Lead Systems Engineer, Information Technology, Full-Time, Days

MarinHealth; San Rafael (CA); On-site; USD 119,000 - 178,000; Full time

Job summary

MarinHealth in California seeks a Lead Systems Engineer to design, integrate, and optimize desktop, systems, and network environments within a healthcare organization. You will use Microsoft 365, Defender, Cisco networks, and modern security tools to deliver secure, scalable infrastructure, while mentoring engineering teams and maintaining regulatory compliance.

The role requires 7+ years in desktop analysis, 5+ years in systems engineering, and 5+ years in networking, with healthcare/regulatory

Qualifications

• Bachelor’s degree in computer science, Information Systems, Engineering, or related field (or equivalent experience).
• 7+ years as a desktop analyst, with hands-on experience integrating endpoints in enterprise environments.
• 5+ years as a systems engineer, architecting and optimizing infrastructure in healthcare or regulated industries.
• 5+ years of hands-on networking experience with collaboration with systems architects and network engineers.
• 5+ years of hands-on experience supporting iPhone and Android devices in enterprise environments with emphasis on compliance, security, and regulatory environments.
• 3+ years leading or managing systems engineers and/or desktop analysts.
• Experience with Microsoft M365, Defender, Cisco networks, and modern security tools; healthcare/regulatory environment preferred.

Responsibilities

• Oversee and modernize the lifecycle of endpoint devices, including deployment, movement, troubleshooting, and integration with cloud and on-premises infrastructure.
• Develop and improve desktop support processes, standardizing system build procedures for consistent service delivery.
• Apply expertise in VDI and enterprise endpoint management solutions for secure, scalable desktop experiences.
• Provide expert support for iPhone and Android devices with security, compliance, and usability standards.
• Architect and deploy reliable systems and networks, collaborating with cross-functional teams to optimize performance and embed security principles.
• Mentor and manage technical teams, ensuring professional development and project success.
• Ensure healthcare regulatory compliance and protect patient privacy in all technical operations.
• Participate in 24x7 on-call rotation; manage changes with change control processes.

Skills

Desktop analysis

Systems engineering

Networking

Mobile device management

Leadership

Education

Bachelor’s degree in computer science, Information Systems, Engineering, or related field

Tools

Microsoft 365

Defender

Cisco networks

VDI

MDM

Group Policy

Job description

ABOUT MARINHEALTHAre you looking for a place where you are empowered to bring innovation to reality? Join MarinHealth, an integrated, independent healthcare system with deep roots throughout the North Bay. With a world-class physician and clinical team, an affiliation with UCSF Health, an ever-expanding network of clinics, and a new state-of-the-art hospital, MarinHealth is growing quickly. MarinHealth comprises MarinHealth Medical Center, a 327-bed hospital in Greenbrae, and 55 primary care and specialty clinics in Marin, Sonoma, and Napa Counties. We attract healthcare’s most talented trailblazers who appreciate having the best of both worlds: the pioneering medicine of an academic medical center combined with an independent hospital's personalized, caring touch.MarinHealth is already realizing the benefits of impressive growth and has consistently earned high praise and accolades, including being Named One of the Top 250 Hospitals Nationwide by Healthgrades, receiving a 5-star Ranking for Overall Hospital Quality from the Centers for Medicare and Medicaid Services, and being named the Best Hospital in San Francisco/Marin by Bay Area Parent, among others.Company:Marin General Hospital dba MarinHealth Medical CenterCompensation Range:$57.04 - $85.55Work Shift:8 Hour (days) (United States of America)Scheduled Weekly Hours:40Job Description Summary:The Lead Systems Engineer is a senior technical leader responsible for designing, integrating, and optimizing desktop, systems, and network environments within a healthcare organization. This role combines deep expertise in desktop analysis, systems engineering, and hands-on networking, ensuring seamless integration of user endpoints with modern toolsets such as Microsoft M365, Defender, Cisco networks, and contemporary security solutions. The Lead Systems Engineer collaborates closely with systems architects and network engineers to deliver secure, scalable, and resilient infrastructure, supporting clinical and operational excellence. This position also provides leadership and mentorship to engineering and analyst teams, driving modernization initiatives and ensuring compliance with healthcare regulations.Key Focus Areas Include:• On-Prem Modernization & Hybrid Integration• Desktop & Mobile Systems Architecture• Disaster Recovery, Backup & Continuity• Cross-Functional Collaboration & Zero Trust Security Design• Technical Leadership & Partnership Engagement• Financial, Operational & Project Alignment• Change Management• 24x7 On-Call RotationJob Requirements, Prerequisites and Essential Functions:I.JOB SPECIFICATIONS:A. EDUCATIONBachelor’s degree in computer science, Information Systems, Engineering, or related field (or equivalent experience).B. EXPERIENCEMinimum 7+ years as a desktop analyst, with hands-on experience integrating endpoints in enterprise environments.Minimum 5+ years as a systems engineer, architecting and optimizing infrastructure in healthcare or regulated industries.Minimum 5+ years of hands-on networking experience, including close collaboration with systems architects and network engineers.Minimum 5+ years of hands-on experience supporting and managing iPhone and Android devices in enterprise environments, with a strong emphasis on compliance, security, and operational excellence within regulated industries such as healthcare or finance.Minimum 3+ years leading or managing systems engineers and/or desktop analysts.Demonstrated experience working with Microsoft M365, Defender, Cisco networks, and modern security tools.Experience in healthcare or other regulated environments preferred.C. PREREQUISITE SKILLSDemonstrated expertise in desktop support, troubleshooting, and administration for a wide range of devices and applications Proven ability to architect, modernize, and integrate desktop and systems infrastructure with cloud platforms Strong understanding of endpoint management, desktop/mobile systems architecture, and enterprise identity/access management Advanced proficiency in enterprise mobile device management (MDM) for iPhone and Android platforms, ensuring secure configuration, compliance, and operational excellence in regulated environments such as healthcare or finance. Advanced knowledge of networking, including secure design, segmentation, and interoperability between on-premises and cloud environments Experience with virtual desktop infrastructure (VDI) platforms and enterprise-level automation tools for streamlined provisioning and configuration Proficiency in group policy administration and compliance-driven architecture to ensure security and usability Familiarity with advanced security frameworks (Zero Trust, IAM, RBAC) and regulatory requirements Ability to build TCO models and multi-year cost projections for technical initiatives Effective collaboration, communication, and leadership skills for cross-functional teamwork and mentoring technical staff Experience providing training and documentation to technical teams and maintaining hardware inventory Skilled in troubleshooting network-related issues and supporting mobile device integrationV.LICENSE/REGISTRATION/CERTIFICATION:Technical certifications preferred (such as Microsoft Certifications, CISSP, etc.)VI.PRIMARY CUSTOMER SERVED (Age-Specific Criteria):This position is not a patient care position, and as such, this section does not apply.PATIENT PRIVACY (HIPAA Compliance):Employees in this position have access to protected health information. The protected health information a person in this position can access includes demographics, date of service, insurance/billing, medical record summary information, and all other information that may be contained in patient records. This position requires patient health information to perform the functions outlined as part of this position description.VIII.JOB FUNCTIONS:A. ESSENTIALOversee and modernize the lifecycle of endpoint devices, including deployment, movement, troubleshooting, and integration with cloud and on-premises infrastructureDevelop and continuously improve desktop support processes, leveraging automation tools and standardizing system build procedures for consistent, efficient service deliveryApply expertise in virtual desktop infrastructure (VDI) and enterprise endpoint management solutions to deliver secure, scalable, and user-friendly desktop experiencesProvide expert support for iPhone and Android devices, implementing and maintaining security, compliance, and usability standards for mobile endpoints in accordance with regulatory requirements and organizational policies.Implement and manage group policy settings and disaster recovery frameworks to ensure compliance, security, and business continuityArchitect and deploy reliable systems and networks, collaborating with cross-functional teams to embed security principles and optimize performanceMentor and manage technical teams, supporting professional development, project success, and alignment with organizational objectives through effective planning and resource managementEnsure compliance with healthcare regulations and protect patient privacy in all technical operationsManage system changes, overseeing and implementing system changes in compliance with organizational change control processes, including performing after-hours changes when required to minimize operational impact.Service excellence, ensuring all technical operations uphold organizational standards for patient privacy, safety, and service quality. Provide reliable support through participation in 24×7 on-call rotation.B. SECONDARY (modifiable)All other duties as assigned.Accommodation:Qualified applicants with disabilities may request reasonable accommodation during the application process by contacting Human Resources at 415-925-7040 or [e-mail].C.A.R.E.S. Standards:MarinHealth seeks candidates ready to model our C.A.R.E.S. standards—Communication, Accountability, Respect, Excellence, Safety—which foster a healing, trust-based environment for patients and colleagues.Health & Immunizations:To protect employees, patients, and our community, MarinHealth requires measles, mumps, varicella, and annual influenza immunizations as a condition of employment (and annually thereafter). COVID-19 vaccination/booster remains strongly recommended. Medical or religious exemptions will be considered consistent with applicable law.Compensation:The posted pay range complies with applicable law and reflects what we reasonably expect to pay for this role. Individual pay is set by skills, experience, qualifications, and internal/market equity, consistent with MarinHealth’s compensation philosophy. Positions covered by collective bargaining agreements are governed by those agreements.Equal Employment:All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sexual orientation, gender identity, protected veteran status or disability status, and any other classifications protected by federal, state, and local laws.