JOB SUMMARY:
The IT Sr. Systems Engineer (Senior Infrastructure & Systems Architect) acts as a principal technical authority leading the technical evaluation, design, and integration of newly acquired environments into our core enterprise infrastructure. This position is responsible for architecting Active Directory/Entra ID domain collapses and federations, optimizing enterprise desktop and application virtualization platforms (Citrix, RDS, IGEL), and embedding operational AI automation into repetitive deployment and maintenance workflows.
While not a dedicated Security Architect position, security diligence is central to this role. The IT Sr. Systems Engineer is directly responsible for enforcing baseline security hygiene across all migrated systems, managing SSL/TLS certificate lifecycles, and ensuring strict adherence to healthcare regulatory frameworks including HIPAA, HITECH, and patient data compliance standards.
MAJOR DUTIES AND RESPONSIBILITIES:
Analytical and Critical Thinking
- Lead technical due diligence on acquired entities by evaluating legacy IT estates, network topologies, identity structures, and clinical systems.
- Design, architect, and execute zero business hour downtime Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID (Azure AD) tenants.
- Architect, maintain, and tune multi-site virtualization environments utilizing Citrix Virtual Apps and Desktops (CVAD/Citrix Cloud), Remote Desktop Services (RDS), and thin-client OS solutions (IGEL OS/Universal Management Suite).
- Optimize image baselines and FSLogix profile containers to maximize host density and reduce compute resource usage.
- Configure and support remote access infrastructure, including NetScaler ADC / Citrix Gateway, load balancing, and Storefront.
- Identify high-frequency, repetitive infrastructure tasks (provisioning, image updates, patch testing, user offboarding/onboarding) and design automated workflows to streamline operations.
- Leverage modern generative AI tools and programmatic scripting (PowerShell, Azure CLI, REST APIs, Python) to accelerate script generation, log auditing, configuration troubleshooting, and automated runbook documentation.
- Maintain end-to-end management of SSL/TLS certificates, including automated renewals, private key security, gateway bindings (NetScaler ADC, IIS, reverse proxies), and cipher suite hardening to prevent service interruptions or protocol vulnerabilities.
Workplace Computers and Equipment
- Ensure peak application performance and high availability across distributed clinicians and office personnel accessing critical line-of-business and EMR platforms (Epic, NextGen, AthenaHealth, Allscripts).
Planning and Organizing
- Formulate standardized migration runbooks, baseline discovery checklists, and cutover playbooks to transition user profiles, mailboxes, and file services seamlessly with zero data loss.
- Build intelligent operational reporting and telemetry to proactively detect infrastructure bottlenecks, license drift, and capacity constraints before they impact end users.
Compliance, Policy, and Procedure
- Oversee identity governance post-acquisition, including Conditional Access policies, Microsoft Intune endpoint enrollments, and tenant consolidation.
- Enforce security best practices across all operating systems, hypervisors, and gateway access points (nFactor MFA, SAML/SSO federation, conditional access).
- Ensure all architectural designs and integrated systems strictly comply with HIPAA, HITECH, and clinical data governance guidelines.
- Conduct perimeter assessments and access reviews to protect protected health information (PHI) and enterprise identities against external compromise.
SKILLS AND ABILITIES:
- Directory & Identity Services: Proven track record architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID (Azure AD) Connect/Cloud Sync.
- Application & Desktop Virtualization: Deep hands-on expertise with Citrix (Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC), Microsoft Remote Desktop Services (RDS), Azure Virtual Desktop (AVD), and IGEL thin client deployments/management.
- Scripting & AI Automation: Advanced proficiency in PowerShell or Azure CLI for systems administration; proven experience integrating AI assistance or automation tools into operational deployment routines.
- Security & Certificate Lifecycle: Strong understanding of Public Key Infrastructure (PKI), SSL/TLS certificate chain deployment, Web Application Firewalls (WAF), and multi-factor authentication (nFactor/MFA).
- Compliance Knowledge: Practical understanding of healthcare regulatory frameworks (HIPAA Security & Privacy Rules, Business Associate Agreements, clinical system audit readiness).
- Healthcare & Cloud Integration (Preferred): Experience supporting or migrating healthcare workloads and EMR/EHR platforms (Epic, AthenaHealth, NextGen), as well as migrating workloads across on-premises datacenters, VMware vSphere, and public cloud (Azure/AWS).
EDUCATION AND/OR EXPERIENCE:
- 8-10+ years in senior infrastructure systems engineering or solutions architecture, with demonstrated experience in multi-site migrations, M&A integrations, or large-scale domain consolidations.
- Bachelor's degree in Computer Science, Information Technology, or equivalent military/professional experience.
- Citrix Certified Associate/Professional (CCA-V, CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator.
WORKING CONDITIONS/PHYSICAL DEMANDS:
Work is typically performed in an office environment.
The specific statements shown in each section of this description are not intended to be all-inclusive. They represent typical elements considered necessary to successfully perform the job.