System Engineer

GENERAL SUMMARY OF POSITION: The Systems Engineer is responsible for the design, implementation, and ongoing operational health of infrastructure across all firm offices, with occasional travel required. The ideal candidate is a self-starter who thrives both independently and collaboratively, demonstrating strong project management capabilities, clear communication, and a commitment to delivering exceptional internal client service. This role encompasses Active Directory, WAN/LAN, firewalls, wireless networks, network security, endpoint security, ISP management, and physical and virtual infrastructure, with hands-on experience in AWS and Microsoft 365 environments. CORE & ESSENTIAL FUNCTIONS:Design, implement, and maintain systems and infrastructure to achieve maximum uptime and 24/7/365 operational availabilityPerform root cause analysis on systems issues and drive problems to full resolution, escalating to vendors when appropriate and communicating outcomes to stakeholdersAssess risks and business impacts arising from disruptions; make independent, timely decisions to eliminate risk and ensure business continuityDesign, implement, test, and maintain business continuity and disaster recovery (BCDR) solutions, processes, and proceduresAnalyze, plan, test, and implement network security controls and connectivity improvementsResearch industry best practices and gather business requirements through interviews and independent analysisProactively evaluate emerging technologies to improve the effectiveness and efficiency of firm systemsDesign, manage, and maintain the company's Wide Area Network (WAN) and Local Area Network (LAN) Manage and maintain network infrastructure including Sophos XGS firewalls, Ubiquiti wireless APs and switches, servers, fiber terminations, and print/scan serversAdminister and optimize AWS environments including EC2, VPC, RDS, and WorkspacesAdminister and support Microsoft 365 services including user management, licensing, and security configurationsMaintain accurate documentation including network diagrams, runbooks, troubleshooting guides, and change management logsProvide end user support during and outside of normal business hours as requiredQUALIFICATIONS, KNOWLEDGE & SKILLS:Networking & Infrastructure:3+ years of hands-on experience with enterprise networking in a large, multi-office environmentStrong understanding of LAN/WAN architecture, routing protocols (BGP, OSPF), and switchingExperience with SDWAN, MPLS, and multi-carrier/redundant WAN transportsUbiquiti Networks — UniFi switching, wireless AP deployment and management, and network controller administrationFirewall administration — Sophos XGS hardware firewallsSecurity Suite Management — Sophos MDR (Managed Detection & Response) Client and site-to-site VPN configuration and managementLoad balancing, QoS, and Class of Service traffic prioritizationConverged networks (voice, video, and data) Proxy server administrationNetwork troubleshooting tools (Wireshark, packet sniffers, etc.)Solid understanding of OSI model, IP addressing/DHCP, and structured cablingREQUIRED EDUCATION:Bachelor's degree in Information Technology, Computer Science, or a related field preferred; equivalent work experience will be consideredRelevant certifications (e.g., CCNA, CompTIA Network+, AWS certifications, Sophos certifications) are a plus.