Senior System Engineer

Marcum Asia CPAs LLP; New York (NY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Marcum Asia CPAs LLP in New York is seeking an experienced IT Infrastructure Engineer to design, implement, secure, and maintain global Windows, Citrix, Azure/AWS, Active Directory, and Microsoft 365 environments. This hands-on role focuses on cloud, virtualization, automation, and operational excellence across a dispersed global footprint.

The role requires 7–10 years of IT infrastructure experience, with strong skills in Windows Server, Citrix, Azure and AWS, AD, and PowerShell scripting.

Qualifications

• 7–10+ years of IT infrastructure experience within a corporate environment.
• Strong hands-on expertise in Windows Server management and patching.
• Proficiency with Citrix, Azure, AWS, Active Directory, and Microsoft 365.
• Experience with PowerShell scripting and automation.
• Security-minded with infrastructure hardening and monitoring.

Responsibilities

• Maintain secure, up-to-date Windows/Citrix/Azure environments across global sites.
• Lead end-to-end server management, patching, and performance tuning.
• Implement and support Citrix Cloud, Azure/AWS IaaS/PaaS workloads.
• Develop documentation and provide guidance to IT help desk.
• Monitor health, capacity planning, and reporting for infrastructure.
• Collaborate with business teams to ensure high availability.

Job description

The ideal candidate will be part of the IT team responsible for the design, implementation, maintenance, security, and performance of global Windows, Citrix, Azure/AWS, Active Directory, and Microsoft 365 environments. This is a hands‑on infrastructure engineering role requiring strong technical and troubleshooting skills, with a focus on cloud, virtualization, security, automation, and operational excellence. The role will work closely with technology and business teams to support critical applications, drive infrastructure initiatives, and ensure highly available, secure, and reliable systems across a global environment.

Major responsibilities:

• Maintain operational excellence by keeping environment secure and up to date.
• Responsible for project tasks throughout the life cycle of application implementation following best practices and architectural guidelines.
• Responsible for end‑to‑end Windows Server management, including patch management, security update implementation, and performance monitoring and tuning across development, test, and production environments.
• Configure, install, maintain, and provide support for critical software and hardware components of our Citrix and Azure virtualization environment.
• Responsible for updating and maintaining all documentation requested by management and will be tasked with improving such documentation as required.
• Provide troubleshooting and assist help desk support group in resolving escalated issues.
• Monitor and provide statistical reports on the health and operational status of all infrastructure systems, monitor system capacity utilization.
• Aid in capacity planning and performance monitoring to ensure that infrastructure systems are meeting the needs of the business.
• Assist with various day‑to‑day management of server environment.
• Provide support to back‑office applications such as compliance platform, reporting system, engagement system.
• Requires a minimum of 7-10 years of experience working within an IT infrastructure group, preferably with accounting experience
• Ability to work under pressure, managing multiple tasks with accuracy and to meet demanding deadlines, possessing strong ethics and the ability to maintain confidentiality.
• Advanced experience in Citrix technologies — Delivery Controller, PVS, StoreFront, Netscaler/VPX configuration deployments.
• Experience with Citrix Cloud is a big plus.
• Extensive experience in the Azure and AWS public clouds with IaaS and PaaS workloads, including management of VNets/VPCs, private networking, storage accounts, containers, function apps, and managed databases.
• Working knowledge of SCCM, Intune or similar platform used to keep systems up to date and package deployments.
• Working Knowledge of Intune Autopilot, troubleshooting experience.
• Extensive experience planning, designing, deploying, and maintaining Windows Servers, including Microsoft applications such as SQL, Exchange, and Active Directory.
• Expertise in Active Directory — troubleshooting, setting up replication and new domains, creating and consolidating GPOs, ACLs
• Working knowledge of working hybrid environments.
• Must be able to manage multiple AD, M365 and Azure environment.
• Well‑rounded knowledge of Office 365, Azure AD, and related Microsoft services.
• Experience with managing and maintaining email security services such as Proofpoint, Crowdstrike, Druva M365 backup.
• Experience with cloud cybersecurity best practices, Entra ID, Azure Policies, Azure Site Recovery, Azure Backup Center, and other Azure services.
• Experience with vulnerability scan platforms and remediation, such as Tenable.
• Understanding of infrastructure security and authentication processes: SAML, Kerberos, RADIUS & MFA.
• Experience with privileged access management and privileged identity management.
• Day-to-day management of monitoring platforms and tailoring advanced alerting & reports.
• Experience in PowerShell scripting and working with code repositories and CI/CD pipelines.
• Experience with Microsoft tenant migration, such as using Quest on Demand Migration or similar tool is a big plus.
• Root cause analysis and troubleshooting experience is required.
• Familiar with building and maintaining task scheduling platforms.
• Must be willing to work weekends and evenings and be on call as required; the responsibilities are for a 7x24 IT operation dispersed amongst the team.
• Must maintain a sincere, polite, and respectful customer service attitude when working with the business.
• Ability to support multiple globally dispersed locations.
• Excellent communication, organization, and interpersonal skills.
• Demonstrates inclusive behaviors in support of a culture that values diverse perspectives.
• Can abide by the firm’s hybrid work arrangement policy in the New York City office (3 days in‑office/2 day remote).

Nice to Have:

• Experience with general database administration of SQL Server, including automatic backup, high availability, etc.
• Some experience with Managing networking equipment such as Ubiquiti firewall, switches, access points.
• Some experience with Infrastructure as Code (IaC) and Cloud Adoption Framework/Well-Architected Framework best practices.
• Experience with Azure tenant migration, consolidation.
• Experience with Printing solutions such as Canon Uniflow.