IT Systems Engineer

Watchmaker Genomics; Colorado; On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

401(k) matching

Medical, dental, vision coverage

Life/AD&D insurance

Parental leave

Flexible Time Off

EAP

Job summary

Watchmaker Genomics is seeking an IT Systems Engineer for an onsite role in our Boulder, Colorado office. You will design, deploy, and maintain complex IT infrastructure, including servers, storage, networks, and cloud services, while aligning with global standards.

You will manage Microsoft Entra identity, Azure, Intune, Defender, and end-user devices (Windows and macOS via JAMF), enforce security, perform change control, and lead disaster recovery planning.

Qualifications

• Extensive experience designing, implementing, and managing complex IT infrastructure, including servers, storage, virtualization, and cloud services.
• Proven hands-on experience configuring Microsoft Entra, Azure, Intune and Defender in enterprise environments.
• Strong endpoint management experience (Windows and macOS via JAMF) and security tooling.
• Ability to lead disaster recovery planning, change management, and documentation practices.

Responsibilities

• Design, implement, and maintain IT infrastructure (servers, storage, networks, cloud) per global standards.
• Administer identity and access with Microsoft Entra incl. conditional access and MFA.
• Build and manage cloud infrastructure and services in line with standards.
• Manage Windows/macOS endpoints, deployments, baselines, and security controls.
• Monitor performance, troubleshoot issues, and optimize stability and security.
• Develop automation scripts and tools to streamline operations.

Education

Associate or Bachelor degree in Computer Science or related field

Tools

Microsoft Entra

Azure

Intune

Defender

JAMF

PowerShell

Python

Bash

Job description

Position : IT Systems Engineer

Position Type : Full-time, permanent

Department : Information Technology

Location : Boulder, Colorado (onsite)

Experience :Associate required, Bachelors preferred, + 5 years relevant experience

Watchmaker Genomics is a global life science company based in Boulder, Colorado with an R&D and Production facility in Cape Town, South Africa. Our team is passionate about innovation and values collaboration, creativity, and scientific rigor.

We believe that the intersection of biology, engineering, and computer science presents exciting opportunities for developing novel technologies that promote research and improve human health. Watchmaker Genomics specializes in the design, development, and production of DNA- and RNA-modifying enzymes that enable high-growth applications in genomics, molecular diagnostics, and personalized medicine.

Position Summary

Watchmaker Genomics is inviting applications for the full-time position of IT Systems Engineer, an onsite role in our Boulder, Colorado office. This position reports to the Director IT, Boulder site for day-to-day execution and service delivery. The position will implement and maintain IT infrastructure and cloud services, change management, problem identification and resolution, and configuration management activities. Additionally, this position is expected to assist in the creation of new processes, work instructions, infrastructure documentation and knowledge base articles.

The successful candidate will thrive in a dynamic, fast-paced working environment and contribute directly to our company culture and success. This position will offer unique challenges, learning and growth including the opportunity to build and supervise a global service desk team.

Responsibilities:

Core responsibilities

• System Design and Architecture: Implement complex IT infrastructure, including servers, storage, networks, and cloud services, in line with Watchmaker’s global architecture standards.
• Identity and Access Management (Microsoft Entra): Administer identity, authentication and access management in Microsoft Entra, including conditional access, multi-factor authentication, and joiner/mover/leaver processes. This is a critical requirement for the position.
• Cloud Infrastructure: Build, administer, and maintain infrastructure and cloud services in line with global standards. This is a critical requirement for the position.
• Endpoint Management: Manage Windows endpoints and macOS endpoints, including enrollment, compliance, configuration baselines, and application deployment. These are critical requirements for the position.
• Security and Cyber Security Protection: Operate security systems across endpoints and cloud workloads; monitor, triage, and respond to security alerts; execute patch and vulnerability management. This is a critical requirement for the position.
• Network Infrastructure: Configure, maintain, and troubleshoot the site network infrastructure, including switching, wireless, firewalls, and VPNs. Advanced network knowledge and hands-on network infrastructure configuration are essential for this role.
• System Administration and Maintenance: Execute or oversee the installation, configuration, and maintenance of servers, virtual environments, and enterprise applications.
• Performance Monitoring and Optimization: Monitor system performance, troubleshoot issues, and optimize infrastructure for stability, security, and efficiency.
• Automation and Scripting: Develop and use automation tools/scripts to streamline operations and system management.
• Computer Systems Validation: Perform required Computer Systems Validation actions.
• Documentation and Operational Discipline: Maintain accurate and current infrastructure documentation, work instructions and knowledge base articles; execute all changes through formal change management.
• Risk Management and Escalation: Proactively identify, communicate, and elevate risks, incidents and capacity constraints to the Director IT, Boulder site and the Global IT Systems Engineer in a timely manner.
• Teamwork and Technical Guidance: Provide guidance to service desk staff and collaborate with cross-functional and global teams to meet business objectives.

Maintenance and Business Continuity

• Disaster Recovery Planning: Design and implement disaster recovery (DR) plans, ensuring critical systems and data can be restored in case of failure or outage.
• Backup Management: Oversee regular backups of data, systems, and configurations, ensuring that backups are complete, secure, and recoverable, and that restores are verified through scheduled test recoveries.
• System Redundancy: Implement and maintain redundancy for key systems (e.g., servers, storage, network components) to minimize downtime and ensure business continuity during failures.
• Disaster Recovery Testing: Conduct regular DR testing and simulations to validate the effectiveness of recovery plans, ensuring systems can be restored according to recovery time objectives (RTOs) and recovery point objectives (RPOs).
• Incident Response: Lead response efforts during major system outages or disasters, coordinating recovery activities, and communicating status updates to stakeholders.
• Documentation and Updates: Maintain detailed documentation of continuity and recovery procedures, regularly reviewing and updating plans to align with business changes and new technologies.

Troubleshooting

• System Diagnosis: Identify, analyze, and resolve issues related to servers, networks, storage, and applications.
• Root Cause Analysis: Investigate recurring problems to determine the underlying causes and implement long-term solutions.
• Performance Issues: Troubleshoot slow or underperforming systems by analyzing resource usage (CPU, memory, disk) and resolving bottlenecks.
• Network and Connectivity Issues: Diagnose and resolve network outages, latency, or connectivity problems across local and wide-area networks (LAN/WAN).
• Security and Access Problems: Address security issues like unauthorized access, malware, or firewall misconfigurations, ensuring system integrity and protection.

Monitor and Maintain

• Performance Monitoring: Continuously track the performance of servers, networks, and storage systems to identify and resolve bottlenecks.
• System Health Checks: Regularly assess the status of hardware, software, and virtual environments to ensure they are running optimally.
• Security Monitoring: Monitor for security threats, vulnerabilities, and unusual activities using tools like firewalls, intrusion detection systems (IDS), and security information and event management (SIEM).
• Incident and Alert Management: Respond to system alerts, outages, and incidents promptly, ensuring minimal downtime and quick recovery.
• Capacity Planning: Monitor resource usage (CPU, memory, storage) and forecast future needs to ensure system scalability and reliability.
• Cloud Based Solutions Monitoring
  • Cloud infrastructure monitoring and maintenance;
  • Regular cloud costing reviews;
  • Support cloud engineers in troubleshooting;
• Monitor adherence to internal business processes and procedures;
• Submit, track and optimize purchasing from existing and new suppliers.

Skills and Requirements

• Extensive experience designing, implementing, and managing complex IT infrastructure, including servers, storage, virtualization, and cloud services (Microsoft Azure);

• Proven, hands-on experience configuring and administering the Microsoft cloud platform, these are critical requirements for the position:

  • Microsoft Entra (identity management, identity and access administration),
  • Microsoft Azure (infrastructure and cloud services),
  • Microsoft Intune (endpoint management),
  • Microsoft Defender (security and cyber security protection);

• macOS endpoint management via JAMF, a critical requirement for the position;

• Advanced network knowledge and hands-on network infrastructure configuration, including routing, switching, wireless, firewalls, VPNs, and load balancing, essential for this position;

• Strong knowledge of network protocols and experience with security best practices, including vulnerability assessments, patching, and implementing security frameworks;

• Proficiency in managing and administering Windows servers, including Active Directory, DNS, DHCP, and other core services;

• Experience with automation tools and scripting languages (e.g., PowerShell, Python, Bash) for automating system administration tasks and managing large-scale environments;

• Practical experience designing and executing disaster recovery plans, including the management and verification of backup systems and ensuring business continuity;

• Experience leading or participating in IT projects, including system upgrades, migrations, and deployments, with the ability to coordinate across teams;

• A disciplined, documentation-first approach to operations with a proactive risk mindset, anticipating issues, communicating early, and escalating appropriately;

• Strong interpersonal skills and an ability to work as an effective member of a team.

Preferred Additional Experience:

• Experience in multi-national or corporate environments are essential;
• Experience with the ITIL framework and other IT Service management tools;
• Familiarity with industry standards and regulations such as ISO, NIST, POPIA, GDPR, or HIPAA, and experience implementing security policies to meet compliance requirements;
• Computer Systems Validation (CSV) experience in manufacturing environments;

Qualifications and Education:

• 5+ years with an Associate or Bachelor degree in Computer Science, or equivalent qualification from a recognised tertiary institution, or another relevant Information Technology discipline;
• Microsoft role-based certifications (e.g., Azure Administrator Associate, Endpoint Administrator Associate, Security Operations Analyst) and JAMF certifications are advantageous.

Compensation

The base compensation for the IT Systems Engineer role starts at $85,000-110,000 + bonus + equity; actual pay will be adjusted based on skills and experience. Employees are eligible for Flexible Time Off, Holidays, employer covers 75% of base medical plan with buy-up options, EAP (employee assistance program), employer paid dental with a buy-up option, employer paid vision, employer paid $25,000 life/AD&D policy, paid parental leave, and a 401(k) retirement plan with a 4% match.

WE ARE AN EQUAL OPPORTUNITY/AFFIRMATIVE ACTION EMPLOYER

Watchmaker Genomics is committed to being an equal opportunity employer and creating a culturally diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability status, age, or veteran status or any other characteristics as protected by applicable law.

All applicants will be asked if currently eligible to work in the United States of America; and if now or in the future will require visa sponsorship to continue working in the United States.

This position may be subject to pre-employment checks, including driving history check, drug screening and a background check for any convictions directly related to its duties and responsibilities. All pre-employment checks will comply with all applicable federal, state, and local laws.