Senior System Engineer

Classification: Contract Contract Length: 12-months

Position Summary

We are seeking a highly skilled Systems Engineer with deep expertise in Active Directory (on-premises and cloud) to design, implement, secure, and maintain enterprise identity and infrastructure platforms. This role will also support Windows Server engineering and VMware virtualization, ensuring high availability, security, and performance across hybrid environments.

The ideal candidate has strong troubleshooting skills, a security-first mindset, and experience operating in complex, multi-domain or hybrid cloud environments.

This position will interact daily with Project Management Teams, Product Development, Business Partners, Vendors, and CereCore team members, as well as the end users on delivering system engineering solutions to meet client’s business requirements. Strong customer service, written and oral communications skills for working with external clients will be required. Project delivery and problem management skills are required to effectively meet CereCore business objectives and exceed client expectations.

Responsibilities

Minimum of 5 years of experience in a relevant role

Design, deploy, and maintain on-premises Active Directory environments (multi-domain/forest, trusts, GPOs, DNS, DHCP).

Manage hybrid identity solutions including Azure AD / Entra ID, Azure AD Connect, cloud sync, and federation (AD FS where applicable).

Implement and maintain identity security controls such as tiered administration, least privilege, privileged access management, and conditional access.

Perform AD health monitoring, replication troubleshooting, metadata cleanup, and disaster recovery planning.

Manage authentication and authorization services including Kerberos, NTLM, LDAP, and certificate-based authentication.

Perform daily and weekly backups of Active directory both On-Prem and in the Cloud for Disaster Recovery.

Manage vulnerability scans and remediations of the Active Directory environments.

Engineer and support Windows Server environments (2016/2019/2022).

Manage patching, hardening, baselines, and compliance using industry best practices and security frameworks.

Develop and maintain Group Policy Objects (GPOs) for servers and workstations.

Automate administrative tasks using PowerShell.

Support Windows failover clustering, file services, and core infrastructure services

Respond to incidents affecting identity, authentication, and core infrastructure services.

Participate in security audits, vulnerability remediation, and post-incident reviews.

Create and maintain technical documentation, diagrams, and standard operating procedures.

Work closely with security, networking, and cloud teams to support enterprise initiatives.

Understanding of Project Management and problem management skill sets

Meet IT&S change management and project management requirements

ITIL Knowledge

Moderate travel (up to 50%) for analysis and upgrades

This is a Work From Home position, candidate must provide his/her own high-speed, reliable Internet connectivity

Requirements

Advanced knowledge of Windows Server administration and engineering.

Proven experience supporting VMware vSphere environments.

Strong PowerShell scripting and automation skills.

Solid understanding of identity security concepts and best practices

Experience with Zero Trust, Conditional Access, or Privileged Identity Management (PIM).

Familiarity with Microsoft Defender, Sentinel, or identity-related security tooling.

Experience in healthcare, financial, or other regulated environments.

Certifications desired such as: Microsoft (AZ-800/801, SC-300, AZ-104)

VMware (VCP)

CompTIA Security+ or equivalent

Strong analytical and troubleshooting abilities

Excellent documentation and communication skills

Ability to work independently and collaboratively in high-impact environments