The Systems Engineer is a technical leader responsible for designing, implementing, and supporting Tekion's enterprise IT systems with a strong emphasis on endpoint management and device compliance. This role drives system scalability, security, and reliability through complex project ownership, cross-functional partnership, and continuous platform improvement across macOS and Windows environments.

Duties & Responsibilities :

- Lead implementation, maintenance, and optimization of enterprise platforms including Entra ID (Azure AD), Microsoft 365, SSO/IAM solutions, and MDM/endpoint management tooling (Jamf, Intune, or equivalent).

- Own the design, configuration, and enforcement of device management policies across macOS and Windows fleets - including enrollment workflows, compliance baselines, configuration profiles, and patch management.

- Design and automate workflows for system provisioning, access lifecycle management, and endpoint configuration standardization across the environment.

- Own root cause analysis on high-complexity system and endpoint issues, driving durable resolutions that improve long-term platform stability.

- Collaborate with cybersecurity, infrastructure, and application teams to deliver secure, well-integrated system and endpoint architecture.

- Lead platform upgrades, integrations, and migrations - including MDM consolidations or transitions - with a focus on business continuity and minimal operational disruption.

- Maintain architectural documentation, system configurations, device management policies, and change procedures to support knowledge transfer and audit readiness.

- Mentor junior engineers and contribute to team capability through training, process improvement, and best practices adoption.

Job Complexity :

Leads technically complex systems engineering projects across multiple platforms, critical systems, and large-scale endpoint environments. Serves as a subject matter expert and trusted advisor on systems reliability, device compliance, security, and scalability.

Required Supervision :

Operates independently. Drives technical initiatives and provides cross-team guidance with minimal direction.

Qualifications :

- 5-7 years of experience in IT systems engineering or enterprise platform administration

- Bachelor's or Master's degree in Information Technology, Computer Science, or related field

- Hands-on expertise with MDM platforms for macOS and Windows - Jamf and/or Microsoft Intune strongly preferred; equivalent experience with Workspace ONE, Kandji, or similar platforms considered

- Expert-level proficiency in Microsoft 365, Entra ID, SSO/IAM platforms, and SaaS administration

- Deep familiarity with macOS and Windows device management - enrollment, compliance policies, configuration profiles, app deployment, and patch workflows

- Strong scripting and automation skills across PowerShell, Python, and/or Bash - including MDM-adjacent automation (e.g., Jamf API, Graph API)

- Demonstrated experience with security hardening, compliance readiness, and endpoint monitoring

- Strong documentation, collaboration, and cross-functional communication skills

- Mentorship experience and a track record of elevating team capabilities

- Relevant certifications preferred: Jamf Certified Admin (JCPA), Microsoft Certified: Endpoint Administrator, Microsoft Certified: Enterprise Administrator Expert, CISSP