Position Overview
An elite international law firm is seeking a Senior Systems Engineer to join its Infrastructure & Security team in the New York office. The firm has approximately 1,300 attorneys across 16 offices in six countries. The Senior Systems Engineer will be responsible for designing, implementing, administering, and supporting enterprise Windows infrastructure, virtualization, identity, networking, and storage environments. The ideal candidate will have strong hands‑on expertise with Microsoft Hyper‑V, SCVMM, Cisco Intersight, Active Directory, and enterprise storage platforms, along with experience working in highly regulated environments. This is an excellent opportunity for an experienced infrastructure professional who enjoys solving complex technical challenges and working with modern enterprise infrastructure technologies.
Key Responsibilities Virtualization & Infrastructure
- Architect and manage Microsoft Hyper‑V clusters, including live migration, failover clustering, and Storage Spaces Direct (S2D).
- Administer System Center Virtual Machine Manager (SCVMM) for Hyper‑V host management, logical networks, VM provisioning, and cluster lifecycle operations.
- Configure and maintain virtual networking, including VM switches, VLANs, QoS, and SR‑IOV.
- Manage the complete VM lifecycle, including provisioning, snapshots, backup integration, and decommissioning.
- Performance‑tune Hyper‑V hosts and troubleshoot complex hypervisor‑level issues.
- Implement Hyper‑V Replica for disaster recovery and business continuity.
- Support and execute server migrations from VMware to Hyper‑V.
- Build and maintain standardized Windows Server OS images.
Automation & Systems Management
- Develop and maintain PowerShell automation for infrastructure provisioning, monitoring, reporting, maintenance, and operational workflows.
- Automate repetitive infrastructure and systems administration tasks to improve reliability and efficiency.
- Develop documentation and operational procedures for enterprise infrastructure platforms.
Cisco Infrastructure
- Administer and maintain Cisco Intersight for server lifecycle management, policy‑based configuration, and UCS infrastructure health.
- Build and assign Cisco IMM domains and server profiles and policies.
- Manage Cisco firmware upgrades and server lifecycle operations.
- Troubleshoot Cisco server and infrastructure issues in production environments.
Active Directory & Identity
- Design, administer, and maintain Active Directory domains, forests, and trusts across multi‑site environments.
- Manage Group Policy Objects (GPOs) for security baselines, software deployment, and system configuration.
- Design and implement Role‑Based Access Control (RBAC) models aligned with least‑privilege principles.
- Monitor Active Directory health and troubleshoot replication issues.
- Support schema management and enterprise AD architecture.
- Implement Active Directory tiering models and privileged access workstation (PAW) strategies.
- Manage hybrid identity environments using Microsoft Entra ID, including Entra Connect synchronization, pass‑through authentication, and seamless SSO.
DNS, DHCP & Networking
- Administer enterprise DHCP infrastructure, including scope management, failover, and high‑availability configurations.
- Manage internal and external DNS zones, records, and conditional forwarding across hybrid environments.
- Troubleshoot DNS, DHCP, IP allocation, and name‑resolution issues across complex multi‑VLAN networks.
- Apply strong knowledge of TCP/IP, VLANs, routing, firewall rules, and enterprise networking principles.
Storage & Disaster Recovery
- Administer and troubleshoot enterprise storage platforms, including Pure Storage, NetApp, and Dell EMC Unity.
- Perform storage provisioning, capacity planning, firmware upgrades, and performance monitoring.
- Support high availability, backup, disaster recovery, and infrastructure integrations.
- Collaborate with infrastructure and security teams to maintain reliable production environments.
Security & Compliance
- Support infrastructure security and compliance requirements within a highly regulated professional‑services environment.
- Implement and maintain network segmentation and security controls.
- Deploy and manage Guardicore Centra for network micro‑segmentation and east‑west traffic control.
- Follow established enterprise change‑management, security, and operational procedures.
Qualifications
- 5+ years of experience in Windows infrastructure engineering, systems engineering, or infrastructure architecture.
- Mandatory: Strong hands‑on experience with Microsoft Hyper‑V in clustered production environments.
- Strong experience with Microsoft System Center Virtual Machine Manager (SCVMM).
- Experience managing Hyper‑V replication and disaster recovery environments.
- Hands‑on experience with Cisco Intersight, UCS, server profiles, policies, and firmware management.
- Strong knowledge of Active Directory, DNS, DHCP, and Windows Server administration.
- Experience with Microsoft Entra ID and hybrid identity architectures.
- Strong understanding of networking fundamentals, including TCP/IP, VLANs, routing, and firewall rules.
- Experience with enterprise storage platforms such as Pure Storage, NetApp, or Dell EMC Unity.
- Strong PowerShell scripting and automation skills.
- Experience with enterprise change‑management processes.
- Experience with Guardicore Centra or network micro‑segmentation technologies is highly preferred.
- Excellent troubleshooting, communication, documentation, and problem‑solving skills.
- Experience supporting infrastructure within a legal, financial, healthcare, or other highly regulated enterprise environment is preferred.
Preferred Technical Skills
Microsoft: Hyper‑V, SCVMM, Windows Server, Active Directory, Group Policy, Entra ID, PowerShell, DNS, DHCP
Virtualization: Hyper‑V, Hyper‑V Replica, VMware-to-Hyper‑V migrations
Cisco: Cisco Intersight, UCS, IMM, server profiles, firmware management
Storage: Pure Storage, NetApp, Dell EMC Unity
Networking: TCP/IP, VLANs, routing, QoS, SR‑IOV, virtual networking
Security: Guardicore Centra, RBAC, AD tiering, PAW
DR/BC: Hyper‑V Replica, backup integration, high availability
Compensation & Benefits
Salary: $140,000–$180,000 annually, depending on experience, technical expertise, and overall qualifications.
The firm offers a competitive compensation package, comprehensive benefits, and professional development opportunities in a collaborative and highly technical environment.
Ideal Candidate Profile
The strongest candidates will have a combination of deep Hyper‑V/SCVMM expertise + Cisco Intersight + Active Directory/hybrid identity experience. Experience with enterprise storage, PowerShell automation, and regulated environments will be highly valued.
Skills: enterprise,active directory,networking,microsoft,cisco,security,hyper-v,management,infrastructure,storage