Systems Engineer (L2) - Managed IT & Cybersecurity

neKey; Pennsauken Township (NJ); On-site; USD 85,000 - 110,000; Full time

Benefits offered by this job

Profit share

Certification budget

Health, dental, and vision coverage

Job summary

neKey is seeking a Senior IT Engineer located in Pennsauken Township, NJ, specializing in L2/L3 escalations in networking and security. The role requires strong management skills, hands-on experience with major RMM platforms, and proficiency in PowerShell and Bash.

As part of a supportive team, you will lead client projects, mentor junior technicians, and ensure thorough documentation. This hybrid position offers competitive benefits, a profit share, and opportunities for personal growth.

Qualifications

• 4+ years in IT, ideally in an MSP environment.
• Experience with major RMM and PSA platforms.
• Clear professional demeanor and communication with clients.

Responsibilities

• Own L2/L3 escalations across networking and security.
• Lead client projects from start to finish.
• Mentor technicians and maintain client documentation.

Skills

Management of diverse environments

PowerShell proficiency

Bash proficiency

Excellent communication skills

Experience with EDR systems

Education

CompTIA Network+ or Security+ or equivalents

Tools

ConnectWise

NinjaOne

Datto RMM

Job description

We are a growing cybersecurity-focused managed technology services provider based in Greater Philadelphia. We serve small and medium businesses, where we fully manage the technology stack and mid-market organizations, where we co-manage alongside internal IT teams. Our practice is built on three pillars: Managed IT, Cybersecurity, and Managed Intelligence.

Our growth is driven by referrals, which means every engagement either earns the next client or costs us one. That reality shapes our standards, our pace, and the people we hire.

Who we're hiring

We're looking for a Senior IT Engineer (L2/L3) who already has the technical foundation in place - someone who can own real escalations, lead client projects from start to finish, and elevate the work of the team without doing the L1 job for them.

The work here is genuinely varied: systems design, networking, unified communications, virtualization, cybersecurity, web technologies, and a growing book of practical AI work landing in real client environments. You'll encounter new challenges daily, and we'll back you with a real cert budget, an experienced team, and the time to keep sharpening your craft.

We're a small, tight-knit team of passionate professionals who take serious pride in what we do. If you want to be an integral part of a growing business, share in our success, and contribute to something that actually matters, keep reading.

This isn't a role for someone who wants a routine, narrowly scoped day with tasks handed down from above. We're looking for engineers who take ownership, appreciate variety, and want real growth - and we structure the work and the rewards around that.

What you'll do

• Own L2/L3 escalations across networking, M365 tenant administration, server and endpoint, identity, and EDR alerting.
• Lead client projects end-to-end: migrations, firewall replacements, M365 tenant builds, backup recovery validation, security hardening engagements.
• Triage and respond to EDR/SIEM alerts and participate in incident response when something real happens.
• Build and maintain client documentation in [RMM/PSA + IT Glue or Hudu] to a standard the next engineer can actually work from.
• Mentor other technicians and pass along your knowledge to newer team members.
• Work alongside leadership on cybersecurity assessments, quarterly client reviews, and technology roadmap planning.

What we require

You need to be accurate, diligent, and precise in your work. You'll be implementing solution designs for clients who count on us, and we take pride in keeping that trust. Clear professional demeanor and excellent listening and communication skills with clients are essential.

On the technical side

• 4+ years of progressive IT experience, ideally in an MSP environment, though strong candidates from corporate IT or internal IT teams with comparable depth and transferable skills will absolutely be considered. What matters is the ability to manage diverse environments, adapt quickly, and follow documented processes precisely.
• CompTIA Network+ and Security+ or demonstrable equivalents (MS-900 + AZ-104, CCNA, SC-200, etc.). If you don't hold these certifications, your resume should make a clear case for why your experience covers the same ground.
• Hands-on production experience with at least one major RMM and one major PSA platform - ConnectWise, NinjaOne, Datto RMM, Kaseya, Autotask, HaloPSA, or equivalent ticketing and management systems from a corporate IT environment.
• Comfortable working in PowerShell and Bash for administration and automation.
• M365 / Entra ID tenant administration - Conditional Access, MFA enforcement, mailbox investigation, license management, and secure-score remediation.
• Networking depth - VLANs, firewall rules, site-to-site VPN troubleshooting, DNS, and routing fundamentals.
• Backup and recovery - hands-on experience actually restoring from backup, not only configuring it.
• Valid driver's license. Hybrid means 4 days onsite in Pennsauken with occasional client visits across South Jersey and tri-state area in 2-hour drive radius from the office.

Production EDR experience (SentinelOne, Huntress, CrowdStrike, ThreatLocker), Microsoft AZ-104 or SC-200, vendor certifications (Sophos, SonicWall, Fortinet), experience running phishing simulations or BCDR tabletop exercises, practical familiarity with NIST CSF or CIS Controls, and real AI implementation work in client or business environments (not just demoing ChatGPT to your aunt).

What we offer

We reward loyalty and dedication. As part of our team, you'll share in our company's success through profit share, growth-tied bonuses, a real certification budget, and full participation in the growth and development of the business. Health, dental, and vision coverage, PTO, 401k, great vacation policy, and all standard holidays. A genuine growth path into Senior Leadership, with raises tied to skill and certification growth rather than tenure alone.

IT work doesn't always fit an 8:00-to-17:00 schedule. When something breaks at 8pm, we show up and we make sure you're supported and recognized for that flexibility.

This role may not be the right fit if…

• You're an L1 hoping to grow into a senior role. We respect that path completely, it just isn't this seat. Another year of focused MSP or comparable experience would put you in a strong position to revisit.
• You see cybersecurity as a specialty for someone else's team. At neKey, security is built into every engagement, not bolted on.
• You're looking for a short-term position to gain experience before moving on. We're hiring for the long run, and the strongest candidates want that too.
• You require fully defined tasks and a checklist to stay productive. This role calls for initiative and judgment.
• You require fully remote work. Hybrid in Pennsauken is non-negotiable for this position.