Senior Systems Engineer

WRA, Inc.; California; Remote; USD 125,000 - 145,000; Full time

Job summary

WRA, Inc. is seeking a Senior Systems Engineer to lead cloud infrastructure, IAM, and cybersecurity efforts. The role focuses on Azure Virtual Desktop, Microsoft 365, Entra ID, and automation to support a distributed workforce.

You will work closely with the IT Director to mature our in-house IT & Cybersecurity capabilities, ensuring secure, efficient operations while enabling staff to perform at their best.

Qualifications

• Experience supporting a hybrid or remote workforce of 50+ employees.
• Strong familiarity with Azure Virtual Desktop, Microsoft 365, and Entra ID.
• Ability to manage endpoint devices and security tooling at scale.

Responsibilities

• Own Azure environment, including VDI and virtual servers.
• Deploy actionable VM monitoring and alerting for performance and capacity.
• Administer Microsoft 365, Exchange, SharePoint, OneDrive, Teams, and data governance.
• Automate IT processes using PowerShell and related tools.
• Collaborate with Director to improve Claude AI deployment and integrations.
• Participate in cybersecurity initiatives and incident response activities.
• Maintain runbooks and architecture diagrams; ensure change-management discipline.

Skills

Azure Virtual Desktop

Microsoft 365

Entra ID

PowerShell

Zero-trust security

Endpoint management

Tools

Intune

NinjaOne

WorkspaceONE

Job description

We’rehiringa Senior Systems Engineer as WRAbuildsits new internal IT & Cybersecurity functions. We are actively transitioningfrom an MSP model to a fully in-housemodel,and this role willoperateunder the guidance of our Director ofInformation Technology& Cybersecurity.This isalsoan excellent role for someone looking to refine theircybersecurity skillset.

In this role, you will act as the primary engineer for ourcloud andSaaS platforms, including Microsoft 365, Azure infrastructure, Entra ID, endpoint management, and a variety of general platforms used by each of our departments.Initially, most of your timewill focuson standingupnew tools andassistingin the migration of select tools used by our MSP.Afterwards, your general duties willshift toengineeringAzure Virtual Desktop, Microsoft 365/Entra ID, endpointmanagementand building automations.

You will be highly autonomous and will work closely with yourDirectortomaintainand improve our current technology stack. Our100-personworkforce is highly distributed,and your priority is engineeringourtoolstoenableour stafftodotheir best work securely,efficientlyand consistently.

WRA has offices in the San Francisco Bay Area (San Rafael, Petaluma, and Emeryville) and in San Diego. This position may be performedfullyremotely by candidateslocatedin California, Colorado, Arizona, orOregonbut travel to our offices may benecessary1 – 2 times per year on average.

Candidates in the Denvermetro areaare especiallyencouraged to apply.

In this role, you will be responsible for:

Cloud Infrastructure

• Own our Azure environment, including Azure Virtual Desktopand virtual servers,whichenablesourCAD,GISand Accountingteams. This includes image management, patching, right-sizing,scalingand scheduling,backups,performance optimization, and software versioning.
• Deployactionable virtual machine monitoring to measure performance(CPU, GPU, memory,diskand session latency),idle capacityandactive usetime,andimplementalertstomonitorthese metrics.
• Perform root-cause analysis of virtual infrastructure concerns and propose solutions.
• Administer our Microsoft 365 environment, including Exchange, SharePoint& OneDrive,Teamsanddatagovernance.
• Engage with your Director and our specialized departments to ensure their tools are appropriately sized, configured and performant.
• Co-manage our SaaS and cloud infrastructure backup platforms,including forMicrosoft 365, Azure virtualmachinesand other platforms.

Identity & Access Management (IAM)

• Administer Entra ID and SSO, including conditional access, authentication, dynamic groups, and guest access governance.
• Own employee identity lifecycle automations for onboarding,offboardingand role changes.
• Maintain SCIM provisioning across our SaaS applications.

Endpoint & Mobile Device Management

• Manage our Windows and limited Mac fleet by administering our endpoint management platform, including device enrollment, Autopilot, compliance & configuration policies, appdeploymentsand system patching.
• Manage our mobile device configuration and application policies.

AI & Automations

• Automate IT processes using PowerShell, MicrosoftGraphand other platforms to reduce oreliminatemanual administrative tasks and to ensure consistent quality.
• Collaborate with your Director and other stakeholders to improve our implementation of Claude AI, including Connector configurations,Skillsand Design.

Cybersecurity

• Partner with your Directorto build newsecurityoperationscapabilitiesfrom product selection and concept trialsthroughimplementation and administration.
• Alongside yourDirector, administer our security stack, including our managed detection and response platform, email security, DNS and web filtering, and vulnerability management.
• Participate inourincident response process,including investigations and root-causeanalyses,andapply technical containment measures as directedor delegated.
• Assistin strengtheningour infrastructure to be compliant with industry-standard benchmarks such as CMMC and NIST SP 800-171.

General IT Support

• Work with ourITOperationsSpecialist as needed and serve asafinalescalation point for complex IT Support requests.
• Participate inanon-call rotation for criticalbut rareIT outages and other emergent duties.

Change Management & Documentation

• Maintain runbooks, architecture diagrams, and system configuration documentation.Documentation must beconsidered a deliverable– not a “nice to have.”
• Followindustry-standard Change Management practices for all system changes.

To be successful in this role, you will need:

Experience & Location

• At least6years of direct experience supporting a hybrid or remote workforce of at least 50 employees as an engineer.
• Comfortable working fully remote with travel to our offices in California as described above.
• Able to demonstratepasthistory of performing duties in a high-trust role.

Technical Skills

• Strong history of managing mission-critical Azure Virtual Desktops and application-specific servers.
• Deep,hands-on experience with Microsoft 365andEntra ID, including conditional access, provisioning, identitygovernanceand general administration.
• Experience managing a distributed fleet of endpoints and mobile devices using Intune,NinjaOne,WorkspaceOneor comparable tools.
• Proventrack recordof utilizing PowerShell to administer Microsoft 365 and Azure.

How You Work

• Azero-trust security mindsetdemonstratedthrough the methods you provide IT service and engineer solutions.
• Excellentcustomer service skills and the ability to translate complex technical issues into plain language that anyone can understand.

Physical Requirements

• Able to perform physical duties that may includelifting upto 50lbs, climbing ladders indoors, crawling under furniture and reaching behind wall-mounted equipment.

Bonus Points forexperience withor having:

• Supporting CAD and GIS applications, such as AutoCAD, Civil3D,ArcGISand spatial datasets.
• Supporting Egnyte, Deltek VantagePoint, Elevia or markup tools like Bluebeam and Adobe Acrobat.
• Microsoft certifications, including (but not limited to) AZ-104, AZ-140, AZ-305,AZ-700,SC-200, SC-300, SC-401, MS-102or MD-102.
• Familiarity withindustry-standard frameworks, such as CMMCL1/L2, NIST SP 800-171, CCPA, SOC 2, ITSM,orITIL.
• Executing platform migrations using third-party tools and/or PowerShell.
• Integrating IAM automations into ITSM platforms such as Jira,Freshservice,ZendeskorSolarWinds.
• Supporting the implementation of data retention policies.
• Administering UniFi Network and Protect.

WRA has an established internal leveling system for our staff thatmaps tosalary bands that have been informed by market data. Our leveling system is dependent on years of relevant industry experience, education, and the level of responsibility and autonomy at whichyou’reexpected tooperate.

We have posted a salary range that corresponds to theappropriate levelfor this position. In your first conversation with our recruiter, we will discuss leveling and compensation with you to make sure that our expectations are aligned.

*The salary range for this position is$125,000 – $145,000

Who are we?

WRA’s an employee-owned environmental consultancy. We are a tenacious team of planners, engineers, and scientists, and we aim to leave the lands we love better than we found them.

Our clients and partners hire us becausewe’reskilled at navigating through challenging projects involving wildlands, parks, community spaces, and infrastructure. We bring over four decades ofexpertise, long-standing relationships, and connections to our local communities to make sure that projects are pursued in responsible ways where both people and the environment thrive.

As an organization, we believe that independence and interdependence are not mutually exclusive. We invest in systems, processes, and employee programs to support our staff’s collective engagement and success. At the same time, we encourage our employees tooperatewith an ownership mindset, taking responsibility foroutcomesand being true to our commitments.

WRA’s company vision is to cultivate a sustainable future where people and the environment thrive, and that effort starts first with our staff. We are committed to building a diverse, equitable, and inclusive work environment, and we have developed flexible policies, internal practices, and are investing in programs that prioritize learning and sustainability. We aim to create conditions that allow employees to prioritize their families, lead healthy and balanced lives, and to bring their authentic selves to work every day. We believe that by creating an exceptional workplace, our employees will be able to do their best work and be able to meaningfully contribute to the sustainability of the environment and the communities in which we live.

WRA is an equal opportunity employer, and we are committed to creating a diverse environment. We recruit, employ, train,compensateand promote regardless of race, religion, color, national origin, gender, sexual orientation, disability, age, veteran status, and other protected status as required by applicable law.