop and maintain technical standards, SOPs, and engineering documentation. Leadership Responsibilities Serve as the senior technical mentor for Systems Administrators and Help Desk personnel. Provide technical leadership during infrastructure projects and major incidents. Assist the Network & Infrastructure Manager with technical planning, standards development, and solution reviews. Review engineering designs and recommend improvements. Promote operational excellence through automation, standardization, and documentation. Qualifications Required 7+ years of enterprise infrastructure, systems engineering, or network engineering experience. Strong expertise with Microsoft Azure, Microsoft 365, Entra ID, Active Directory, VMware, Windows Server, enterprise networking, storage, backup, and disaster recovery. Experience delivering enterprise infrastructure and networking projects. Strong troubleshooting, communication, documentation, and analytical skills. Preferred Experience in manufacturing or multi-site operational environments. Experience supporting ERP infrastructure and enterprise business systems. PowerShell or other infrastructure automation experience. Experience with operational technology (OT) environments. Relevant Microsoft, VMware, Sophos firewalls, Ubiquiti Access Points/Controllers, or networking certifications. Perks & Benefits GTI offers a competitive compensation and benefits package designed to support employees and their families while providing long-term career growth opportunities within a fast-growing manufacturing organization. Benefits may include: Medical, dental, and vision insurance 401(k) with company match (where applicable) Paid Time Off (PTO) and paid holidays Sick time in accordance with state and local requirements Company-paid life insurance and disability coverage Career advancement opportunities within a rapidly growing organization Exposure to advanced manufacturing, modular infrastructure, and large-scale industrial projects Collaborative, fast-paced environment with strong operational and engineering leadership Employee-focused culture centered on safety, quality, accountability, and continuous improvement Benefits eligibility and offerings may vary based on position, location, and employment classification. GTI promotes a diverse and inclusive workforce and is an Equal Opportunity Employer that does not discriminate against employees or applicants for employment on the basis of race, color, national origin, ancestry, age, religion, sex, gender, gender identity, gender expression, sexual orientation, physical or mental disability, medical condition, genetic information, military or veteran status, marital status, or any other Federal or State legally-protected classes. We also value the safety of all employees and work hard to maintain a Drug Free Workplace. Privacy Policy Terms & Conditions We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Job Description Job Description Karman is a fast-growing NVIDIA-backed AI company enabling AI data centers to dynamically orchestrate power and unlock more compute capacity from existing energy infrastructure. For over a decade, we have applied AI to the electric grid - bringing real-time visibility and power-flow control to complex energy infrastructure. Our Karman platform, built on a custom NVIDIA module, brings that same capability to AI data centers, giving operators a way to better use the power already available to them. The Senior Network & Systems Engineer is responsible for owning Tier 3 IT support, network infrastructure, and systems administration across Utilidata's Ann Arbor headquarters and remote environments. This is a hands-on senior individual contributor role-not an architecture position-focused on resolving complex technical issues, maintaining reliable network and systems infrastructure, and supporting the security posture of the organization. This role enables the Director of IT & Security Operations to focus on strategic planning, policy implementation, and security governance, and ensures that R&D engineers can dedicate their time fully to product development. This position is based onsite at our company headquarters in Ann Arbor, Michigan, with flexibility for occasional remote work. Candidates will be expected to collaborate cross-functionally with remote teams based across the country. Responsibilities Serve as the Tier 3 escalation point for complex IT issues across networking, servers, endpoints, and identity systems Design, implement, and maintain LAN/WAN, wireless, firewall, and VPN infrastructure Manage network segmentation, VLAN configuration, routing protocols, and SD-WAN solutions Monitor network performance and system availability; proactively identify and resolve issues before they cause impact Troubleshoot and resolve advanced operating system, application, and infrastructure incidents Manage and maintain on-premises and cloud infrastructure, including servers, switches, and access control systems Provide on-site support for the Ann Arbor Innovation Lab, including rack-and-stack, cabling, and low-level hardware configuration Support data center operations including server provisioning, storage, and compute resource management relevant to Karman platform deployments Support security monitoring, incident detection, and alert triage in coordination with the Director of IT & Security Operations Assist with endpoint detection, log review, and vulnerability management within established security tooling Contribute to the development and enforcement of IT security policies and access control standards Support SOC coordination on security incident triage and response as needed Manage user onboarding and offboarding workflows including identity provisioning, access management, and device setup Absorb IT and administrative tasks currently managed by R&D engineers Support procurement, hardware asset lifecycle management, and inventory tracking Contribute to documentation of operational runbooks, network diagrams, troubleshooting guides, and system procedures Support change management processes, coordinating on network, firewall, and access control changes Minimum Qualifications 5+ years of hands-on experience in network engineering, IT infrastructure, or systems administration in production environments Deep networking expertise, including routing, switching, firewalls, VLANs, and network security Proven ability to resolve Tier 3 issues independently across network, server, and endpoint environments Experience supporting physical data center or lab environments, including low-level hardware support Solid understanding of system monitoring, log management, and troubleshooting methodologies Experience with identity and access management platforms (JumpCloud preferred) Comfortable operating in a fast-paced, small-team environment where scope evolves and self-direction is expected Enhanced Qualifications (Nice to Have) Security background or SOC familiarity; relevant certifications such as CCNA, CompTIA Security+, or CISSP are a plus Familiarity with security frameworks such as NIST, CIS benchmarks, or SOC 2 controls Experience with SIEM platforms (Splunk, Sentinel, or similar) Exposure to high-performance computing, AI infrastructure, or GPU-based systems Experience with configuration management or automation tools (Ansible, Puppet, Chef, or similar) Experience administering developer and infrastructure platforms such as GitHub, Tailscale, or NetBox Salary Range: $125,000 to $155,000 base compensation depending on experience plus stock options. Salary will be commensurate with an individual's skills, training, years of experience, and in line with internal compensation bands. Location: This position is based onsite at our company headquarters in Ann Arbor, Michigan, with flexibility for occasional remote work. Our Commitments: Karman values the diversity of our team. We provide equal employment opportunities without regard to race, color, religion, creed, sex, gender, sexual orientation, gender identity or expression, national origin, age, physical disability, mental disability, medical condition, pregnancy or childbirth, sexual orientation, genetics, genetic information, marital status, or status as a covered veteran or any other basis protected by applicable federal, state and local laws. We are committed to: Creating a diverse and inclusive workplace that is welcoming, supportive, affirming and respectful Empowering employees to solve problems and work together to make a difference Providing mentorship and growth opportunities as part of a collaborative team A flexible work environment with flexible paid time off Competitive compensation and benefits, including health, dental, vision, and employer-match 401k Powered by JazzHR P8hdkdNTjV
11/07/2026
Full time
Job Description Job Description Karman is a fast-growing NVIDIA-backed AI company enabling AI data centers to dynamically orchestrate power and unlock more compute capacity from existing energy infrastructure. For over a decade, we have applied AI to the electric grid - bringing real-time visibility and power-flow control to complex energy infrastructure. Our Karman platform, built on a custom NVIDIA module, brings that same capability to AI data centers, giving operators a way to better use the power already available to them. The Senior Network & Systems Engineer is responsible for owning Tier 3 IT support, network infrastructure, and systems administration across Utilidata's Ann Arbor headquarters and remote environments. This is a hands-on senior individual contributor role-not an architecture position-focused on resolving complex technical issues, maintaining reliable network and systems infrastructure, and supporting the security posture of the organization. This role enables the Director of IT & Security Operations to focus on strategic planning, policy implementation, and security governance, and ensures that R&D engineers can dedicate their time fully to product development. This position is based onsite at our company headquarters in Ann Arbor, Michigan, with flexibility for occasional remote work. Candidates will be expected to collaborate cross-functionally with remote teams based across the country. Responsibilities Serve as the Tier 3 escalation point for complex IT issues across networking, servers, endpoints, and identity systems Design, implement, and maintain LAN/WAN, wireless, firewall, and VPN infrastructure Manage network segmentation, VLAN configuration, routing protocols, and SD-WAN solutions Monitor network performance and system availability; proactively identify and resolve issues before they cause impact Troubleshoot and resolve advanced operating system, application, and infrastructure incidents Manage and maintain on-premises and cloud infrastructure, including servers, switches, and access control systems Provide on-site support for the Ann Arbor Innovation Lab, including rack-and-stack, cabling, and low-level hardware configuration Support data center operations including server provisioning, storage, and compute resource management relevant to Karman platform deployments Support security monitoring, incident detection, and alert triage in coordination with the Director of IT & Security Operations Assist with endpoint detection, log review, and vulnerability management within established security tooling Contribute to the development and enforcement of IT security policies and access control standards Support SOC coordination on security incident triage and response as needed Manage user onboarding and offboarding workflows including identity provisioning, access management, and device setup Absorb IT and administrative tasks currently managed by R&D engineers Support procurement, hardware asset lifecycle management, and inventory tracking Contribute to documentation of operational runbooks, network diagrams, troubleshooting guides, and system procedures Support change management processes, coordinating on network, firewall, and access control changes Minimum Qualifications 5+ years of hands-on experience in network engineering, IT infrastructure, or systems administration in production environments Deep networking expertise, including routing, switching, firewalls, VLANs, and network security Proven ability to resolve Tier 3 issues independently across network, server, and endpoint environments Experience supporting physical data center or lab environments, including low-level hardware support Solid understanding of system monitoring, log management, and troubleshooting methodologies Experience with identity and access management platforms (JumpCloud preferred) Comfortable operating in a fast-paced, small-team environment where scope evolves and self-direction is expected Enhanced Qualifications (Nice to Have) Security background or SOC familiarity; relevant certifications such as CCNA, CompTIA Security+, or CISSP are a plus Familiarity with security frameworks such as NIST, CIS benchmarks, or SOC 2 controls Experience with SIEM platforms (Splunk, Sentinel, or similar) Exposure to high-performance computing, AI infrastructure, or GPU-based systems Experience with configuration management or automation tools (Ansible, Puppet, Chef, or similar) Experience administering developer and infrastructure platforms such as GitHub, Tailscale, or NetBox Salary Range: $125,000 to $155,000 base compensation depending on experience plus stock options. Salary will be commensurate with an individual's skills, training, years of experience, and in line with internal compensation bands. Location: This position is based onsite at our company headquarters in Ann Arbor, Michigan, with flexibility for occasional remote work. Our Commitments: Karman values the diversity of our team. We provide equal employment opportunities without regard to race, color, religion, creed, sex, gender, sexual orientation, gender identity or expression, national origin, age, physical disability, mental disability, medical condition, pregnancy or childbirth, sexual orientation, genetics, genetic information, marital status, or status as a covered veteran or any other basis protected by applicable federal, state and local laws. We are committed to: Creating a diverse and inclusive workplace that is welcoming, supportive, affirming and respectful Empowering employees to solve problems and work together to make a difference Providing mentorship and growth opportunities as part of a collaborative team A flexible work environment with flexible paid time off Competitive compensation and benefits, including health, dental, vision, and employer-match 401k Powered by JazzHR P8hdkdNTjV
Farmers and Merchants Bank of Long Beach
Seal Beach, California
Job Description Job Description: Job Summary The Senior Data Center & Cloud Network Engineer is responsible for designing, implementing, operating, securing, and modernizing the Bank's network infrastructure across enterprise data centers, corporate offices, branch locations, and the Microsoft Azure cloud environment. This senior-level, hands-on engineering role serves as a critical bridge between the Bank's traditional on-premises infrastructure and its evolving hybrid-cloud architecture. The position combines deep expertise in enterprise networking, data center technologies, cloud networking, cybersecurity, resiliency, and network automation to deliver secure, scalable, and universally available solutions that support business operations and strategic initiatives. The Senior Data Center & Cloud Network Engineer partners closely with Cloud Engineering, Infrastructure Services, Information Security, Enterprise Architecture, Risk Management, Internal Audit, telecommunications providers, and other technology teams to develop, implement, and maintain network solutions that align with business objectives, regulatory requirements, and industry best practices. Key Responsibilities Design, implement, maintain, and troubleshoot enterprise data center, core network, and cloud network infrastructure. Engineer universally available and resilient routing, switching, network segmentation, and redundancy solutions to support business continuity objectives. Configure, monitor, and troubleshoot networking technologies including BGP, OSPF, TCP/IP, VLANs, routing, switching, NAT, DNS, DHCP, and VPN services. Support connectivity and operational readiness across primary and disaster recovery data centers, corporate offices, branch locations, and colocation facilities. Design, deploy, and manage Microsoft Azure networking services, including Virtual Networks (VNets), subnets, peering, User Defined Routes (UDRs), Network Security Groups (NSGs), Private Link, Private Endpoints, and Private DNS. Architect and support hybrid cloud networking solutions utilizing Azure ExpressRoute, VPN Gateway, Hub-and-Spoke, and Azure Virtual WAN architectures. Implement and support Azure networking and security services, including Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Azure Kubernetes Service (AKS), and Azure Platform-as-a-Service (PaaS) networking requirements. Manage and optimize enterprise WAN environments, including MPLS, Internet, VPN, and carrier-based connectivity solutions, while evaluating and implementing SD-WAN and SASE technologies. Configure, maintain, and support next-generation firewall platforms to enable secure network segmentation, Zero Trust architectures, and secure remote access. Partner with Information Security teams to implement network security standards, firewall policies, threat prevention controls, vulnerability remediation, and regulatory compliance requirements. Administer and support enterprise DNS, DHCP, IPAM, load balancing, and application delivery technologies. Develop and maintain network automation solutions using Terraform, Python, PowerShell, Ansible, APIs, Git, and Infrastructure-as-Code (IaC) methodologies. Implement proactive monitoring, telemetry, alerting, performance analysis, and capacity planning to ensure network reliability and availability. Participate in incident response, root cause analysis, problem management, disaster recovery testing, and 24x7 production support activities as required. Create and maintain network architecture diagrams, standards, policies, procedures, configurations, and technical documentation. Lead network modernization initiatives, technology evaluations, and strategic infrastructure projects to improve scalability, performance, and security. Collaborate with infrastructure, cloud, security, and application teams to support enterprise technology initiatives and business objectives. Provide technical leadership, mentoring, and knowledge transfer to junior engineers and operational support teams. Compliance Responsibilities Complies with all applicable state and federal banking laws, regulations, and internal policies related but not limited to lending, operations, and deposit requirements, including Bank Secrecy Act (BSA), Anti-Money Laundering (AML) requirements, Office of Foreign Assets Control (OFAC) regulations, Customer Identification Program (CIP) requirements, Financial Elder Abuse reporting laws, Sexual Harassment prevention policies, information security and privacy requirements. Required Knowledge Extensive hands-on experience designing, implementing, and supporting enterprise data center and core network infrastructure. Advanced knowledge of networking protocols and technologies, including TCP/IP, BGP, OSPF, VLANs, routing, switching, NAT, DNS, DHCP, VPN, network segmentation, and high-availability architectures. Demonstrated experience designing resilient, scalable, and universally available network infrastructures that support mission-critical business operations. Strong knowledge of enterprise network security principles and hands-on experience administering next-generation firewall platforms, network segmentation, and secure remote-access solutions. Experience supporting enterprise WAN technologies, including MPLS, Internet, VPN, SD-WAN, and carrier-provided connectivity services. Advanced Microsoft Azure networking expertise, including: Virtual Networks (VNets) Subnets and VNet Peering Network Security Groups (NSGs) User Defined Routes (UDRs) Private Link and Private Endpoints Private DNS Azure ExpressRoute Azure VPN Gateway Azure Firewall Azure Application Gateway/WAF Azure Load Balancer Strong understanding of hybrid-cloud networking architectures, including hub-and-spoke, Virtual WAN, and cloud-to-datacenter connectivity solutions. Proven troubleshooting skills across routing, switching, firewalls, DNS, application connectivity, WAN services, and hybrid-cloud environments. Experience supporting universally available business-critical production environments with a focus on performance, reliability, disaster recovery, and operational excellence. Knowledge of network monitoring, telemetry, alerting, capacity planning, and performance management tools and methodologies. Experience with network automation, scripting, and Infrastructure-as-Code (IaC) technologies, including Terraform, Python, PowerShell, Ansible, APIs, and Git. Understanding of Zero Trust networking principles, cybersecurity best practices, threat prevention technologies, and regulatory compliance requirements. Strong technical documentation skills, including development of network diagrams, standards, configuration documentation, policies, and operational procedures. Excellent verbal and written communication skills with the ability to effectively collaborate across Infrastructure, Cloud, Information Security, Application Development, and business teams. Ability to manage multiple priorities, lead complex technical initiatives, and effectively support enterprise-wide infrastructure modernization efforts. Knowledge, Skills and Abilities Advanced hands-on experience with Fortinet and/or Palo Alto Networks Next-Generation Firewalls (NGFWs), including firewall policy administration, network segmentation, site-to-site and remote-access VPNs, threat prevention, and high-availability configurations. Strong expertise with Cisco and/or Arista enterprise, campus, and data center networking technologies, including routing, switching, network fabric, and infrastructure modernization initiatives. Experience designing, implementing, and supporting SD-WAN, SASE/SSE, and Azure Virtual WAN solutions to improve network performance, resiliency, security, and user connectivity. Demonstrated experience with Infrastructure as Code (IaC), network automation, and orchestration using Terraform, Python, PowerShell, Ansible, APIs, Git, or similar technologies. Experience administering and supporting enterprise load balancing, application delivery, DNS, DHCP, and IPAM platforms, including Infoblox, F5, or comparable solutions. Strong understanding of data center, colocation, carrier, and cloud connectivity services, including coordination with telecommunications providers, managed service vendors, and cloud partners. Experience supporting complex, universally available environments within banking, financial services, insurance, healthcare, or other regulated industries. Working knowledge of cybersecurity frameworks, regulatory requirements, and industry standards, including NIST, CIS Controls, FFIEC, PCI DSS, SOC 2, or equivalent governance frameworks. Exceptional problem-solving, analytical, and troubleshooting skills with the ability to diagnose and resolve complex network and cloud infrastructure issues. Ability to lead technical projects, manage competing priorities, and deliver solutions in a fast-paced, mission-critical environment. Strong interpersonal, collaboration, and relationship-building skills, with the ability to effectively partner with Information Security, Infrastructure, Cloud Engineering, Application Development, and business stakeholders. Excellent verbal, written, and presentation communication skills, including the ability to develop technical documentation, architecture diagrams, standards, and executive-level communications. Strong organizational skills with the ability to manage multiple initiatives, meet deadlines, and maintain a high level of accuracy and attention to detail. Ability to work independently while serving as a technical leader, mentor, and subject matter expert for network engineering and cloud networking technologies. Commitment to continuous learning and staying current with emerging networking, cloud, automation, and cybersecurity technologies and best practices . click apply for full job details
11/07/2026
Full time
Job Description Job Description: Job Summary The Senior Data Center & Cloud Network Engineer is responsible for designing, implementing, operating, securing, and modernizing the Bank's network infrastructure across enterprise data centers, corporate offices, branch locations, and the Microsoft Azure cloud environment. This senior-level, hands-on engineering role serves as a critical bridge between the Bank's traditional on-premises infrastructure and its evolving hybrid-cloud architecture. The position combines deep expertise in enterprise networking, data center technologies, cloud networking, cybersecurity, resiliency, and network automation to deliver secure, scalable, and universally available solutions that support business operations and strategic initiatives. The Senior Data Center & Cloud Network Engineer partners closely with Cloud Engineering, Infrastructure Services, Information Security, Enterprise Architecture, Risk Management, Internal Audit, telecommunications providers, and other technology teams to develop, implement, and maintain network solutions that align with business objectives, regulatory requirements, and industry best practices. Key Responsibilities Design, implement, maintain, and troubleshoot enterprise data center, core network, and cloud network infrastructure. Engineer universally available and resilient routing, switching, network segmentation, and redundancy solutions to support business continuity objectives. Configure, monitor, and troubleshoot networking technologies including BGP, OSPF, TCP/IP, VLANs, routing, switching, NAT, DNS, DHCP, and VPN services. Support connectivity and operational readiness across primary and disaster recovery data centers, corporate offices, branch locations, and colocation facilities. Design, deploy, and manage Microsoft Azure networking services, including Virtual Networks (VNets), subnets, peering, User Defined Routes (UDRs), Network Security Groups (NSGs), Private Link, Private Endpoints, and Private DNS. Architect and support hybrid cloud networking solutions utilizing Azure ExpressRoute, VPN Gateway, Hub-and-Spoke, and Azure Virtual WAN architectures. Implement and support Azure networking and security services, including Azure Firewall, Application Gateway/WAF, Azure Load Balancer, Azure Kubernetes Service (AKS), and Azure Platform-as-a-Service (PaaS) networking requirements. Manage and optimize enterprise WAN environments, including MPLS, Internet, VPN, and carrier-based connectivity solutions, while evaluating and implementing SD-WAN and SASE technologies. Configure, maintain, and support next-generation firewall platforms to enable secure network segmentation, Zero Trust architectures, and secure remote access. Partner with Information Security teams to implement network security standards, firewall policies, threat prevention controls, vulnerability remediation, and regulatory compliance requirements. Administer and support enterprise DNS, DHCP, IPAM, load balancing, and application delivery technologies. Develop and maintain network automation solutions using Terraform, Python, PowerShell, Ansible, APIs, Git, and Infrastructure-as-Code (IaC) methodologies. Implement proactive monitoring, telemetry, alerting, performance analysis, and capacity planning to ensure network reliability and availability. Participate in incident response, root cause analysis, problem management, disaster recovery testing, and 24x7 production support activities as required. Create and maintain network architecture diagrams, standards, policies, procedures, configurations, and technical documentation. Lead network modernization initiatives, technology evaluations, and strategic infrastructure projects to improve scalability, performance, and security. Collaborate with infrastructure, cloud, security, and application teams to support enterprise technology initiatives and business objectives. Provide technical leadership, mentoring, and knowledge transfer to junior engineers and operational support teams. Compliance Responsibilities Complies with all applicable state and federal banking laws, regulations, and internal policies related but not limited to lending, operations, and deposit requirements, including Bank Secrecy Act (BSA), Anti-Money Laundering (AML) requirements, Office of Foreign Assets Control (OFAC) regulations, Customer Identification Program (CIP) requirements, Financial Elder Abuse reporting laws, Sexual Harassment prevention policies, information security and privacy requirements. Required Knowledge Extensive hands-on experience designing, implementing, and supporting enterprise data center and core network infrastructure. Advanced knowledge of networking protocols and technologies, including TCP/IP, BGP, OSPF, VLANs, routing, switching, NAT, DNS, DHCP, VPN, network segmentation, and high-availability architectures. Demonstrated experience designing resilient, scalable, and universally available network infrastructures that support mission-critical business operations. Strong knowledge of enterprise network security principles and hands-on experience administering next-generation firewall platforms, network segmentation, and secure remote-access solutions. Experience supporting enterprise WAN technologies, including MPLS, Internet, VPN, SD-WAN, and carrier-provided connectivity services. Advanced Microsoft Azure networking expertise, including: Virtual Networks (VNets) Subnets and VNet Peering Network Security Groups (NSGs) User Defined Routes (UDRs) Private Link and Private Endpoints Private DNS Azure ExpressRoute Azure VPN Gateway Azure Firewall Azure Application Gateway/WAF Azure Load Balancer Strong understanding of hybrid-cloud networking architectures, including hub-and-spoke, Virtual WAN, and cloud-to-datacenter connectivity solutions. Proven troubleshooting skills across routing, switching, firewalls, DNS, application connectivity, WAN services, and hybrid-cloud environments. Experience supporting universally available business-critical production environments with a focus on performance, reliability, disaster recovery, and operational excellence. Knowledge of network monitoring, telemetry, alerting, capacity planning, and performance management tools and methodologies. Experience with network automation, scripting, and Infrastructure-as-Code (IaC) technologies, including Terraform, Python, PowerShell, Ansible, APIs, and Git. Understanding of Zero Trust networking principles, cybersecurity best practices, threat prevention technologies, and regulatory compliance requirements. Strong technical documentation skills, including development of network diagrams, standards, configuration documentation, policies, and operational procedures. Excellent verbal and written communication skills with the ability to effectively collaborate across Infrastructure, Cloud, Information Security, Application Development, and business teams. Ability to manage multiple priorities, lead complex technical initiatives, and effectively support enterprise-wide infrastructure modernization efforts. Knowledge, Skills and Abilities Advanced hands-on experience with Fortinet and/or Palo Alto Networks Next-Generation Firewalls (NGFWs), including firewall policy administration, network segmentation, site-to-site and remote-access VPNs, threat prevention, and high-availability configurations. Strong expertise with Cisco and/or Arista enterprise, campus, and data center networking technologies, including routing, switching, network fabric, and infrastructure modernization initiatives. Experience designing, implementing, and supporting SD-WAN, SASE/SSE, and Azure Virtual WAN solutions to improve network performance, resiliency, security, and user connectivity. Demonstrated experience with Infrastructure as Code (IaC), network automation, and orchestration using Terraform, Python, PowerShell, Ansible, APIs, Git, or similar technologies. Experience administering and supporting enterprise load balancing, application delivery, DNS, DHCP, and IPAM platforms, including Infoblox, F5, or comparable solutions. Strong understanding of data center, colocation, carrier, and cloud connectivity services, including coordination with telecommunications providers, managed service vendors, and cloud partners. Experience supporting complex, universally available environments within banking, financial services, insurance, healthcare, or other regulated industries. Working knowledge of cybersecurity frameworks, regulatory requirements, and industry standards, including NIST, CIS Controls, FFIEC, PCI DSS, SOC 2, or equivalent governance frameworks. Exceptional problem-solving, analytical, and troubleshooting skills with the ability to diagnose and resolve complex network and cloud infrastructure issues. Ability to lead technical projects, manage competing priorities, and deliver solutions in a fast-paced, mission-critical environment. Strong interpersonal, collaboration, and relationship-building skills, with the ability to effectively partner with Information Security, Infrastructure, Cloud Engineering, Application Development, and business stakeholders. Excellent verbal, written, and presentation communication skills, including the ability to develop technical documentation, architecture diagrams, standards, and executive-level communications. Strong organizational skills with the ability to manage multiple initiatives, meet deadlines, and maintain a high level of accuracy and attention to detail. Ability to work independently while serving as a technical leader, mentor, and subject matter expert for network engineering and cloud networking technologies. Commitment to continuous learning and staying current with emerging networking, cloud, automation, and cybersecurity technologies and best practices . click apply for full job details
Job Description Job Description We are looking for an experienced Senior IT Network Engineer to own and support Spire's corporate and back-office network environment. Reporting to the Global IT Director, this is a hands-on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire's offices, remote users, corporate services, and back-office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams. The role includes responsibility for corporate routing, firewalls, VPN and remote access, office-to-office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject-matter experts. We are looking for someone who is proactive, self-directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network-engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow-through. Role & Responsibilities Own the architecture, implementation, operation, and reliability of Spire's corporate and back-office network environment. Design, configure, maintain, and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity. Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting. Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting. Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections. Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems. Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing. Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks. Maintain and improve corporate wireless networking and network-authentication services. Serve as the senior technical escalation point for complex corporate network outages and connectivity issues. Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services. Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls. Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries. Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation. Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor, or manage corporate network services. Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues. Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities. Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors. Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required. Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation. Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution. Participate in after-hours escalation or on-call support for critical corporate network incidents when required. Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security. Basic Qualifications 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role. Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation. Hands-on experience designing, operating, and troubleshooting enterprise routing and switching environments. Experience administering enterprise firewall platforms and implementing firewall policy and rule changes. Experience designing, operating, and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs. Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems. Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits. Experience with cloud networking in AWS, Azure, or similar environments. Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services. Experience with network monitoring, logging, alerting, and operational troubleshooting tools. Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools. Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision. Strong documentation, change-management, and operational practices. Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers. Ability to participate in after-hours escalation or on-call support for critical network incidents. Preferred Qualifications Experience with Palo Alto Networks firewalls or similar enterprise firewall platforms. Experience with BGP and other dynamic routing protocols. Experience with OpenVPN or other enterprise remote-access platforms. Experience with AWS networking, including VPCs, Transit Gateway, Route 53, security groups, routing, and related services. Experience with enterprise wireless platforms and 802.1X or certificate-based network authentication. Experience with DNS administration, domain-management platforms, and related infrastructure services. Experience managing PKI, certificates, or certificate-based authentication for network services.
11/07/2026
Full time
Job Description Job Description We are looking for an experienced Senior IT Network Engineer to own and support Spire's corporate and back-office network environment. Reporting to the Global IT Director, this is a hands-on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire's offices, remote users, corporate services, and back-office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams. The role includes responsibility for corporate routing, firewalls, VPN and remote access, office-to-office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject-matter experts. We are looking for someone who is proactive, self-directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network-engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow-through. Role & Responsibilities Own the architecture, implementation, operation, and reliability of Spire's corporate and back-office network environment. Design, configure, maintain, and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity. Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting. Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting. Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections. Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems. Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing. Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks. Maintain and improve corporate wireless networking and network-authentication services. Serve as the senior technical escalation point for complex corporate network outages and connectivity issues. Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services. Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls. Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries. Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation. Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor, or manage corporate network services. Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues. Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities. Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors. Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required. Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation. Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution. Participate in after-hours escalation or on-call support for critical corporate network incidents when required. Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security. Basic Qualifications 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role. Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation. Hands-on experience designing, operating, and troubleshooting enterprise routing and switching environments. Experience administering enterprise firewall platforms and implementing firewall policy and rule changes. Experience designing, operating, and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs. Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems. Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits. Experience with cloud networking in AWS, Azure, or similar environments. Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services. Experience with network monitoring, logging, alerting, and operational troubleshooting tools. Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools. Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision. Strong documentation, change-management, and operational practices. Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers. Ability to participate in after-hours escalation or on-call support for critical network incidents. Preferred Qualifications Experience with Palo Alto Networks firewalls or similar enterprise firewall platforms. Experience with BGP and other dynamic routing protocols. Experience with OpenVPN or other enterprise remote-access platforms. Experience with AWS networking, including VPCs, Transit Gateway, Route 53, security groups, routing, and related services. Experience with enterprise wireless platforms and 802.1X or certificate-based network authentication. Experience with DNS administration, domain-management platforms, and related infrastructure services. Experience managing PKI, certificates, or certificate-based authentication for network services.
Job Description Job Description Location: Onsite (5 days per week) in Atlanta, GA 30326 Employment Type: 12 month contract-to-hire (W-2 or 1099/IC). Conversion Salary: Up to $160k (depending on experience) Contract Compensation: Up to $76/hour W-2 or $85/hour 1099 Independent Contractors: open to individuals who have an LLC or S-Corp (not 3rd party eligible) Work Authorization: Due to the nature of the work, candidates must be U.S. Citizens or U.S. Green Card holders . Visa sponsorship or other work authorization types are not eligible for this position. Benefits: Medical, dental, vision, LTD/STD, HSA/FSA, term life, and supplemental health insurances (e.g., Aflac) for all employees (and their families if needed), 401k This senior, hands-on network engineering role focuses on keeping a mature enterprise network secure, stable, and well-supported day to day. Success is measured by fast, accurate troubleshooting, disciplined change execution, and reliable operation of Cisco routing/switching, Palo Alto firewalls, and Cisco ISE in a production environment. You will be a key contributor for operational support, maintenance, upgrades, and documentation, with an emphasis on access control and security-aware network administration. Responsibilities: Operate and support enterprise LAN/WAN, VPN, and wireless services, ensuring availability and performance in a production environment. Troubleshoot complex network incidents end to end, isolating root cause across routing, switching, firewall, and authentication components and driving issues to resolution. Administer Cisco routers and switches, including configuration management, software upgrades, patching, and lifecycle maintenance. Configure and maintain Palo Alto firewalls, including policy changes, NAT, VPN, logging/visibility, and troubleshooting connectivity and security rule issues. Administer Cisco ISE for network access control, including 802.1X authentication workflows, RADIUS/TACACS+ integration, endpoint access policies, and authorization troubleshooting. Execute planned changes using disciplined change control, validating impact, documenting results, and performing rollback when needed. Monitor network health and security signals, analyze logs and telemetry, and implement corrective actions to reduce recurring incidents. Maintain accurate network documentation (topologies, configurations, runbooks, and standards) to support auditability and repeatable operations. Partner with security and operations stakeholders to align network configurations with governance expectations and support clearance-related compliance requirements. Communicate clearly with technical and non-technical stakeholders during incidents and maintenance windows, providing concise status updates and post-incident summaries. Required Skills: Current CCNA (or higher) certification is required. 8+ years of enterprise network administration/engineering experience. Hands-on experience administering and troubleshooting Cisco routers and switches across LAN/WAN, VPN, and wireless networks, including maintenance, upgrades, and production support. Hands-on experience configuring, administering, and troubleshooting Palo Alto firewalls in a production environment. Hands-on Cisco ISE / network access control experience, including RADIUS, TACACS+, 802.1X, and related access-control technologies. Ability to independently troubleshoot network issues, produce clear documentation, support established environments, and communicate effectively during operational events. Ability to meet key personnel requirements, including eligibility to obtain a Public Trust clearance prior to conversion. Preferred Skills: CCNP or CCIE certification. Experience supporting federal environments and/or working within a SOC-aligned operating model. Working familiarity with CIS Controls, NIST 800-53, and/or DISA STIGs and the ability to apply requirements to network operations. Exposure to Prisma, SIEM platforms, and/or cloud security concepts that impact network visibility and policy enforcement. Experience with vulnerability management processes and/or incident response support, including remediation validation and evidence gathering. Scripting or automation experience using Python and/or PowerShell for operational tasks (e.g., data collection, config validation, reporting). Mentoring or technical leadership experience, including guiding peers through troubleshooting approaches and operational best practices.
11/07/2026
Full time
Job Description Job Description Location: Onsite (5 days per week) in Atlanta, GA 30326 Employment Type: 12 month contract-to-hire (W-2 or 1099/IC). Conversion Salary: Up to $160k (depending on experience) Contract Compensation: Up to $76/hour W-2 or $85/hour 1099 Independent Contractors: open to individuals who have an LLC or S-Corp (not 3rd party eligible) Work Authorization: Due to the nature of the work, candidates must be U.S. Citizens or U.S. Green Card holders . Visa sponsorship or other work authorization types are not eligible for this position. Benefits: Medical, dental, vision, LTD/STD, HSA/FSA, term life, and supplemental health insurances (e.g., Aflac) for all employees (and their families if needed), 401k This senior, hands-on network engineering role focuses on keeping a mature enterprise network secure, stable, and well-supported day to day. Success is measured by fast, accurate troubleshooting, disciplined change execution, and reliable operation of Cisco routing/switching, Palo Alto firewalls, and Cisco ISE in a production environment. You will be a key contributor for operational support, maintenance, upgrades, and documentation, with an emphasis on access control and security-aware network administration. Responsibilities: Operate and support enterprise LAN/WAN, VPN, and wireless services, ensuring availability and performance in a production environment. Troubleshoot complex network incidents end to end, isolating root cause across routing, switching, firewall, and authentication components and driving issues to resolution. Administer Cisco routers and switches, including configuration management, software upgrades, patching, and lifecycle maintenance. Configure and maintain Palo Alto firewalls, including policy changes, NAT, VPN, logging/visibility, and troubleshooting connectivity and security rule issues. Administer Cisco ISE for network access control, including 802.1X authentication workflows, RADIUS/TACACS+ integration, endpoint access policies, and authorization troubleshooting. Execute planned changes using disciplined change control, validating impact, documenting results, and performing rollback when needed. Monitor network health and security signals, analyze logs and telemetry, and implement corrective actions to reduce recurring incidents. Maintain accurate network documentation (topologies, configurations, runbooks, and standards) to support auditability and repeatable operations. Partner with security and operations stakeholders to align network configurations with governance expectations and support clearance-related compliance requirements. Communicate clearly with technical and non-technical stakeholders during incidents and maintenance windows, providing concise status updates and post-incident summaries. Required Skills: Current CCNA (or higher) certification is required. 8+ years of enterprise network administration/engineering experience. Hands-on experience administering and troubleshooting Cisco routers and switches across LAN/WAN, VPN, and wireless networks, including maintenance, upgrades, and production support. Hands-on experience configuring, administering, and troubleshooting Palo Alto firewalls in a production environment. Hands-on Cisco ISE / network access control experience, including RADIUS, TACACS+, 802.1X, and related access-control technologies. Ability to independently troubleshoot network issues, produce clear documentation, support established environments, and communicate effectively during operational events. Ability to meet key personnel requirements, including eligibility to obtain a Public Trust clearance prior to conversion. Preferred Skills: CCNP or CCIE certification. Experience supporting federal environments and/or working within a SOC-aligned operating model. Working familiarity with CIS Controls, NIST 800-53, and/or DISA STIGs and the ability to apply requirements to network operations. Exposure to Prisma, SIEM platforms, and/or cloud security concepts that impact network visibility and policy enforcement. Experience with vulnerability management processes and/or incident response support, including remediation validation and evidence gathering. Scripting or automation experience using Python and/or PowerShell for operational tasks (e.g., data collection, config validation, reporting). Mentoring or technical leadership experience, including guiding peers through troubleshooting approaches and operational best practices.
Job Description Job Description We are looking for an experienced Senior IT Network Engineer to own and support Spire's corporate and back-office network environment. Reporting to the Global IT Director, this is a hands-on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire's offices, remote users, corporate services, and back-office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams. The role includes responsibility for corporate routing, firewalls, VPN and remote access, office-to-office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject-matter experts. We are looking for someone who is proactive, self-directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network-engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow-through. Role & Responsibilities Own the architecture, implementation, operation, and reliability of Spire's corporate and back-office network environment. Design, configure, maintain, and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity. Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting. Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting. Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections. Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems. Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing. Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks. Maintain and improve corporate wireless networking and network-authentication services. Serve as the senior technical escalation point for complex corporate network outages and connectivity issues. Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services. Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls. Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries. Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation. Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor, or manage corporate network services. Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues. Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities. Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors. Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required. Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation. Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution. Participate in after-hours escalation or on-call support for critical corporate network incidents when required. Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security. Basic Qualifications 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role. Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation. Hands-on experience designing, operating, and troubleshooting enterprise routing and switching environments. Experience administering enterprise firewall platforms and implementing firewall policy and rule changes. Experience designing, operating, and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs. Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems. Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits. Experience with cloud networking in AWS, Azure, or similar environments. Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services. Experience with network monitoring, logging, alerting, and operational troubleshooting tools. Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools. Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision. Strong documentation, change-management, and operational practices. Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers. Ability to participate in after-hours escalation or on-call support for critical network incidents. Preferred Qualifications Experience with Palo Alto Networks firewalls or similar enterprise firewall platforms. Experience with BGP and other dynamic routing protocols. Experience with OpenVPN or other enterprise remote-access platforms. Experience with AWS networking, including VPCs, Transit Gateway, Route 53, security groups, routing, and related services. Experience with enterprise wireless platforms and 802.1X or certificate-based network authentication. Experience with DNS administration, domain-management platforms, and related infrastructure services. Experience managing PKI, certificates, or certificate-based authentication for network services.
11/07/2026
Full time
Job Description Job Description We are looking for an experienced Senior IT Network Engineer to own and support Spire's corporate and back-office network environment. Reporting to the Global IT Director, this is a hands-on role with primary responsibility for the design, implementation, operation, reliability, and lifecycle management of the corporate network. You will own the networking that supports Spire's offices, remote users, corporate services, and back-office systems, while working closely with Security, Infrastructure, Facilities, and other technical teams. The role includes responsibility for corporate routing, firewalls, VPN and remote access, office-to-office connectivity, DNS, wireless networking, network authentication, and related network infrastructure. You will also help modernize legacy and bespoke network services, improve resiliency, and reduce operational dependency on individual subject-matter experts. We are looking for someone who is proactive, self-directed, and comfortable owning complex technical problems from architecture through implementation and ongoing operation. The right person will combine strong network-engineering fundamentals with disciplined operational practices, including documentation, change management, monitoring, lifecycle management, and follow-through. Role & Responsibilities Own the architecture, implementation, operation, and reliability of Spire's corporate and back-office network environment. Design, configure, maintain, and troubleshoot corporate routing, switching, wired and wireless networking, firewalls, VPNs, and office-to-office connectivity. Own the corporate remote-access environment, including VPN architecture, operation, authentication integration, user connectivity, and troubleshooting. Manage corporate firewall platforms and policies in partnership with Security, including implementation, rule changes, lifecycle management, and troubleshooting. Design and maintain network segmentation and routing between corporate offices, corporate cloud services, remote-access environments, and approved external connections. Own corporate DNS operations and related network services supporting identity, email, SaaS, endpoints, and other business systems. Manage office-to-office and corporate site-to-site VPN connectivity, including IPsec tunnels and related routing. Support corporate cloud networking for IT-owned systems and services, including routing, connectivity, security controls, and integration with office and remote-access networks. Maintain and improve corporate wireless networking and network-authentication services. Serve as the senior technical escalation point for complex corporate network outages and connectivity issues. Troubleshoot difficult problems involving routing, VPNs, firewalls, DNS, authentication, certificates, wireless networking, cloud connectivity, and interdependent network services. Partner closely with Security on network-security architecture, firewall policy, segmentation, secure-access requirements, PKI, and other security controls. Partner with Infrastructure and Engineering teams on connectivity between corporate and engineering environments, ensuring secure, reliable, and well-defined network boundaries. Maintain accurate network diagrams, configurations, IP addressing, circuit information, operating procedures, and recovery documentation. Develop and maintain scripts, infrastructure-as-code, and automation used to deploy, configure, monitor, or manage corporate network services. Implement and maintain monitoring and alerting to identify network availability, reliability, capacity, and performance issues. Plan and execute network hardware, software, certificate, circuit, and service lifecycle activities. Support office openings, moves, expansions, consolidations, closures, and network infrastructure changes in partnership with End User Technology, Facilities, carriers, and vendors. Manage or coordinate ISP, carrier, circuit, and network-vendor relationships where required. Follow disciplined change-management practices, including planning, peer review, testing, documentation, rollback planning, and post-change validation. Proactively identify architectural, reliability, lifecycle, capacity, and operational risks and drive them through resolution. Participate in after-hours escalation or on-call support for critical corporate network incidents when required. Contribute to broader IT initiatives involving infrastructure modernization, reliability, automation, cloud services, workplace technology, and security. Basic Qualifications 5+ years of experience in network engineering, network operations, infrastructure engineering, or a similar hands-on technical role. Strong knowledge of TCP/IP, routing, switching, DNS, DHCP, NAT, VPNs, firewalls, VLANs, and network segmentation. Hands-on experience designing, operating, and troubleshooting enterprise routing and switching environments. Experience administering enterprise firewall platforms and implementing firewall policy and rule changes. Experience designing, operating, and troubleshooting remote-access and site-to-site VPN technologies, including IPsec and SSL-based VPNs. Strong troubleshooting skills and the ability to diagnose complex connectivity and network-service issues across multiple layers and systems. Experience supporting multi-site corporate networks, including office connectivity, WAN services, wireless networking, and Internet circuits. Experience with cloud networking in AWS, Azure, or similar environments. Working knowledge of identity, authentication, MFA, certificates, and PKI as they relate to network access and infrastructure services. Experience with network monitoring, logging, alerting, and operational troubleshooting tools. Experience with scripting, infrastructure-as-code, or automation using Terraform, Python, PowerShell, shell scripting, APIs, or similar tools. Demonstrated ability to take ownership of technical systems and projects through completion with limited supervision. Strong documentation, change-management, and operational practices. Ability to communicate clearly and collaborate effectively across IT, Security, Infrastructure, Facilities, Engineering, vendors, and carriers. Ability to participate in after-hours escalation or on-call support for critical network incidents. Preferred Qualifications Experience with Palo Alto Networks firewalls or similar enterprise firewall platforms. Experience with BGP and other dynamic routing protocols. Experience with OpenVPN or other enterprise remote-access platforms. Experience with AWS networking, including VPCs, Transit Gateway, Route 53, security groups, routing, and related services. Experience with enterprise wireless platforms and 802.1X or certificate-based network authentication. Experience with DNS administration, domain-management platforms, and related infrastructure services. Experience managing PKI, certificates, or certificate-based authentication for network services.
Job Description Job Description Overview Senior Network Engineer Arlington, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! We deliver essential technology services to our customers in support of their missions to sustain the national security and economic interests of our nation. SecuriGence is seeking a talented Senior Network Engineer to help contribute to our success. Come help us solve problems with Innovation through Intelligence. As a Senior Network Engineer , you will be assigned to an engineering implementation team with a concentration of networking capabilities. As a member of the implementation team, you will have the opportunity to be engaged in a variety of solution implementations, rather than just networking-focused. Responsibilities Design and troubleshoot complex network architectures and solutions. Use centralized network management tools to gather statistics, generate usage reports, and back up device configurations. Provide technical leadership on major network tasks and enterprise technology initiatives. Research and evaluate emerging network technologies, protocols, and applications for potential integration into the enterprise environment. Ensure seamless and secure connectivity across all enterprise endpoints. Analyze interoperability, integration, and deployment issues; optimize topology and site configurations. Apply advanced network design tools and techniques to develop efficient and secure architectures. Support mission-critical operations, with the expectation of occasional off-duty work hours. Develop automation using tools such as Ansible, Python, Terraform, or Cisco DNA Center Collaborate with security, systems, cloud, and DevOps teams to align infrastructure strategies Coordinate with vendors and service providers for escalations, procurement, and support Configure and manage security policies, NAT rules, decryption, and application-based controls (App-ID, User-ID, Content-ID) Monitor and analyze firewall logs, threat intelligence feeds, and traffic flows to proactively identify and mitigate risks. Other duties as assigned Qualifications Bachelor's degree in network management or other related fields. Additional years of experience can be used in lieu of a degree. 8+ years of professional experience in network engineering and NGFWs Classified/Air-gapped Network experience IAT II required Palo Alto Network Security Professional is preferred Secret clearance with the ability to obtain TS/SCI Knowledge, Skills and Abilities: In-depth understanding of network architecture design, including LAN, WAN, SDN, VPNs, and hybrid cloud environments. Experience with SD-WAN technologies and solutions is a plus. Expertise in routing, switching, firewalls, load balancers, and intrusion detection/prevention systems. Advanced troubleshooting and problem-solving across complex enterprise networks. Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, and other core networking protocols. Knowledge of classified/unclassified government network requirements, NIST, DISA STIGs, and other cybersecurity frameworks. Effective collaboration with cross-functional teams, including security, systems engineering, and program management. Lead enterprise-scale network operations in a secure, mission-critical environment. Ability to adapt to shifting priorities and lead through change. Familiarity with SIEM and SOAR solutions (XSOAR, Swimlane, Splunk, Cortex XDR, QRadar, etc.). Familiarity with cross-functional tool connections and how they interact with each other over the network. How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -
11/07/2026
Full time
Job Description Job Description Overview Senior Network Engineer Arlington, VA Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer's core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level! We deliver essential technology services to our customers in support of their missions to sustain the national security and economic interests of our nation. SecuriGence is seeking a talented Senior Network Engineer to help contribute to our success. Come help us solve problems with Innovation through Intelligence. As a Senior Network Engineer , you will be assigned to an engineering implementation team with a concentration of networking capabilities. As a member of the implementation team, you will have the opportunity to be engaged in a variety of solution implementations, rather than just networking-focused. Responsibilities Design and troubleshoot complex network architectures and solutions. Use centralized network management tools to gather statistics, generate usage reports, and back up device configurations. Provide technical leadership on major network tasks and enterprise technology initiatives. Research and evaluate emerging network technologies, protocols, and applications for potential integration into the enterprise environment. Ensure seamless and secure connectivity across all enterprise endpoints. Analyze interoperability, integration, and deployment issues; optimize topology and site configurations. Apply advanced network design tools and techniques to develop efficient and secure architectures. Support mission-critical operations, with the expectation of occasional off-duty work hours. Develop automation using tools such as Ansible, Python, Terraform, or Cisco DNA Center Collaborate with security, systems, cloud, and DevOps teams to align infrastructure strategies Coordinate with vendors and service providers for escalations, procurement, and support Configure and manage security policies, NAT rules, decryption, and application-based controls (App-ID, User-ID, Content-ID) Monitor and analyze firewall logs, threat intelligence feeds, and traffic flows to proactively identify and mitigate risks. Other duties as assigned Qualifications Bachelor's degree in network management or other related fields. Additional years of experience can be used in lieu of a degree. 8+ years of professional experience in network engineering and NGFWs Classified/Air-gapped Network experience IAT II required Palo Alto Network Security Professional is preferred Secret clearance with the ability to obtain TS/SCI Knowledge, Skills and Abilities: In-depth understanding of network architecture design, including LAN, WAN, SDN, VPNs, and hybrid cloud environments. Experience with SD-WAN technologies and solutions is a plus. Expertise in routing, switching, firewalls, load balancers, and intrusion detection/prevention systems. Advanced troubleshooting and problem-solving across complex enterprise networks. Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, and other core networking protocols. Knowledge of classified/unclassified government network requirements, NIST, DISA STIGs, and other cybersecurity frameworks. Effective collaboration with cross-functional teams, including security, systems engineering, and program management. Lead enterprise-scale network operations in a secure, mission-critical environment. Ability to adapt to shifting priorities and lead through change. Familiarity with SIEM and SOAR solutions (XSOAR, Swimlane, Splunk, Cortex XDR, QRadar, etc.). Familiarity with cross-functional tool connections and how they interact with each other over the network. How you'll grow At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there's always room to learn. We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers. Benefits At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits. Learn more about what working at Chenega MIOS can mean for you. Chenega MIOS's culture Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives. Corporate citizenship Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. Learn more about Chenega's impact on the world. Chenega MIOS News- Tips from your Talent Acquisition Team We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links: Chenega MIOS web site - Glassdoor at-Chenega-MIOS- EI_IE369514.11,23.htm LinkedIn - Facebook -
Job Description Job Description Velocitor Solutions is a leader in enterprise fleet management and mobile innovation, celebrating over 25 years of profitably growing technology. We go beyond standard telematics by offering a comprehensive, managed ecosystem-managing over 200,000 mobile assets for Fortune 500 clients across North America. Our V-Track platform integrates GPS tracking, AI-powered video telematics, and real-time data to drive safety and efficiency. We are in a pivotal phase of growth and looking to expand technology team. Why Join Velocitor Solutions You'll own critical infrastructure and network outcomes in a high-availability environment where reliability, security, and operational excellence directly impact customers. You'll also help modernize and simplify our stack (including virtualization evolution and cloud optimization) while partnering closely with product, managed services, and vendors to deliver measurable improvements. Position Summary The Senior Network / Infrastructure Engineer is responsible for the design, implementation, maintenance, and optimization of Velocitor Solutions' network, server, virtualization, cloud, and security infrastructure. This role ensures the availability, reliability, performance, and security of enterprise systems supporting business operations and customer-facing platforms. The Senior Network / Infrastructure Engineer serves as a technical lead for infrastructure initiatives and collaborates with internal teams, vendors, and stakeholders to deliver scalable and secure technology solutions. Essential Duties and Responsibilities Infrastructure Administration Administer and maintain VMware vSphere, ESX, and ESXi environments, including system upgrades, patch management, performance tuning, capacity planning, backup, disaster recovery, and troubleshooting. Support infrastructure modernization efforts, including virtualization platform migrations and cloud integration projects. Manage enterprise storage and compute platforms, including SAN, NAS, and converged infrastructure solutions. Monitor system performance and implement improvements to maximize reliability and efficiency. Cloud & Platform Management Administer Microsoft Azure environments, including networking, compute resources, storage, monitoring, security, and cost management. Deploy, manage, and support Kubernetes clusters and containerized applications. Support Docker environments, image repositories, runtime security, and application scalability. Configure and maintain load balancing solutions and associated network services. Network Engineering Design, implement, maintain, and troubleshoot enterprise LAN, WAN, wireless, voice, and video network environments. Configure and support routers, switches, firewalls, VPNs, VLANs, QoS, DHCP, DNS, and related technologies. Monitor network performance and resolve connectivity, latency, and security issues. Maintain secure remote access solutions and network security controls. Security & Compliance Manage secure data transfer systems, including SFTP and managed file transfer platforms. Maintain SSL/TLS certificates and encryption technologies across infrastructure platforms. Assist with vulnerability remediation, security hardening, and compliance-related initiatives. Support audits and security assessments as required. Operational Excellence Develop and implement automation solutions to improve operational efficiency and system reliability. Maintain monitoring, alerting, logging, and performance management systems. Participate in incident response, root cause analysis, and corrective action planning. Participate in on-call support rotations and after-hours maintenance activities as needed. Documentation & Collaboration Create and maintain technical documentation, diagrams, standards, procedures, and runbooks. Collaborate with software development, product, support, and business teams to support organizational initiatives. Coordinate with vendors and third-party service providers to resolve issues and implement solutions. Provide technical guidance and mentorship to junior team members when appropriate. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field; equivalent experience may be considered. Minimum of five (5) years of experience in a senior-level network or infrastructure engineering role. Strong experience supporting enterprise VMware environments. Strong experience administering Microsoft Azure environments. Hands-on experience with Kubernetes and containerized application platforms. Extensive knowledge of TCP/IP networking, routing, switching, VPNs, wireless networking, and network security. Experience administering enterprise firewalls, including SonicWall, Cisco ASA, or Palo Alto. Experience with Windows Server, Active Directory, Group Policy, and Microsoft Exchange environments. Working knowledge of Microsoft SQL Server administration and support. Strong troubleshooting, analytical, and problem-solving skills. Excellent verbal and written communication skills. Preferred Qualifications Industry certifications such as CCNA, CCNP, VCP, NCP, Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), Security+, or equivalent. Experience with Nutanix platforms and virtualization migrations. Experience with Cisco UCS, NetApp storage solutions, and FlexPod environments. Experience with IIS, Tomcat, and enterprise email security solutions. Experience supporting monitoring, endpoint management, backup, and disaster recovery platforms. Knowledge, Skills, and Abilities Strong understanding of enterprise infrastructure architecture and best practices. Ability to manage multiple projects and priorities simultaneously. Ability to work independently with minimal supervision. Strong organizational and documentation skills. Ability to identify opportunities for process improvement and automation. Commitment to maintaining secure, reliable, and scalable technology environments. Physical Requirements Ability to sit for extended periods while working at a computer. Ability to occasionally lift and carry equipment weighing up to 50 pounds. Ability to work in server rooms and data center environments. Ability to travel occasionally between company locations or vendor sites as needed. Working Conditions Primarily office-based environment. Occasional after-hours, weekend, or emergency support may be required. Participation in on-call support rotations is required. Velocitor Solutions is an Equal Opportunity Employer and values diversity at all levels of the organization. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, or any other protected status under applicable law. Company Description Velocitor Solutions is a leading provider of enterprise mobility, fleet management, and technology solutions, delivering innovative software, hardware, and managed services to organizations across North America. For more than 25 years, we have helped businesses improve operational efficiency, enhance workforce productivity, and gain greater visibility into their mobile assets through cutting-edge technology and exceptional customer service. Our success is built on a commitment to innovation, collaboration, integrity, and delivering meaningful solutions that help our customers achieve their goals. To learn more about Velocitor Solutions, our products, services, and company culture, please visit our website at on our Careers page. Company Description Velocitor Solutions is a leading provider of enterprise mobility, fleet management, and technology solutions, delivering innovative software, hardware, and managed services to organizations across North America. For more than 25 years, we have helped businesses improve operational efficiency, enhance workforce productivity, and gain greater visibility into their mobile assets through cutting-edge technology and exceptional customer service. Our success is built on a commitment to innovation, collaboration, integrity, and delivering meaningful solutions that help our customers achieve their goals. To learn more about Velocitor Solutions, our products, services, and company culture, please visit our website at on our Careers page.
11/07/2026
Full time
Job Description Job Description Velocitor Solutions is a leader in enterprise fleet management and mobile innovation, celebrating over 25 years of profitably growing technology. We go beyond standard telematics by offering a comprehensive, managed ecosystem-managing over 200,000 mobile assets for Fortune 500 clients across North America. Our V-Track platform integrates GPS tracking, AI-powered video telematics, and real-time data to drive safety and efficiency. We are in a pivotal phase of growth and looking to expand technology team. Why Join Velocitor Solutions You'll own critical infrastructure and network outcomes in a high-availability environment where reliability, security, and operational excellence directly impact customers. You'll also help modernize and simplify our stack (including virtualization evolution and cloud optimization) while partnering closely with product, managed services, and vendors to deliver measurable improvements. Position Summary The Senior Network / Infrastructure Engineer is responsible for the design, implementation, maintenance, and optimization of Velocitor Solutions' network, server, virtualization, cloud, and security infrastructure. This role ensures the availability, reliability, performance, and security of enterprise systems supporting business operations and customer-facing platforms. The Senior Network / Infrastructure Engineer serves as a technical lead for infrastructure initiatives and collaborates with internal teams, vendors, and stakeholders to deliver scalable and secure technology solutions. Essential Duties and Responsibilities Infrastructure Administration Administer and maintain VMware vSphere, ESX, and ESXi environments, including system upgrades, patch management, performance tuning, capacity planning, backup, disaster recovery, and troubleshooting. Support infrastructure modernization efforts, including virtualization platform migrations and cloud integration projects. Manage enterprise storage and compute platforms, including SAN, NAS, and converged infrastructure solutions. Monitor system performance and implement improvements to maximize reliability and efficiency. Cloud & Platform Management Administer Microsoft Azure environments, including networking, compute resources, storage, monitoring, security, and cost management. Deploy, manage, and support Kubernetes clusters and containerized applications. Support Docker environments, image repositories, runtime security, and application scalability. Configure and maintain load balancing solutions and associated network services. Network Engineering Design, implement, maintain, and troubleshoot enterprise LAN, WAN, wireless, voice, and video network environments. Configure and support routers, switches, firewalls, VPNs, VLANs, QoS, DHCP, DNS, and related technologies. Monitor network performance and resolve connectivity, latency, and security issues. Maintain secure remote access solutions and network security controls. Security & Compliance Manage secure data transfer systems, including SFTP and managed file transfer platforms. Maintain SSL/TLS certificates and encryption technologies across infrastructure platforms. Assist with vulnerability remediation, security hardening, and compliance-related initiatives. Support audits and security assessments as required. Operational Excellence Develop and implement automation solutions to improve operational efficiency and system reliability. Maintain monitoring, alerting, logging, and performance management systems. Participate in incident response, root cause analysis, and corrective action planning. Participate in on-call support rotations and after-hours maintenance activities as needed. Documentation & Collaboration Create and maintain technical documentation, diagrams, standards, procedures, and runbooks. Collaborate with software development, product, support, and business teams to support organizational initiatives. Coordinate with vendors and third-party service providers to resolve issues and implement solutions. Provide technical guidance and mentorship to junior team members when appropriate. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field; equivalent experience may be considered. Minimum of five (5) years of experience in a senior-level network or infrastructure engineering role. Strong experience supporting enterprise VMware environments. Strong experience administering Microsoft Azure environments. Hands-on experience with Kubernetes and containerized application platforms. Extensive knowledge of TCP/IP networking, routing, switching, VPNs, wireless networking, and network security. Experience administering enterprise firewalls, including SonicWall, Cisco ASA, or Palo Alto. Experience with Windows Server, Active Directory, Group Policy, and Microsoft Exchange environments. Working knowledge of Microsoft SQL Server administration and support. Strong troubleshooting, analytical, and problem-solving skills. Excellent verbal and written communication skills. Preferred Qualifications Industry certifications such as CCNA, CCNP, VCP, NCP, Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), Security+, or equivalent. Experience with Nutanix platforms and virtualization migrations. Experience with Cisco UCS, NetApp storage solutions, and FlexPod environments. Experience with IIS, Tomcat, and enterprise email security solutions. Experience supporting monitoring, endpoint management, backup, and disaster recovery platforms. Knowledge, Skills, and Abilities Strong understanding of enterprise infrastructure architecture and best practices. Ability to manage multiple projects and priorities simultaneously. Ability to work independently with minimal supervision. Strong organizational and documentation skills. Ability to identify opportunities for process improvement and automation. Commitment to maintaining secure, reliable, and scalable technology environments. Physical Requirements Ability to sit for extended periods while working at a computer. Ability to occasionally lift and carry equipment weighing up to 50 pounds. Ability to work in server rooms and data center environments. Ability to travel occasionally between company locations or vendor sites as needed. Working Conditions Primarily office-based environment. Occasional after-hours, weekend, or emergency support may be required. Participation in on-call support rotations is required. Velocitor Solutions is an Equal Opportunity Employer and values diversity at all levels of the organization. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, or any other protected status under applicable law. Company Description Velocitor Solutions is a leading provider of enterprise mobility, fleet management, and technology solutions, delivering innovative software, hardware, and managed services to organizations across North America. For more than 25 years, we have helped businesses improve operational efficiency, enhance workforce productivity, and gain greater visibility into their mobile assets through cutting-edge technology and exceptional customer service. Our success is built on a commitment to innovation, collaboration, integrity, and delivering meaningful solutions that help our customers achieve their goals. To learn more about Velocitor Solutions, our products, services, and company culture, please visit our website at on our Careers page. Company Description Velocitor Solutions is a leading provider of enterprise mobility, fleet management, and technology solutions, delivering innovative software, hardware, and managed services to organizations across North America. For more than 25 years, we have helped businesses improve operational efficiency, enhance workforce productivity, and gain greater visibility into their mobile assets through cutting-edge technology and exceptional customer service. Our success is built on a commitment to innovation, collaboration, integrity, and delivering meaningful solutions that help our customers achieve their goals. To learn more about Velocitor Solutions, our products, services, and company culture, please visit our website at on our Careers page.
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board! Why you'll love this job As one diverse, high performing team committed to technical excellence, you'll help shape the modern cybersecurity capabilities that drive a more reliable, safe, and profitable airline. The Platform Security product group delivers comprehensive solutions, processes, and platforms that embed and monitor security across Cloud, Application, Endpoint / End User, Data, and AI domains. In this portfolio, you'll help strengthen the safeguards that protect our systems, data, and people through consistent, scalable practices and deliver solutions that secure one of the world's most complex global operations. The Sr. Manager - Data Protection and Privacy Technology will own and lead the strategy, roadmap, engineering, and continuous improvement of American Airlines' Data Protection and Privacy Technology program. In this role, you'll advance core capabilities including data security engineering and protection, privacy engineering and assurance, data classification, retention, and access governance while guiding talented global teams. You'll work closely with Cybersecurity, Privacy Office, Enterprise Data, Legal, and Procurement to build scalable, modern controls that protect American Airlines' most critical information assets. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Own and lead the enterprise Data Protection and Privacy Technology strategy and roadmap, ensuring modern controls (classification, encryption, access governance, DLP, masking, AI/ML safeguards) are built, deployed, and continuously improved. Develop a deep understanding of enterprise data flows, championing secure data handling practices and shared accountability, while ensuring data protection and privacy decisions align with business priorities and technology strategies. Balance data protection, privacy, and business objectives, while guiding decisions that reflect the organization's risk appetite and operational realities with little/no direction from business/portfolio leadership. Provide oversight and direction for the Data Protection and Privacy Technology products' capabilities, programs, services and engagement model. Govern adherence to policies and standards. Own, enhance, and drive the global operating model. Translate complex data protection and privacy requirements into clear, actionable guidance for senior leaders, technology teams, and business partners. Shape how data protection and privacy controls are integrated into new technology development, ensuring risks are mitigated early and effectively. Serve as the bridge between engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into platforms, applications, and AI solutions. Evaluate the effectiveness of data protection and privacy technologies using KPIs, telemetry, and operational metrics to guide maturity, automation, and risk reduction. Conduct and oversee data protection and privacy by design risk assessments, product evaluations, compliance checks, and audits to meet regulatory requirements. Oversee coordination with appropriate teams during data protection and privacy incidents, ensuring accurate reporting, communication, and follow through. Drive data protection and privacy awareness programs that strengthen end user understanding of data protection responsibilities and emerging threats. Act as the primary point of contact between business/portfolio executive leadership and product teams to engage executive leadership and communicate the progress of Data Protection and Privacy Technology programs and services. Build and lead professional, creative, and collaborative global teams of data protection engineers, privacy engineers, and analysts, cultivating technical excellence, continuous learning, and innovation. Oversee a team of up to 50 team members with multiple squads. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field 8+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security. 3+ years of experience leading technical teams in a large enterprise environment. Prior experience driving large scale security or privacy technology initiatives from strategy through execution. Demonstrated ability to collaborate across cybersecurity, legal, data, product, and engineering teams to embed privacy and security into systems and workflows. Exhibit advanced ability to communicate data protection and privacy concepts clearly to non technical audiences, translating complex requirements into practical guidance. Preferred Qualifications- Education & Prior Job Experience Master's degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field. 12+ years of experience in cybersecurity, privacy engineering, data protection, or information security. 5+ years of leadership or management experience overseeing technical teams and driving enterprise level initiatives. Experience leading data protection or privacy engineering programs and teams in highly regulated industries (e.g., aviation, financial services, healthcare). Skills, Licenses & Certifications Knowledge of data protection industry practices and global privacy regulations (GDPR, CCPA/CPRA, PCI, etc.) and ability to translate them into technical controls aligned with industry frameworks such as NIST CSF/PRMF and ISO/IEC 27001/27701. Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models. Familiarity with cybersecurity or privacy-related risk assessment methodologies and frameworks. Professional certifications such as CISSP, CIPP/E, CIPP/US, CIPT, CDPSE, CCSP, or equivalent privacy/security credentials. Demonstrated ability to deliver prioritized outcomes using agile and product management principles. Experience in implementing and managing data protection and privacy technologies (e.g., DLP, data discovery/classification, encryption/tokenization, access governance, cloud data security, data and code scanning tools, DSAR/rights automation platforms, consent and preference management tools). Experience using KPIs, operational telemetry, and maturity metrics to assess the effectiveness of data protection and privacy by design controls. Demonstrated leadership, communication, and relationship building skills with the ability to influence stakeholders at all levels. Excellent analytical and problem-solving abilities with keen attention to detail. Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes. Ability to work independently with a high degree of initiative. What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders . click apply for full job details
11/06/2026
Full time
Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board! Why you'll love this job As one diverse, high performing team committed to technical excellence, you'll help shape the modern cybersecurity capabilities that drive a more reliable, safe, and profitable airline. The Platform Security product group delivers comprehensive solutions, processes, and platforms that embed and monitor security across Cloud, Application, Endpoint / End User, Data, and AI domains. In this portfolio, you'll help strengthen the safeguards that protect our systems, data, and people through consistent, scalable practices and deliver solutions that secure one of the world's most complex global operations. The Sr. Manager - Data Protection and Privacy Technology will own and lead the strategy, roadmap, engineering, and continuous improvement of American Airlines' Data Protection and Privacy Technology program. In this role, you'll advance core capabilities including data security engineering and protection, privacy engineering and assurance, data classification, retention, and access governance while guiding talented global teams. You'll work closely with Cybersecurity, Privacy Office, Enterprise Data, Legal, and Procurement to build scalable, modern controls that protect American Airlines' most critical information assets. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Own and lead the enterprise Data Protection and Privacy Technology strategy and roadmap, ensuring modern controls (classification, encryption, access governance, DLP, masking, AI/ML safeguards) are built, deployed, and continuously improved. Develop a deep understanding of enterprise data flows, championing secure data handling practices and shared accountability, while ensuring data protection and privacy decisions align with business priorities and technology strategies. Balance data protection, privacy, and business objectives, while guiding decisions that reflect the organization's risk appetite and operational realities with little/no direction from business/portfolio leadership. Provide oversight and direction for the Data Protection and Privacy Technology products' capabilities, programs, services and engagement model. Govern adherence to policies and standards. Own, enhance, and drive the global operating model. Translate complex data protection and privacy requirements into clear, actionable guidance for senior leaders, technology teams, and business partners. Shape how data protection and privacy controls are integrated into new technology development, ensuring risks are mitigated early and effectively. Serve as the bridge between engineering, cybersecurity, privacy, and business teams to embed data protection and privacy by design into platforms, applications, and AI solutions. Evaluate the effectiveness of data protection and privacy technologies using KPIs, telemetry, and operational metrics to guide maturity, automation, and risk reduction. Conduct and oversee data protection and privacy by design risk assessments, product evaluations, compliance checks, and audits to meet regulatory requirements. Oversee coordination with appropriate teams during data protection and privacy incidents, ensuring accurate reporting, communication, and follow through. Drive data protection and privacy awareness programs that strengthen end user understanding of data protection responsibilities and emerging threats. Act as the primary point of contact between business/portfolio executive leadership and product teams to engage executive leadership and communicate the progress of Data Protection and Privacy Technology programs and services. Build and lead professional, creative, and collaborative global teams of data protection engineers, privacy engineers, and analysts, cultivating technical excellence, continuous learning, and innovation. Oversee a team of up to 50 team members with multiple squads. All you'll need for success Minimum Qualifications- Education & Prior Job Experience Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related technical field 8+ years of progressive experience in cybersecurity, data protection, privacy engineering, or information security. 3+ years of experience leading technical teams in a large enterprise environment. Prior experience driving large scale security or privacy technology initiatives from strategy through execution. Demonstrated ability to collaborate across cybersecurity, legal, data, product, and engineering teams to embed privacy and security into systems and workflows. Exhibit advanced ability to communicate data protection and privacy concepts clearly to non technical audiences, translating complex requirements into practical guidance. Preferred Qualifications- Education & Prior Job Experience Master's degree in computer science, Cybersecurity, Engineering, Information Assurance, or a related technical field. 12+ years of experience in cybersecurity, privacy engineering, data protection, or information security. 5+ years of leadership or management experience overseeing technical teams and driving enterprise level initiatives. Experience leading data protection or privacy engineering programs and teams in highly regulated industries (e.g., aviation, financial services, healthcare). Skills, Licenses & Certifications Knowledge of data protection industry practices and global privacy regulations (GDPR, CCPA/CPRA, PCI, etc.) and ability to translate them into technical controls aligned with industry frameworks such as NIST CSF/PRMF and ISO/IEC 27001/27701. Strong understanding of data security and privacy engineering, secure data lifecycle practices, and access control models. Familiarity with cybersecurity or privacy-related risk assessment methodologies and frameworks. Professional certifications such as CISSP, CIPP/E, CIPP/US, CIPT, CDPSE, CCSP, or equivalent privacy/security credentials. Demonstrated ability to deliver prioritized outcomes using agile and product management principles. Experience in implementing and managing data protection and privacy technologies (e.g., DLP, data discovery/classification, encryption/tokenization, access governance, cloud data security, data and code scanning tools, DSAR/rights automation platforms, consent and preference management tools). Experience using KPIs, operational telemetry, and maturity metrics to assess the effectiveness of data protection and privacy by design controls. Demonstrated leadership, communication, and relationship building skills with the ability to influence stakeholders at all levels. Excellent analytical and problem-solving abilities with keen attention to detail. Solution oriented, can define various pragmatic alternatives leading to appropriate Cybersecurity outcomes. Ability to work independently with a high degree of initiative. What you'll get Feel free to take advantage of all that American Airlines has to offer: Travel Perks: Ready to explore the world? You, your family and your friends can reach 365 destinations on more than 6,800 daily flights across our global network. Health Benefits: On day one, you'll have access to your health, dental, prescription and vision benefits to help you stay well. And that's just the start, we also offer virtual doctor visits, flexible spending accounts and more. Wellness Programs: We want you to be the best version of yourself - that's why our wellness programs provide you with all the right tools, resources and support you need. 401(k) Program: Available upon hire and, depending on the workgroup, employer contributions to your 401(k) program are available after one year. Additional Benefits: Other great benefits include our Employee Assistance Program, pet insurance and discounts on hotels, cars, cruises and more Feel free to be yourself at American From the team members we hire to the customers we serve, inclusion and diversity are the foundation of the dynamic workforce at American Airlines. Our 20+ Team Member Business Resource Groups are focused on connecting our team members to our customers, suppliers, communities and shareholders . click apply for full job details
This job is with HP, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Senior Machine Learning Platform Engineer - Model Hosting & MLOps Description - Role summary We are hiring a Senior Machine Learning Platform Engineer to build the infrastructure and engineering workflows that take custom models from development into reliable production use. This is a hands-on role for someone who has hosted LLMs on GPU infrastructure, developed the cloud platform around model serving, and built MLOps pipelines that make releases repeatable and observable. You will work with model developers, application engineers, security, and cloud platform teams to turn a model artifact into a secure, scalable inference service. The work spans serving architecture, infrastructure as code, deployment automation, model lifecycle management, and production operations across AWS and Azure, with potential integration into on-premises environments. You will also help shape agent workflows that use hosted models, so serving choices support the needs of multi-step applications. Success means teams can deploy, update, monitor, and troubleshoot models through clear, reusable platform patterns. What you will do Design and build hosting for custom ML and AI models across AWS and Azure, with particular focus on GPU-backed LLM inference and real-time endpoints; support batch inference where appropriate. Package models and their dependencies into reproducible serving workloads; choose and implement suitable managed services, containers, or Kubernetes-based patterns based on throughput, latency, security, reliability, and cost. Provision and configure Kubernetes clusters or other suitable hosting infrastructure, including compute, storage, API access, identity and access controls, secrets, networking integration, observability, and environment configuration. Help design secure connections and deployment patterns between cloud and on-premises environments as hosting needs evolve. Develop infrastructure as code and deployment automation so model-hosting environments can be provisioned, reviewed, promoted, and maintained consistently. Build MLOps workflows for model registration, versioning, validation, release, rollback, and retirement. Connect training or model preparation to deployment through automated pipelines and appropriate quality gates. Partner with application teams to design and prototype agent workflows, including model and tool orchestration, state handling, failure recovery, and evaluation. Translate agent workload patterns into hosting decisions about model selection, context length, concurrency, latency, cost, tool access, and end-to-end tracing. Establish production monitoring for service health, latency, throughput, errors, GPU and other resource use, and model behavior. Share responsibility for diagnosing incidents and improving capacity, reliability, and cost. Create reusable deployment templates, reference architectures, documentation, and onboarding paths that help other teams ship models safely. Partner with model and application teams on practical tradeoffs such as online versus batch inference, managed versus self-hosted serving, scaling, evaluation, data handling, and operational ownership. Required experience Hands-on experience hosting LLM inference on GPU infrastructure in a production environment. You can explain what you personally built, how models reached production, and how you managed throughput, latency, utilization, reliability, and cost. Experience building the surrounding model-serving platform for custom models, such as inference runtimes, deployment patterns, endpoint access, scaling, and operational tooling. Strong software engineering skills, especially Python, with experience building services, automation, and maintainable production code. Experience developing infrastructure for ML workloads across AWS and Azure, with deep hands-on delivery in at least one and practical ability to work in the other. You have used infrastructure as code such as Terraform or an equivalent tool. Experience provisioning, configuring, and maintaining Kubernetes or another production hosting platform for containerized inference workloads. Experience building or operating ML deployment pipelines with versioned artifacts, automated validation, CI/CD, environment promotion, and rollback. Familiarity with LLM agent patterns, including model invocation, tool calls, and multi-step workflows, and how they affect serving capacity, reliability, and access controls. Working knowledge of production concerns for inference services: scaling, latency, availability, logging and metrics, shared incident response, access control, and cost. Ability to work across model development, application, platform, and security teams; turn ambiguous requirements into a working design; and document the resulting operational approach. Helpful experience Advanced GPU inference optimization, including capacity planning, batching, autoscaling, memory use, model loading, and performance tuning. Serving generative or other compute-intensive custom models beyond LLMs; selecting and tuning inference servers and runtime configurations. AWS SageMaker or EKS; Azure Machine Learning or AKS; or equivalent managed and self-hosted model platforms. Hybrid or on-premises model hosting, including connectivity, security boundaries, hardware constraints, and operational handoff. Model registries, experiment tracking, data or feature pipelines, scheduled retraining, model evaluation, and drift or quality monitoring. Secure enterprise deployment patterns such as private networking, IAM/RBAC, secrets management, auditability, and handling sensitive data. Building shared ML platform capabilities or self-service workflows used by multiple engineering teams. Hands-on development of agent workflows, including tool integration, evaluation, tracing, or guardrails. Who will thrive here You are an engineer who has taken responsibility for what happens after a model is trained: how it is packaged, deployed, secured, scaled, observed, updated, and supported. You are comfortable writing code and infrastructure, investigating production failures, and making clear tradeoffs with partner teams. Pay & Benefits The pay range for this role is $147,050 to $230,850 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience. Benefits: HP offers a comprehensive benefits package for this position, including: Health insurance Dental insurance Vision insurance Long term/short term disability insurance Employee assistance program Flexible spending account Life insurance Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure 11 paid holidays Additional flexible paid vacation and sick leave US benefits overview The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law. Job - Software Schedule - Full time Shift - No shift premium (United States of America) Travel - No Relocation - No Equal Opportunity Employer (EEO) - HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s). Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence. For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: " Know Your Rights: Workplace Discrimination is Illegal "
11/06/2026
Full time
This job is with HP, an inclusive employer and a member of myGwork - the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Senior Machine Learning Platform Engineer - Model Hosting & MLOps Description - Role summary We are hiring a Senior Machine Learning Platform Engineer to build the infrastructure and engineering workflows that take custom models from development into reliable production use. This is a hands-on role for someone who has hosted LLMs on GPU infrastructure, developed the cloud platform around model serving, and built MLOps pipelines that make releases repeatable and observable. You will work with model developers, application engineers, security, and cloud platform teams to turn a model artifact into a secure, scalable inference service. The work spans serving architecture, infrastructure as code, deployment automation, model lifecycle management, and production operations across AWS and Azure, with potential integration into on-premises environments. You will also help shape agent workflows that use hosted models, so serving choices support the needs of multi-step applications. Success means teams can deploy, update, monitor, and troubleshoot models through clear, reusable platform patterns. What you will do Design and build hosting for custom ML and AI models across AWS and Azure, with particular focus on GPU-backed LLM inference and real-time endpoints; support batch inference where appropriate. Package models and their dependencies into reproducible serving workloads; choose and implement suitable managed services, containers, or Kubernetes-based patterns based on throughput, latency, security, reliability, and cost. Provision and configure Kubernetes clusters or other suitable hosting infrastructure, including compute, storage, API access, identity and access controls, secrets, networking integration, observability, and environment configuration. Help design secure connections and deployment patterns between cloud and on-premises environments as hosting needs evolve. Develop infrastructure as code and deployment automation so model-hosting environments can be provisioned, reviewed, promoted, and maintained consistently. Build MLOps workflows for model registration, versioning, validation, release, rollback, and retirement. Connect training or model preparation to deployment through automated pipelines and appropriate quality gates. Partner with application teams to design and prototype agent workflows, including model and tool orchestration, state handling, failure recovery, and evaluation. Translate agent workload patterns into hosting decisions about model selection, context length, concurrency, latency, cost, tool access, and end-to-end tracing. Establish production monitoring for service health, latency, throughput, errors, GPU and other resource use, and model behavior. Share responsibility for diagnosing incidents and improving capacity, reliability, and cost. Create reusable deployment templates, reference architectures, documentation, and onboarding paths that help other teams ship models safely. Partner with model and application teams on practical tradeoffs such as online versus batch inference, managed versus self-hosted serving, scaling, evaluation, data handling, and operational ownership. Required experience Hands-on experience hosting LLM inference on GPU infrastructure in a production environment. You can explain what you personally built, how models reached production, and how you managed throughput, latency, utilization, reliability, and cost. Experience building the surrounding model-serving platform for custom models, such as inference runtimes, deployment patterns, endpoint access, scaling, and operational tooling. Strong software engineering skills, especially Python, with experience building services, automation, and maintainable production code. Experience developing infrastructure for ML workloads across AWS and Azure, with deep hands-on delivery in at least one and practical ability to work in the other. You have used infrastructure as code such as Terraform or an equivalent tool. Experience provisioning, configuring, and maintaining Kubernetes or another production hosting platform for containerized inference workloads. Experience building or operating ML deployment pipelines with versioned artifacts, automated validation, CI/CD, environment promotion, and rollback. Familiarity with LLM agent patterns, including model invocation, tool calls, and multi-step workflows, and how they affect serving capacity, reliability, and access controls. Working knowledge of production concerns for inference services: scaling, latency, availability, logging and metrics, shared incident response, access control, and cost. Ability to work across model development, application, platform, and security teams; turn ambiguous requirements into a working design; and document the resulting operational approach. Helpful experience Advanced GPU inference optimization, including capacity planning, batching, autoscaling, memory use, model loading, and performance tuning. Serving generative or other compute-intensive custom models beyond LLMs; selecting and tuning inference servers and runtime configurations. AWS SageMaker or EKS; Azure Machine Learning or AKS; or equivalent managed and self-hosted model platforms. Hybrid or on-premises model hosting, including connectivity, security boundaries, hardware constraints, and operational handoff. Model registries, experiment tracking, data or feature pipelines, scheduled retraining, model evaluation, and drift or quality monitoring. Secure enterprise deployment patterns such as private networking, IAM/RBAC, secrets management, auditability, and handling sensitive data. Building shared ML platform capabilities or self-service workflows used by multiple engineering teams. Hands-on development of agent workflows, including tool integration, evaluation, tracing, or guardrails. Who will thrive here You are an engineer who has taken responsibility for what happens after a model is trained: how it is packaged, deployed, secured, scaled, observed, updated, and supported. You are comfortable writing code and infrastructure, investigating production failures, and making clear tradeoffs with partner teams. Pay & Benefits The pay range for this role is $147,050 to $230,850 USD annually with additional opportunities for pay in the form of bonus and/or equity (applies to United States of America candidates only). Pay varies by work location, job-related knowledge, skills, and experience. Benefits: HP offers a comprehensive benefits package for this position, including: Health insurance Dental insurance Vision insurance Long term/short term disability insurance Employee assistance program Flexible spending account Life insurance Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure 11 paid holidays Additional flexible paid vacation and sick leave US benefits overview The compensation and benefits information is accurate as of the date of this posting. The Company reserves the right to modify this information at any time, with or without notice, subject to applicable law. Job - Software Schedule - Full time Shift - No shift premium (United States of America) Travel - No Relocation - No Equal Opportunity Employer (EEO) - HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s). Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence. For more information, review HP's EEO Policy or read about your rights as an applicant under the law here: " Know Your Rights: Workplace Discrimination is Illegal "
Job Description Job Description Service Platform Technicians assist in maintaining, deploying, and improving the centralized platforms, tools, and automation that enable Machado Consulting's service delivery. This role is ideal for IT professionals who have gained foundational experience supporting systems and users and are interested in developing deeper skills in automation, scripting, platform management, and operational engineering. While this position is more proactive than reactive, Service Platform Technicians may occasionally assist with troubleshooting platform issues, resolving automation failures, and supporting the ongoing health of centralized systems. Service Platform Technicians help maintain automation, standardized configurations, and shared systems used across client environments and internal teams. They work closely with other departments to reduce manual effort, improve consistency, and support initiatives that enhance operational efficiency. Responsibilities include assisting with automation projects, deploying tools and configurations, documenting processes, maintaining existing platforms, and identifying opportunities for improvement. This role provides exposure to technologies spanning Microsoft 365, Azure, endpoint management, identity systems, security tooling, monitoring platforms, and service automation solutions. While Service Platform Technicians do not routinely respond to support tickets, their work directly impacts the efficiency, quality, and scalability of client-facing services. At Machado Consulting, Information Security is embedded in everything we do. Service Platform Technicians are expected to follow secure-by-default principles, support compliance initiatives, and ensure that the systems and automation they work on meet security and governance requirements. Training and mentorship will be provided to help technicians develop a strong security mindset. Service Platform Technicians will collaborate with internal teams and occasionally assist with security-related initiatives, audits, assessments, documentation efforts, and process improvements involving centralized systems and automation. Career Growth Opportunity The Service Platform Technician role is designed to prepare team members for future advancement into Service Platform Engineering and other specialized technical roles. Successful technicians will gain hands-on experience with automation, scripting, Microsoft 365, Azure, security tooling, and platform management while working alongside senior engineers on real-world projects. What We're Looking For Required Skills Self-motivated with a strong desire to learn and grow professionally Team-oriented and comfortable collaborating with others Strong analytical and problem-solving abilities Curious mindset with an interest in automation, efficiency, and technology Strong written and verbal communication skills Organized with excellent attention to detail Ability to follow documented processes while identifying opportunities for improvement Comfortable learning new technologies and adapting to change Ability to manage multiple tasks and priorities effectively Willingness to accept coaching, feedback, and mentorship Preferred Experience 1-3 years of IT experience in technical support, systems administration, MSP operations, or a related role Candidates with less professional experience may be considered if they have completed a technical program, vocational training, degree program, home lab projects, internships, or can demonstrate equivalent hands-on experience Familiarity with Microsoft 365 environments Basic understanding of Azure and identity management concepts such as Active Directory or Entra ID Exposure to endpoint management tools, RMM platforms, or device administration is a plus Basic scripting experience (PowerShell preferred) or a demonstrated interest in learning automation Experience documenting technical procedures or troubleshooting issues Familiarity with MSP environments is helpful but not required Industry certifications are welcomed but not required What Success Looks Like A successful Service Platform Technician is someone who: Loves solving problems and figuring out how systems work Wants to automate repetitive tasks and improve processes Takes initiative when opportunities for improvement are identified Learns quickly and applies feedback effectively Documents their work thoroughly Demonstrates reliability, ownership, and follow-through Has a genuine interest in developing into a Service Platform Engineer over time Service Platform Technicians may be required to work onsite from time to time. A valid driver's license and reliable transportation are required. Company Description Machado is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that is a financially strong and fast-growing Managed IT Services Provider, MSP, firm headquartered in Worcester, MA with a satellite office in Providence, RI and clients throughout the United States. We're really moving and shaking! Want to learn a little more about us and all of the cool stuff we're doing? Check out who we are and what we're up to below: Company Description Machado is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that is a financially strong and fast-growing Managed IT Services Provider, MSP, firm headquartered in Worcester, MA with a satellite office in Providence, RI and clients throughout the United States. We're really moving and shaking! Want to learn a little more about us and all of the cool stuff we're doing? Check out who we are and what we're up to below:
11/06/2026
Full time
Job Description Job Description Service Platform Technicians assist in maintaining, deploying, and improving the centralized platforms, tools, and automation that enable Machado Consulting's service delivery. This role is ideal for IT professionals who have gained foundational experience supporting systems and users and are interested in developing deeper skills in automation, scripting, platform management, and operational engineering. While this position is more proactive than reactive, Service Platform Technicians may occasionally assist with troubleshooting platform issues, resolving automation failures, and supporting the ongoing health of centralized systems. Service Platform Technicians help maintain automation, standardized configurations, and shared systems used across client environments and internal teams. They work closely with other departments to reduce manual effort, improve consistency, and support initiatives that enhance operational efficiency. Responsibilities include assisting with automation projects, deploying tools and configurations, documenting processes, maintaining existing platforms, and identifying opportunities for improvement. This role provides exposure to technologies spanning Microsoft 365, Azure, endpoint management, identity systems, security tooling, monitoring platforms, and service automation solutions. While Service Platform Technicians do not routinely respond to support tickets, their work directly impacts the efficiency, quality, and scalability of client-facing services. At Machado Consulting, Information Security is embedded in everything we do. Service Platform Technicians are expected to follow secure-by-default principles, support compliance initiatives, and ensure that the systems and automation they work on meet security and governance requirements. Training and mentorship will be provided to help technicians develop a strong security mindset. Service Platform Technicians will collaborate with internal teams and occasionally assist with security-related initiatives, audits, assessments, documentation efforts, and process improvements involving centralized systems and automation. Career Growth Opportunity The Service Platform Technician role is designed to prepare team members for future advancement into Service Platform Engineering and other specialized technical roles. Successful technicians will gain hands-on experience with automation, scripting, Microsoft 365, Azure, security tooling, and platform management while working alongside senior engineers on real-world projects. What We're Looking For Required Skills Self-motivated with a strong desire to learn and grow professionally Team-oriented and comfortable collaborating with others Strong analytical and problem-solving abilities Curious mindset with an interest in automation, efficiency, and technology Strong written and verbal communication skills Organized with excellent attention to detail Ability to follow documented processes while identifying opportunities for improvement Comfortable learning new technologies and adapting to change Ability to manage multiple tasks and priorities effectively Willingness to accept coaching, feedback, and mentorship Preferred Experience 1-3 years of IT experience in technical support, systems administration, MSP operations, or a related role Candidates with less professional experience may be considered if they have completed a technical program, vocational training, degree program, home lab projects, internships, or can demonstrate equivalent hands-on experience Familiarity with Microsoft 365 environments Basic understanding of Azure and identity management concepts such as Active Directory or Entra ID Exposure to endpoint management tools, RMM platforms, or device administration is a plus Basic scripting experience (PowerShell preferred) or a demonstrated interest in learning automation Experience documenting technical procedures or troubleshooting issues Familiarity with MSP environments is helpful but not required Industry certifications are welcomed but not required What Success Looks Like A successful Service Platform Technician is someone who: Loves solving problems and figuring out how systems work Wants to automate repetitive tasks and improve processes Takes initiative when opportunities for improvement are identified Learns quickly and applies feedback effectively Documents their work thoroughly Demonstrates reliability, ownership, and follow-through Has a genuine interest in developing into a Service Platform Engineer over time Service Platform Technicians may be required to work onsite from time to time. A valid driver's license and reliable transportation are required. Company Description Machado is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that is a financially strong and fast-growing Managed IT Services Provider, MSP, firm headquartered in Worcester, MA with a satellite office in Providence, RI and clients throughout the United States. We're really moving and shaking! Want to learn a little more about us and all of the cool stuff we're doing? Check out who we are and what we're up to below: Company Description Machado is a Service-Disabled Veteran-Owned Small Business (SDVOSB) that is a financially strong and fast-growing Managed IT Services Provider, MSP, firm headquartered in Worcester, MA with a satellite office in Providence, RI and clients throughout the United States. We're really moving and shaking! Want to learn a little more about us and all of the cool stuff we're doing? Check out who we are and what we're up to below:
Job Description Job Description Senior Application Packaging/Endpoint Systems Engineer Fairmont, West Virginia 26554 Location: On-Site Katherine Johnson IV&V Facility Security Access: Public Trust eligibility Position Overview Anakim Consulting is seeking an experienced Senior Application Packaging and Endpoint Systems Engineer to support enterprise endpoint infrastructure, application lifecycle management, and workflow automation. In this role, you will lead the packaging, customization, and silent deployment of 100+ critical software applications across physical workstations and Virtual Desktop Infrastructure (VDI). The Engineer in this role will also serve as a key administrator for enterprise endpoint management tools, specifically Quest KACE SMA and HCL BigFix, while building automated IT workflows using Microsoft Power Automate and SharePoint Online. Responsibilities include: Application Packaging and Deployment Package, maintain, and support 100+ commercial off-the-shelf (COTS) and custom applications across enterprise workstations and VDI environments. Build, modify, and optimize Windows Installer (.MSI) packages and transform files (.MST) using Flexera AdminStudio and Repackager tools. Convert vendor .exe and legacy installers into clean, unattended, silent installations. Direct MSI database-level table edits to resolve Internal Consistency Errors (ICEs) and conflicts. Author custom installation actions and wrapper scripts using PowerShell and VBScript for registry, file system, and prerequisite handling. Validate all deployment packages across clean baseline virtual machines (VMs) prior to production rollout. Endpoint Management (Quest KACE and HCL BigFix) Quest KACE SMA (K1000) : Maintain appliance operations, deploy and monitor KACE Agents, configure Smart Labels (LDAP/filter queries), run discovery scans, schedule automated KScripts (with Verify/Remediate logic), build custom SQL reports, and manage Service Desk queues. HCL BigFix Administration: Support core servers, relays, and endpoint agents. Author custom Fixlets, Tasks, and BigFix Action Scripts. Write custom Relevance Language queries for precise targeting and compliance audits. Manage third-party application patch lifecycles to minimize enterprise CVE exposure. Workflow Automation and SharePoint Design, build, and maintain internal business process flows using Microsoft Power Automate, Power Apps, and SharePoint Online. Connect automated workflows with external systems using custom connectors and REST APIs. Administer IT Services SharePoint site assets, document libraries, metadata columns, and granular item-level permissions. Security Compliance and Operations Monitor Security Operations Center (SOC) notices and Mitigation Action Requirements (MARs) to remediate endpoint vulnerabilities within mandated deadlines. Conduct daily patch verification scans and attend bi-weekly BigFix/security coordination syncs. Document standard operating procedures (SOPs), packaging recipes, and user guides.
11/06/2026
Full time
Job Description Job Description Senior Application Packaging/Endpoint Systems Engineer Fairmont, West Virginia 26554 Location: On-Site Katherine Johnson IV&V Facility Security Access: Public Trust eligibility Position Overview Anakim Consulting is seeking an experienced Senior Application Packaging and Endpoint Systems Engineer to support enterprise endpoint infrastructure, application lifecycle management, and workflow automation. In this role, you will lead the packaging, customization, and silent deployment of 100+ critical software applications across physical workstations and Virtual Desktop Infrastructure (VDI). The Engineer in this role will also serve as a key administrator for enterprise endpoint management tools, specifically Quest KACE SMA and HCL BigFix, while building automated IT workflows using Microsoft Power Automate and SharePoint Online. Responsibilities include: Application Packaging and Deployment Package, maintain, and support 100+ commercial off-the-shelf (COTS) and custom applications across enterprise workstations and VDI environments. Build, modify, and optimize Windows Installer (.MSI) packages and transform files (.MST) using Flexera AdminStudio and Repackager tools. Convert vendor .exe and legacy installers into clean, unattended, silent installations. Direct MSI database-level table edits to resolve Internal Consistency Errors (ICEs) and conflicts. Author custom installation actions and wrapper scripts using PowerShell and VBScript for registry, file system, and prerequisite handling. Validate all deployment packages across clean baseline virtual machines (VMs) prior to production rollout. Endpoint Management (Quest KACE and HCL BigFix) Quest KACE SMA (K1000) : Maintain appliance operations, deploy and monitor KACE Agents, configure Smart Labels (LDAP/filter queries), run discovery scans, schedule automated KScripts (with Verify/Remediate logic), build custom SQL reports, and manage Service Desk queues. HCL BigFix Administration: Support core servers, relays, and endpoint agents. Author custom Fixlets, Tasks, and BigFix Action Scripts. Write custom Relevance Language queries for precise targeting and compliance audits. Manage third-party application patch lifecycles to minimize enterprise CVE exposure. Workflow Automation and SharePoint Design, build, and maintain internal business process flows using Microsoft Power Automate, Power Apps, and SharePoint Online. Connect automated workflows with external systems using custom connectors and REST APIs. Administer IT Services SharePoint site assets, document libraries, metadata columns, and granular item-level permissions. Security Compliance and Operations Monitor Security Operations Center (SOC) notices and Mitigation Action Requirements (MARs) to remediate endpoint vulnerabilities within mandated deadlines. Conduct daily patch verification scans and attend bi-weekly BigFix/security coordination syncs. Document standard operating procedures (SOPs), packaging recipes, and user guides.
Job Description Job Description You will be the most senior hands-on application security engineer at Cleo, owning both how security is built into our products from design through release and the security posture of the products we ship, both on-premise and SaaS, as our customers experience them. This is a Staff-level individual contributor role with real program ownership: you set the standards, build the guardrails, and work directly with engineers in the code. You report to the CISO and partner daily with Engineering, and our Cloud Security team. You are not a one-person department: security engineers and consulting partners execute under your direction. Your job is to set direction, make the hard technical calls, and build leverage through automation and partners rather than carry every task yourself. Essential Duties & Responsibilities Secure development lifecycle and guardrails Own and mature Cleo's SSDLC: security requirements, threat modeling, and design reviews for high-risk product changes, APIs, and integrations. Run and tune SAST, SCA, secrets detection, container, and IaC scanning. Build reusable secure patterns, reference implementations, and policy-as-code controls that make the secure path the default path. Own developer security enablement: Security Champions meeting, deliver the engineering security training campaigns, grow a named champion in every squad, and give developers practical remediation guidance, office hours, and self-service security capabilities. Product vulnerability management Run risk-based triage, remediation, and verification for application and product vulnerabilities, including remediation SLAs, escalation, and exceptions. Reproduce externally reported vulnerabilities against running product instances and validate patches before release. Own the penetration testing program: scope and coordinate third-party engagements, perform targeted testing yourself, and validate findings through retesting. Run our Vulnerability Disclosure Program, including researcher communications and coordinated disclosure. Coordinate the CVE lifecycle for Cleo products and support product-security incident response. Own the application and product-security controls in Cleo's NIST CSF 2.0 program: track maturity, close gaps, and produce the evidence our audits rely on. Product security Own the security posture of the products Cleo ships, across SaaS and customer-hosted deployment models: secure defaults, authentication and session controls, RBAC and tenant isolation, admin data access, security-relevant configuration, and hardening guidance for customers. Own the Product Security Roadmap: partner with Product Management, the CTO, and Architecture to get security features prioritized and shipped, including SSO/SAML upgrades, the in-app RBAC redesign, endpoint-level access control, and customer-requested controls, and represent security in RTE Sync and Boundary Review. Be the technical owner for customer-facing product security: triage customer vulnerability-scan findings and penetration-test reports against Cleo products, answer security RFIs and enhancement requests, and author customer-facing advisories, security release notes, and hardening documentation. AI Fluency Competencies Own threat modeling and security review for LLM-enabled product features, AI agents, and AI-assisted development workflows. Build controls and secure patterns for prompt injection, sensitive data exposure, insecure output handling, excessive agency, insecure tool integrations, and AI supply-chain risk. Apply and operationalize the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework across product and engineering. Prerequisites 6+ years in application security, product security, or secure software engineering, including experience building or maturing an AppSec program across multiple engineering teams. Strong object-oriented developer: Strong proficiency in an object-oriented programming language is required, with Java preferred given Cleo's core products are Java-based. You should be able to read, debug, and write production-quality code and be comfortable working across languages such as TypeScript, Python, or Go. Deep knowledge of application attack surfaces: authentication, authorization, API security, business-logic flaws, and modern service architectures. Hands-on experience integrating and tuning SAST, SCA, and secrets scanning in GitHub and CI/CD pipelines. Hands-on exploit reproduction and patch validation: you can take a researcher's report of a pre-authentication vulnerability, reproduce it against a running Java web application, confirm the fix, and write up what the researcher and the customer each need to hear. Coordinated disclosure experience with external security researchers and customers, including holding an embargo timeline and driving a CVE to publication. Product security experience on shipped software with an installed base: secure defaults and hardening guidance, customer-facing advisories and security release notes, and turning a customer's scan report or RFI into a fix-or-explain response. Experience running threat modeling, design reviews, and manual security testing, and working directly with developers through remediation. Clear communicator who can turn technical risk into engineering guidance for both developers and executives, and who can hold a release-gating decision with Engineering leadership when the risk warrants it. Nice to Have Securing LLM applications, AI agents, or AI-assisted development tools. SBOM (CycloneDX/SPDX), VEX, artifact signing, and SLSA. AWS, Kubernetes/EKS, Terraform, Jenkins. Snyk, GitHub Advanced Security, Semgrep, Burp Suite. NIST CSF 2.0, OWASP SAMM/ASVS, NIST SSDF; supporting SOC 2 or ISO 27001 audits. CSSLP, OSWE, GWAPT, AWS Security, or comparable certifications.
11/06/2026
Full time
Job Description Job Description You will be the most senior hands-on application security engineer at Cleo, owning both how security is built into our products from design through release and the security posture of the products we ship, both on-premise and SaaS, as our customers experience them. This is a Staff-level individual contributor role with real program ownership: you set the standards, build the guardrails, and work directly with engineers in the code. You report to the CISO and partner daily with Engineering, and our Cloud Security team. You are not a one-person department: security engineers and consulting partners execute under your direction. Your job is to set direction, make the hard technical calls, and build leverage through automation and partners rather than carry every task yourself. Essential Duties & Responsibilities Secure development lifecycle and guardrails Own and mature Cleo's SSDLC: security requirements, threat modeling, and design reviews for high-risk product changes, APIs, and integrations. Run and tune SAST, SCA, secrets detection, container, and IaC scanning. Build reusable secure patterns, reference implementations, and policy-as-code controls that make the secure path the default path. Own developer security enablement: Security Champions meeting, deliver the engineering security training campaigns, grow a named champion in every squad, and give developers practical remediation guidance, office hours, and self-service security capabilities. Product vulnerability management Run risk-based triage, remediation, and verification for application and product vulnerabilities, including remediation SLAs, escalation, and exceptions. Reproduce externally reported vulnerabilities against running product instances and validate patches before release. Own the penetration testing program: scope and coordinate third-party engagements, perform targeted testing yourself, and validate findings through retesting. Run our Vulnerability Disclosure Program, including researcher communications and coordinated disclosure. Coordinate the CVE lifecycle for Cleo products and support product-security incident response. Own the application and product-security controls in Cleo's NIST CSF 2.0 program: track maturity, close gaps, and produce the evidence our audits rely on. Product security Own the security posture of the products Cleo ships, across SaaS and customer-hosted deployment models: secure defaults, authentication and session controls, RBAC and tenant isolation, admin data access, security-relevant configuration, and hardening guidance for customers. Own the Product Security Roadmap: partner with Product Management, the CTO, and Architecture to get security features prioritized and shipped, including SSO/SAML upgrades, the in-app RBAC redesign, endpoint-level access control, and customer-requested controls, and represent security in RTE Sync and Boundary Review. Be the technical owner for customer-facing product security: triage customer vulnerability-scan findings and penetration-test reports against Cleo products, answer security RFIs and enhancement requests, and author customer-facing advisories, security release notes, and hardening documentation. AI Fluency Competencies Own threat modeling and security review for LLM-enabled product features, AI agents, and AI-assisted development workflows. Build controls and secure patterns for prompt injection, sensitive data exposure, insecure output handling, excessive agency, insecure tool integrations, and AI supply-chain risk. Apply and operationalize the OWASP Top 10 for LLM Applications and the NIST AI Risk Management Framework across product and engineering. Prerequisites 6+ years in application security, product security, or secure software engineering, including experience building or maturing an AppSec program across multiple engineering teams. Strong object-oriented developer: Strong proficiency in an object-oriented programming language is required, with Java preferred given Cleo's core products are Java-based. You should be able to read, debug, and write production-quality code and be comfortable working across languages such as TypeScript, Python, or Go. Deep knowledge of application attack surfaces: authentication, authorization, API security, business-logic flaws, and modern service architectures. Hands-on experience integrating and tuning SAST, SCA, and secrets scanning in GitHub and CI/CD pipelines. Hands-on exploit reproduction and patch validation: you can take a researcher's report of a pre-authentication vulnerability, reproduce it against a running Java web application, confirm the fix, and write up what the researcher and the customer each need to hear. Coordinated disclosure experience with external security researchers and customers, including holding an embargo timeline and driving a CVE to publication. Product security experience on shipped software with an installed base: secure defaults and hardening guidance, customer-facing advisories and security release notes, and turning a customer's scan report or RFI into a fix-or-explain response. Experience running threat modeling, design reviews, and manual security testing, and working directly with developers through remediation. Clear communicator who can turn technical risk into engineering guidance for both developers and executives, and who can hold a release-gating decision with Engineering leadership when the risk warrants it. Nice to Have Securing LLM applications, AI agents, or AI-assisted development tools. SBOM (CycloneDX/SPDX), VEX, artifact signing, and SLSA. AWS, Kubernetes/EKS, Terraform, Jenkins. Snyk, GitHub Advanced Security, Semgrep, Burp Suite. NIST CSF 2.0, OWASP SAMM/ASVS, NIST SSDF; supporting SOC 2 or ISO 27001 audits. CSSLP, OSWE, GWAPT, AWS Security, or comparable certifications.
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K
11/06/2026
Full time
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K
Job Description Job Description Job Title: ServiceNow HAM Pro Consultant/Lead Location: Remote E mployment Type: Full-Time Salary: USD 100k-110k/annum Role Summary We are seeking an experienced ServiceNow HAM Pro Senior Consultant / Technical Lead to lead the design, implementation, integration, and continuous improvement of enterprise Hardware Asset Management capabilities. This role combines strong ServiceNow HAM Pro and IT Asset Management (ITAM) expertise with platform leadership, stakeholder management, solution design, and delivery accountability. The successful candidate will partner with IT Asset Management, CMDB, IT Operations, Procurement, Finance, Security, HR, and business teams to establish scalable, governed, automated, and audit-ready hardware asset lifecycle processes. Key Responsibilities Lead end-to-end ServiceNow HAM Pro initiatives, including discovery, requirements analysis, solution design, configuration, testing, deployment, and post-production support. Define and Eligible to workimize hardware asset lifecycle processes covering request, procurement, receiving, inventory, deployment, assignment, transfer, refresh, retirement, and disposal. Establish HAM governance, ownership models, controls, data standards, audit readiness, and asset performance measures. Design and support integrations between HAM Pro, CMDB, Discovery, procurement, ERP, HR, endpoint management, warehouse, and vendor systems. Improve asset and configuration item data quality through normalization, reconciliation, duplicate remediation, lifecycle compliance, and data governance. Lead or support data migration, validation, reporting, dashboards, documentation, testing, and production readiness activities. Facilitate customer and stakeholder workshops and translate business requirements into scalable ServiceNow solutions. Present solution recommendations, manage delivery risks and milestones, and coordinate cross-functional stakeholders. Provide technical oversight and review solution designs, configurations, integrations, and implementation approaches. Promote out-of-the-box-first ServiceNow practices and identify appropriate opportunities for configuration, customization, and automation. Provide technical guidance and mentorship to delivery team members. Support continuous improvement of HAM processes, platform capabilities, automation, reporting, and governance. Required Qualifications Demonstrated experience implementing and supporting ServiceNow Hardware Asset Management Professional (HAM Pro) in complex enterprise environments. Strong hands-on knowledge of ServiceNow HAM Pro and IT Asset Management processes. Strong understanding of CMDB, Discovery, CSDM, ITSM, asset-to-CI relationships, stockrooms, model management, reconciliation, and asset lifecycle management. Experience with ServiceNow configuration and development, including Flow Designer, Integration Hub, Import Sets, Transform Maps, REST/SOAP APIs, JavaScript, Glide APIs, ACLs, and Business Rules. Experience designing or supporting integrations with endpoint and enterprise platforms such as Microsoft Intune, Microsoft Configuration Manager/SCCM, Entra ID, ERP, procurement, and HR/HRSD systems. Experience with ITAM data migration, reconciliation, normalization, validation, reporting, and data quality initiatives. Demonstrated ability to translate business requirements into scalable ServiceNow HAM Pro solutions. Strong consulting, leadership, communication, documentation, problem-solving, and stakeholder management skills. Ability to work effectively with technical teams, business stakeholders, vendors, and senior client representatives. Ability to manage competing priorities, delivery milestones, risks, and dependencies in a complex enterprise environment. Preferred Qualifications Experience leading enterprise ServiceNow HAM Pro implementations or transformation initiatives. Experience with ServiceNow ITAM and broader asset lifecycle management programs. Experience with enterprise CMDB and CSDM initiatives. Experience with ServiceNow Discovery and endpoint management integrations. Experience with ITIL-based service management processes. Bachelor's degree in Computer Science, Information Technology, Engineering, Business, or a related field, or equivalent relevant education and experience. Certifications ServiceNow Certified System Administrator (CSA)
11/06/2026
Full time
Job Description Job Description Job Title: ServiceNow HAM Pro Consultant/Lead Location: Remote E mployment Type: Full-Time Salary: USD 100k-110k/annum Role Summary We are seeking an experienced ServiceNow HAM Pro Senior Consultant / Technical Lead to lead the design, implementation, integration, and continuous improvement of enterprise Hardware Asset Management capabilities. This role combines strong ServiceNow HAM Pro and IT Asset Management (ITAM) expertise with platform leadership, stakeholder management, solution design, and delivery accountability. The successful candidate will partner with IT Asset Management, CMDB, IT Operations, Procurement, Finance, Security, HR, and business teams to establish scalable, governed, automated, and audit-ready hardware asset lifecycle processes. Key Responsibilities Lead end-to-end ServiceNow HAM Pro initiatives, including discovery, requirements analysis, solution design, configuration, testing, deployment, and post-production support. Define and Eligible to workimize hardware asset lifecycle processes covering request, procurement, receiving, inventory, deployment, assignment, transfer, refresh, retirement, and disposal. Establish HAM governance, ownership models, controls, data standards, audit readiness, and asset performance measures. Design and support integrations between HAM Pro, CMDB, Discovery, procurement, ERP, HR, endpoint management, warehouse, and vendor systems. Improve asset and configuration item data quality through normalization, reconciliation, duplicate remediation, lifecycle compliance, and data governance. Lead or support data migration, validation, reporting, dashboards, documentation, testing, and production readiness activities. Facilitate customer and stakeholder workshops and translate business requirements into scalable ServiceNow solutions. Present solution recommendations, manage delivery risks and milestones, and coordinate cross-functional stakeholders. Provide technical oversight and review solution designs, configurations, integrations, and implementation approaches. Promote out-of-the-box-first ServiceNow practices and identify appropriate opportunities for configuration, customization, and automation. Provide technical guidance and mentorship to delivery team members. Support continuous improvement of HAM processes, platform capabilities, automation, reporting, and governance. Required Qualifications Demonstrated experience implementing and supporting ServiceNow Hardware Asset Management Professional (HAM Pro) in complex enterprise environments. Strong hands-on knowledge of ServiceNow HAM Pro and IT Asset Management processes. Strong understanding of CMDB, Discovery, CSDM, ITSM, asset-to-CI relationships, stockrooms, model management, reconciliation, and asset lifecycle management. Experience with ServiceNow configuration and development, including Flow Designer, Integration Hub, Import Sets, Transform Maps, REST/SOAP APIs, JavaScript, Glide APIs, ACLs, and Business Rules. Experience designing or supporting integrations with endpoint and enterprise platforms such as Microsoft Intune, Microsoft Configuration Manager/SCCM, Entra ID, ERP, procurement, and HR/HRSD systems. Experience with ITAM data migration, reconciliation, normalization, validation, reporting, and data quality initiatives. Demonstrated ability to translate business requirements into scalable ServiceNow HAM Pro solutions. Strong consulting, leadership, communication, documentation, problem-solving, and stakeholder management skills. Ability to work effectively with technical teams, business stakeholders, vendors, and senior client representatives. Ability to manage competing priorities, delivery milestones, risks, and dependencies in a complex enterprise environment. Preferred Qualifications Experience leading enterprise ServiceNow HAM Pro implementations or transformation initiatives. Experience with ServiceNow ITAM and broader asset lifecycle management programs. Experience with enterprise CMDB and CSDM initiatives. Experience with ServiceNow Discovery and endpoint management integrations. Experience with ITIL-based service management processes. Bachelor's degree in Computer Science, Information Technology, Engineering, Business, or a related field, or equivalent relevant education and experience. Certifications ServiceNow Certified System Administrator (CSA)
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K
11/06/2026
Full time
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K
Job Description Job Description Overview The Senior Cyber Security Engineer will lead and execute security initiatives across the application lifecycle, integrating security into DevOps pipelines, managing vulnerability assessments, and coordinating penetration testing efforts. This role also extends into advanced software assurance, including third-party software analysis, binary-level inspection, and application trust validation, ensuring that both internally developed and externally sourced applications meet the bank's security standards prior to execution within the enterprise environment. Responsibilities Application Security & DevSecOps Integration Embed security controls into CI/CD pipelines using GitHub workflows and automation tools. Collaborate with development teams to implement secure coding practices and threat modeling during design and development phases. Manage GitHub Advanced Security configurations, including secret scanning, push protection, and impact analysis. Security Testing & Vulnerability Management Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using approved tools (e.g., CodeQL, Dependabot OWASP ZAP). Perform manual and automated code reviews to identify vulnerabilities and ensure remediation through code fixes or configuration changes. Maintain accurate mapping of applications to GitHub repositories to support vulnerability tracking and reporting. Advanced Software Analysis & Trust Establishment Perform security analysis of third-party software, including both source code review and compiled binary analysis where source is not available. Conduct binary decomposition and reverse engineering techniques, as appropriate, to evaluate software behavior and identify embedded risks. Support the establishment and execution of a software trust and reputation framework, enabling secure decision-making for application onboarding and whitelisting within the enterprise environment. Analyze open-source and GitHub-hosted code, including dependencies and contribution risk. Partner with AppSec leadership to support application security activities and formalize secure software approval processes. API & Web Application Security Conduct API security assessments and integrate monitoring tools to protect application endpoints. Support WAF policy management and application-layer threat monitoring. Threat Intelligence Integration Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software. Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications. Penetration Testing & Third-Party Risk Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software. Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications. Qualifications Proven experience in application security, DevSecOps, or software security analysis. Strong hands-on expertise in: SAST/DAST tools and secure SDLC practices GitHub and open-source ecosystems GitHub Advanced Security Experience with third-party software risk analysis, software composition analysis (SCA), or reverse engineering / binary analysis Familiarity with software supply chain security and trust validation frameworks Experience integrating threat intelligence into security decision-making Strong understanding of secure SDLC, threat modeling (e.g., STRIDE), and vulnerability management. Experience coordinating penetration tests and working with third-party vendors.
11/06/2026
Full time
Job Description Job Description Overview The Senior Cyber Security Engineer will lead and execute security initiatives across the application lifecycle, integrating security into DevOps pipelines, managing vulnerability assessments, and coordinating penetration testing efforts. This role also extends into advanced software assurance, including third-party software analysis, binary-level inspection, and application trust validation, ensuring that both internally developed and externally sourced applications meet the bank's security standards prior to execution within the enterprise environment. Responsibilities Application Security & DevSecOps Integration Embed security controls into CI/CD pipelines using GitHub workflows and automation tools. Collaborate with development teams to implement secure coding practices and threat modeling during design and development phases. Manage GitHub Advanced Security configurations, including secret scanning, push protection, and impact analysis. Security Testing & Vulnerability Management Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using approved tools (e.g., CodeQL, Dependabot OWASP ZAP). Perform manual and automated code reviews to identify vulnerabilities and ensure remediation through code fixes or configuration changes. Maintain accurate mapping of applications to GitHub repositories to support vulnerability tracking and reporting. Advanced Software Analysis & Trust Establishment Perform security analysis of third-party software, including both source code review and compiled binary analysis where source is not available. Conduct binary decomposition and reverse engineering techniques, as appropriate, to evaluate software behavior and identify embedded risks. Support the establishment and execution of a software trust and reputation framework, enabling secure decision-making for application onboarding and whitelisting within the enterprise environment. Analyze open-source and GitHub-hosted code, including dependencies and contribution risk. Partner with AppSec leadership to support application security activities and formalize secure software approval processes. API & Web Application Security Conduct API security assessments and integrate monitoring tools to protect application endpoints. Support WAF policy management and application-layer threat monitoring. Threat Intelligence Integration Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software. Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications. Penetration Testing & Third-Party Risk Integrate threat intelligence insights into software risk assessments, including monitoring for newly disclosed vulnerabilities or exposures in previously approved software. Reassess software trust posture when threat conditions change, ensuring continuous validation of approved applications. Qualifications Proven experience in application security, DevSecOps, or software security analysis. Strong hands-on expertise in: SAST/DAST tools and secure SDLC practices GitHub and open-source ecosystems GitHub Advanced Security Experience with third-party software risk analysis, software composition analysis (SCA), or reverse engineering / binary analysis Familiarity with software supply chain security and trust validation frameworks Experience integrating threat intelligence into security decision-making Strong understanding of secure SDLC, threat modeling (e.g., STRIDE), and vulnerability management. Experience coordinating penetration tests and working with third-party vendors.
Job Description Job Description Job Title: Senior Patching Engineer - SCCM, Intune & Endpoint Management Duration: 6-Month Contract Location: On-site (Authorized U.S. States - see below) Compensation: $ 46 USD / hour Position Summary Important Healthcare organization is seeking an experienced and highly skilled Senior Patching Engineer to lead and support enterprise-wide patching, vulnerability remediation, and endpoint management initiatives across a large healthcare environment. This role is responsible for the administration, maintenance, and continuous improvement of Microsoft Configuration Manager (SCCM/MECM), Microsoft Intune, Windows and Linux Server patching, and endpoint management solutions supporting thousands of servers, workstations. The ideal candidate will possess deep expertise in Microsoft Endpoint Management technologies, vulnerability remediation, operating system patching, compliance reporting, and healthcare IT operational requirements. This individual will work closely with Infrastructure, Security, and Compliance teams to ensure systems remain secure, compliant, and highly available while minimizing business disruption. Key Responsibilities Patch Management & Vulnerability Remediation Manage and maintain enterprise patching processes for Windows and Linux Servers, Windows workstations, and other supported platforms. Plan, test, schedule, deploy, and validate security updates, cumulative updates, hotfixes, and feature upgrades. Lead monthly patch cycles and emergency remediation activities for critical vulnerabilities. Partner with Cybersecurity teams to identify, prioritize, and mitigate vulnerabilities based on risk and compliance requirements. Develop patch deployment strategies that minimize downtime and maintain organizational service-level objectives. Monitor patch compliance and drive remediation efforts to achieve established compliance targets. Work Requirements Candidates must currently reside and be authorized to work in one of the following states: Alabama, Arkansas, Florida, Georgia, Illinois, Indiana, Iowa, Kentucky, Louisiana, Mississippi, Missouri, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, Texas, Wisconsin, St. Louis, Missouri or Kansas City, Missouri. SCCM (Microsoft Endpoint Configuration Manager) Administer SCCM infrastructure including Software Update Points (SUP), Distribution Points, Boundary Groups, Collections, and Client Management. Create, maintain, and optimize patch deployment packages and automated deployment rules. Troubleshoot SCCM client health, software distribution, application deployments, and patching issues. Develop compliance reporting and dashboards for executive leadership, IT management, and auditors. Support operating system deployment (OSD) and endpoint lifecycle management initiatives. Microsoft Intune & Endpoint Management Administer Microsoft Intune policies, update rings, Autopilot, endpoint compliance, and device management configurations. Manage co-managed environments integrating SCCM and Intune. Support endpoint configuration, enrollment, compliance monitoring, and policy enforcement. Collaborate with Security teams to implement Endpoint Security and Conditional Access strategies. Server & Infrastructure Support Support patching and maintenance for Windows and Linux Server environments across on-premises and cloud platforms. Coordinate maintenance windows with infrastructure, application, and clinical teams. Validate application functionality following patch deployments. Perform root cause analysis for deployment failures and service-impacting issues. Ensure high availability and operational stability of endpoint management platforms. Compliance, Audit & Healthcare Security Ensure systems comply with healthcare regulatory requirements including HIPAA, HITECH, and organizational security standards. Produce audit-ready reports demonstrating patch compliance and vulnerability remediation. Support internal and external audits related to system security and patch governance. Maintain documentation, standard operating procedures, and technical runbooks. Automation & Continuous Improvement Develop PowerShell scripts and automation solutions for patching, reporting, and endpoint management activities. Identify opportunities to improve deployment efficiency, compliance, and operational effectiveness. Participate in architecture reviews and technology modernization initiatives. Recommend and implement best practices for endpoint security and lifecycle management. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Engineering, or related discipline, or equivalent work experience. 3+ years of experience supporting enterprise endpoint management environments. 3+ years of hands-on experience administering SCCM/MECM. 3+ years of experience administering Microsoft Intune. Experience managing patching operations for large-scale environments consisting of servers and endpoints. Strong knowledge of: Microsoft SCCM/MECM Microsoft Intune Windows Update for Business (WUfB) Windows Server platforms Active Directory Group Policy PowerShell scripting Microsoft Entra ID (Azure AD) Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management. Strong troubleshooting and root-cause analysis skills. Excellent communication and stakeholder management abilities. Preferred Qualifications Familiarity with Microsoft Defender for Endpoint. Experience supporting hybrid cloud environments including Azure. Experience with endpoint compliance reporting and audit preparation. Relevant certifications such as: Microsoft Certified: Endpoint Administrator Associate Microsoft Certified: Azure Administrator Associate Microsoft Certified: Windows Server Hybrid Administrator Associate ITIL Foundation CISSP (preferred)
11/05/2026
Full time
Job Description Job Description Job Title: Senior Patching Engineer - SCCM, Intune & Endpoint Management Duration: 6-Month Contract Location: On-site (Authorized U.S. States - see below) Compensation: $ 46 USD / hour Position Summary Important Healthcare organization is seeking an experienced and highly skilled Senior Patching Engineer to lead and support enterprise-wide patching, vulnerability remediation, and endpoint management initiatives across a large healthcare environment. This role is responsible for the administration, maintenance, and continuous improvement of Microsoft Configuration Manager (SCCM/MECM), Microsoft Intune, Windows and Linux Server patching, and endpoint management solutions supporting thousands of servers, workstations. The ideal candidate will possess deep expertise in Microsoft Endpoint Management technologies, vulnerability remediation, operating system patching, compliance reporting, and healthcare IT operational requirements. This individual will work closely with Infrastructure, Security, and Compliance teams to ensure systems remain secure, compliant, and highly available while minimizing business disruption. Key Responsibilities Patch Management & Vulnerability Remediation Manage and maintain enterprise patching processes for Windows and Linux Servers, Windows workstations, and other supported platforms. Plan, test, schedule, deploy, and validate security updates, cumulative updates, hotfixes, and feature upgrades. Lead monthly patch cycles and emergency remediation activities for critical vulnerabilities. Partner with Cybersecurity teams to identify, prioritize, and mitigate vulnerabilities based on risk and compliance requirements. Develop patch deployment strategies that minimize downtime and maintain organizational service-level objectives. Monitor patch compliance and drive remediation efforts to achieve established compliance targets. Work Requirements Candidates must currently reside and be authorized to work in one of the following states: Alabama, Arkansas, Florida, Georgia, Illinois, Indiana, Iowa, Kentucky, Louisiana, Mississippi, Missouri, North Carolina, Ohio, Oklahoma, South Carolina, Tennessee, Texas, Wisconsin, St. Louis, Missouri or Kansas City, Missouri. SCCM (Microsoft Endpoint Configuration Manager) Administer SCCM infrastructure including Software Update Points (SUP), Distribution Points, Boundary Groups, Collections, and Client Management. Create, maintain, and optimize patch deployment packages and automated deployment rules. Troubleshoot SCCM client health, software distribution, application deployments, and patching issues. Develop compliance reporting and dashboards for executive leadership, IT management, and auditors. Support operating system deployment (OSD) and endpoint lifecycle management initiatives. Microsoft Intune & Endpoint Management Administer Microsoft Intune policies, update rings, Autopilot, endpoint compliance, and device management configurations. Manage co-managed environments integrating SCCM and Intune. Support endpoint configuration, enrollment, compliance monitoring, and policy enforcement. Collaborate with Security teams to implement Endpoint Security and Conditional Access strategies. Server & Infrastructure Support Support patching and maintenance for Windows and Linux Server environments across on-premises and cloud platforms. Coordinate maintenance windows with infrastructure, application, and clinical teams. Validate application functionality following patch deployments. Perform root cause analysis for deployment failures and service-impacting issues. Ensure high availability and operational stability of endpoint management platforms. Compliance, Audit & Healthcare Security Ensure systems comply with healthcare regulatory requirements including HIPAA, HITECH, and organizational security standards. Produce audit-ready reports demonstrating patch compliance and vulnerability remediation. Support internal and external audits related to system security and patch governance. Maintain documentation, standard operating procedures, and technical runbooks. Automation & Continuous Improvement Develop PowerShell scripts and automation solutions for patching, reporting, and endpoint management activities. Identify opportunities to improve deployment efficiency, compliance, and operational effectiveness. Participate in architecture reviews and technology modernization initiatives. Recommend and implement best practices for endpoint security and lifecycle management. Required Qualifications Bachelor's degree in Information Technology, Computer Science, Engineering, or related discipline, or equivalent work experience. 3+ years of experience supporting enterprise endpoint management environments. 3+ years of hands-on experience administering SCCM/MECM. 3+ years of experience administering Microsoft Intune. Experience managing patching operations for large-scale environments consisting of servers and endpoints. Strong knowledge of: Microsoft SCCM/MECM Microsoft Intune Windows Update for Business (WUfB) Windows Server platforms Active Directory Group Policy PowerShell scripting Microsoft Entra ID (Azure AD) Experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or Microsoft Defender Vulnerability Management. Strong troubleshooting and root-cause analysis skills. Excellent communication and stakeholder management abilities. Preferred Qualifications Familiarity with Microsoft Defender for Endpoint. Experience supporting hybrid cloud environments including Azure. Experience with endpoint compliance reporting and audit preparation. Relevant certifications such as: Microsoft Certified: Endpoint Administrator Associate Microsoft Certified: Azure Administrator Associate Microsoft Certified: Windows Server Hybrid Administrator Associate ITIL Foundation CISSP (preferred)
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K
11/05/2026
Full time
Job Description Job Description Built on service. Powered by people. Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first. What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We've built something special, but we're far from finished. The people who join Impact now will help define what comes next. Job Overview The Modern Workplace & Mobility Implementation Engineer delivers Microsoft 365 and enterprise mobility solutions for client and internal environments. Working from defined project scopes, tickets, and technical standards, this role deploys, configures, secures, documents, and validates modern workplace and unified endpoint management platforms before transitioning completed environments to ongoing support teams. The engineer serves as a hands-on technical point of contact during implementation, makes configuration-level decisions within established standards, and partners with project, mobility, cybersecurity, and service teams to deliver stable, secure, and support-ready solutions. Responsibilities Review project documentation, tickets, requirements, technical prerequisites, and licensing to confirm scope and implementation readiness. Deploy, configure, and maintain Microsoft 365 workloads, including Exchange Online, SharePoint, OneDrive, Microsoft Teams, Teams Phone, and PSTN integrations, using approved standards and governance guidelines. Implement and maintain enterprise mobility and unified endpoint management solutions such as Microsoft Intune, Jamf Pro, and VMware Workspace ONE. Support the endpoint lifecycle across mobile devices, desktops, laptops, and IoT endpoints, including provisioning, enrollment, configuration, maintenance, patching, and decommissioning. Configure device profiles, compliance policies, app protection settings, and secure-access controls across iOS, Android, Windows, Chrome OS, and macOS environments. Apply Zero Trust standards, including encryption, multifactor authentication, conditional access, and Mobile Threat Defense controls, in partnership with cybersecurity teams. Troubleshoot Microsoft 365 and mobility platform issues, perform root cause analysis, and escalate unresolved or systemic issues to senior engineering resources. Maintain clear technical communication with clients and internal stakeholders throughout implementation and serve as the technical point of contact for deployment activities. Create and maintain complete technical documentation in IT Glue, HaloPSA, and SharePoint to support compliance and an effective operational handoff. Validate that delivered solutions meet project scope, stability, documentation, and handoff-readiness requirements before transitioning them to the Service Desk, Technology Operations Center, or other support teams. Qualifications & Experience Bachelor's degree in Computer Science, Information Technology, Business Technology, a related field, or equivalent practical experience. 3+ of experience working with Microsoft 365 and mobile device management platforms; experience in an MSP or MSSP environment is preferred. Hands-on experience implementing Microsoft 365 workloads and UEM or EMM solutions, including Microsoft Intune, Jamf Pro, VMware Workspace ONE, or comparable platforms. Working knowledge of Microsoft Teams, Teams Phone, SharePoint, Exchange Online, OneDrive, Power Platform, Windows Autopilot, and device enrollment and lifecycle management. Understanding of Zero Trust principles, multifactor authentication, conditional access, Mobile Threat Defense, app protection policies, and endpoint security controls. Experience using PowerShell, REST APIs, or native MDM automation capabilities to support efficient, repeatable deployments. Familiarity with compliance and governance requirements such as GDPR and HIPAA, including audit support and policy enforcement. Proven ability to deliver technical projects in structured, process-driven environments while managing priorities, documenting work, and communicating effectively with technical and nontechnical stakeholders. Microsoft Endpoint Administrator Associate, Microsoft 365 Certified: Administrator Expert, CompTIA Mobility+, or related certifications are preferred but not required. What Drives Impact Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them: Innovation: We embrace change because innovation lives outside the comfort zone. Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact. Honesty: We are fiercely transparent and consistently honest. Fun: We fuel work with fun, knowing life's too short for boring. Low Ego: We champion ideas over titles, because brilliance knows no rank. One Team: We win as a team, we lose as a team, we are one team. Compensation Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs. Impact may offer applicable incentive compensation plans depending on role and/or department. Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process. Benefits We Take Pride In 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave Development and growth opportunities with on-going training & continued education reimbursement 401(K) & retirement plans with complimentary financial advisory services Comprehensive health, disability, life, dental, and vision plans For full benefit information, visit Work Authorization & Immigration Sponsorship Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements. Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a "U.S. Person," as defined by law, or otherwise be eligible to obtain any required government authorizations. Compensation Range: $80K - $100K