IT Senior Systems Engineer

Chase Brexton Health Care; Baltimore (MD); On-site; USD 145,000 - 150,000; Full time

Job summary

Chase Brexton Health Care in Baltimore, MD seeks an IT Sr. Systems Engineer to lead architectural design and integration of new environments into our enterprise infrastructure. You will optimize Active Directory/Entra ID and virtualization platforms while embedding automation into deployment workflows.

As a security-conscious, healthcare-focused professional, you will enforce policies, manage SSL/TLS lifecycles, and ensure HIPAA/HITECH compliance across migrated systems and identity governance.

Qualifications

• 8–10+ years in senior infrastructure systems engineering or solutions architecture.
• Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• Certifications: CCA-V/CCP-V, VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, Entra/Security Administrator.

Responsibilities

• Lead technical due diligence on acquired entities by evaluating legacy IT estates and clinical systems.
• Design and execute AD forest consolidations, domain collapses, and identity synchronization into Entra ID.
• Architect and maintain multi-site virtualization with CVAD/Citrix Cloud, RDS, and IGEL OS deployments.
• Automate repetitive tasks and build runbooks using PowerShell, Azure CLI, REST APIs, and Python.
• Ensure security hygiene, PKI, SSL/TLS management, and compliance with HIPAA/HITECH in all migrations.

Skills

Directory & Identity Services

Application & Desktop Virtualization

Scripting & AI Automation

Security & Certificate Lifecycle

Compliance Knowledge

Healthcare & Cloud Integration

Education

Bachelor's degree in CS/IT

Certifications: CCA-V/CCP-V, VCP, Azure Solutions Architect

Tools

Citrix

NetScaler ADC

IGEL OS/UMS

Azure AD Connect/Cloud Sync

VMware vSphere

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Regular Full-Time Professional Baltimore, MD, US

2 days ago Requisition ID: 4968

Salary Range: $145,000.00 To $150,000.00 Annually

JOB SUMMARY:

The IT Sr. Systems Engineer (Senior Infrastructure & Systems Architect) acts as a principal technical authority leading the technical evaluation, design, and integration of newly acquired environments into our core enterprise infrastructure. This position is responsible for architecting Active Directory/Entra ID domain collapses and federations, optimizing enterprise desktop and application virtualization platforms (Citrix, RDS, IGEL), and embedding operational AI automation into repetitive deployment and maintenance workflows.

While not a dedicated Security Architect position, security diligence is central to this role. The IT Sr. Systems Engineer is directly responsible for enforcing baseline security hygiene across all migrated systems, managing SSL/TLS certificate lifecycles, and ensuring strict adherence to healthcare regulatory frameworks including HIPAA, HITECH, and patient data compliance standards.

MAJOR DUTIES AND RESPONSIBILITIES:

Analytical and Critical Thinking

• Lead technical due diligence on acquired entities by evaluating legacy IT estates, network topologies, identity structures, and clinical systems.
• Design, architect, and execute zero business hour downtime Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID (Azure AD) tenants.
• Architect, maintain, and tune multi-site virtualization environments utilizing Citrix Virtual Apps and Desktops (CVAD/Citrix Cloud), Remote Desktop Services (RDS), and thin-client OS solutions (IGEL OS/Universal Management Suite).
• Optimize image baselines and FSLogix profile containers to maximize host density and reduce compute resource usage.
• Configure and support remote access infrastructure, including NetScaler ADC / Citrix Gateway, load balancing, and Storefront.
• Identify high-frequency, repetitive infrastructure tasks (provisioning, image updates, patch testing, user offboarding/onboarding) and design automated workflows to streamline operations.
• Leverage modern generative AI tools and programmatic scripting (PowerShell, Azure CLI, REST APIs, Python) to accelerate script generation, log auditing, configuration troubleshooting, and automated runbook documentation.
• Maintain end-to-end management of SSL/TLS certificates, including automated renewals, private key security, gateway bindings (NetScaler ADC, IIS, reverse proxies), and cipher suite hardening to prevent service interruptions or protocol vulnerabilities.

Workplace Computers and Equipment

• Ensure peak application performance and high availability across distributed clinicians and office personnel accessing critical line-of-business and EMR platforms (Epic, NextGen, AthenaHealth, Allscripts).

Planning and Organizing

• Formulate standardized migration runbooks, baseline discovery checklists, and cutover playbooks to transition user profiles, mailboxes, and file services seamlessly with zero data loss.
• Build intelligent operational reporting and telemetry to proactively detect infrastructure bottlenecks, license drift, and capacity constraints before they impact end users.

Compliance, Policy, and Procedure

• Oversee identity governance post-acquisition, including Conditional Access policies, Microsoft Intune endpoint enrollments, and tenant consolidation.
• Enforce security best practices across all operating systems, hypervisors, and gateway access points (nFactor MFA, SAML/SSO federation, conditional access).
• Ensure all architectural designs and integrated systems strictly comply with HIPAA, HITECH, and clinical data governance guidelines.
• Conduct perimeter assessments and access reviews to protect protected health information (PHI) and enterprise identities against external compromise.

SKILLS AND ABILITIES:

• Directory & Identity Services: Proven track record architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID (Azure AD) Connect/Cloud Sync.
• Application & Desktop Virtualization: Deep hands‑on expertise with Citrix (Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC), Microsoft Remote Desktop Services (RDS), Azure Virtual Desktop (AVD), and IGEL thin client deployments/management.
• Scripting & AI Automation: Advanced proficiency in PowerShell or Azure CLI for systems administration; proven experience integrating AI assistance or automation tools into operational deployment routines.
• Security & Certificate Lifecycle: Strong understanding of Public Key Infrastructure (PKI), SSL/TLS certificate chain deployment, Web Application Firewalls (WAF), and multi-factor authentication (nFactor/MFA).
• Compliance Knowledge: Practical understanding of healthcare regulatory frameworks (HIPAA Security & Privacy Rules, Business Associate Agreements, clinical system audit readiness).
• Healthcare & Cloud Integration (Preferred): Experience supporting or migrating healthcare workloads and EMR/EHR platforms (Epic, AthenaHealth, NextGen), as well as migrating workloads across on‑premises datacenters, VMware vSphere, and public cloud (Azure/AWS).

EDUCATION AND/OR EXPERIENCE:

• 8–10+ years in senior infrastructure systems engineering or solutions architecture, with demonstrated experience in multi-site migrations, M&A integrations, or large-scale domain consolidations.
• Bachelor’s degree in Computer Science, Information Technology, or equivalent military/professional experience.
• Citrix Certified Associate/Professional (CCA-V, CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator.

WORKING CONDITIONS/PHYSICAL DEMANDS:

Work is typically performed in an office environment.

The specific statements shown in each section of this description are not intended to be all-inclusive. They represent typical elements considered necessary to successfully perform the job.