Senior Systems Engineer

Brightonjones; Seattle (WA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Fully paid medical, dental, and vision

401(k) with 100% match up to 3%

Equity ownership opportunities

New Business Incentive Program

Employee referral bonus

Cell phone data reimbursement

Wellbeing and training stipend

Job summary

Brighton Jones is seeking a Sr. Systems Engineer to own and advance a scalable, secure hybrid infrastructure across on‑prem and cloud platforms including Azure, AWS, and M365.

You will partner with Data & Analytics, Applications, Development, and Operations teams to deliver resilient solutions. The role emphasizes automation, secure design, and lifecycle management of infrastructure components, with a focus on zero‑trust and Defender/Purview implementations.

Qualifications

• 8+ years of experience in systems engineering or cloud/infrastructure roles.
• Strong mastery of M365 administration, Azure architecture, and cloud security concepts.
• Proficiency in scripting (PowerShell preferred).
• Deep understanding of identity and access management, conditional access, MFA, and modern authentication.
• Familiarity with NIST, CIS hardening standards, and similar frameworks.
• Strong analytical and problem‑solving skills with ability to work independently to tackle well‑scoped and loosely scoped user stories.
• Effective communication skills with the ability to collaborate with cross‑functional teams and communicate technical concepts to non‑technical stakeholders.

Responsibilities

• Support and maintain hybrid IT infrastructure spanning on‑premises and Azure/AWS cloud environments.
• Architect, deploy, and maintain M365 services including Exchange Online, SharePoint, Teams, Intune, Entra, Purview, and security/compliance features.
• Manage and maintain Windows server environments including Active Directory, Group Policy, DNS, DHCP, and related services.
• Monitor system performance, availability, and capacity across cloud services.
• Troubleshoot and resolve advanced network, server, and connectivity issues.
• Oversee day‑to‑day operations of networking infrastructure, including firewalls, switches, VPNs, SDWAN, and wireless systems.
• Provide oversight of fleet of Windows endpoints and BYOD mobile devices.
• Implement automation (PowerShell, Azure Automation, Logic Apps, Infrastructure as Code) to improve reliability and efficiency.
• Lead lifecycle management for infrastructure components (patching, upgrades, replacements).
• Implement cybersecurity best‑practice controls leveraging Microsoft Defender, Azure security services, Data Loss Prevention, Purview, and zero‑trust principles.
• Partner with Compliance and SOC to support cybersecurity initiatives across the organization and contribute to mitigation strategies to reduce risk.
• Monitor security alerts, perform root‑cause analysis, and apply corrective measures.
• Support incident response activities and participate in security audits using MDR and IR tools.

Skills

M365 administration

Azure architecture

Scripting (PowerShell)

Identity & access management

Cloud security concepts

Communication

Tools

PowerShell

Azure

M365 admin tooling

Infrastructure as Code

Security tooling (Defender)

Job description

Position Summary

The Sr. Systems Engineer will help develop and support a scalable, resilient, and secure infrastructure, owning core components of our hybrid environment across on‑prem and cloud (Azure, AWS, and M365). They will partner with Data & Analytics, Application, Development, and Operations teams to deliver secure, resilient, and scalable solutions.

Responsibilities

• Support and maintain hybrid IT infrastructure spanning on‑premises and Azure/AWS cloud environments
• Architect, deploy, and maintain M365 services including Exchange Online, SharePoint, Teams, Intune, Entra, Purview, and security/compliance features
• Manage and maintain Windows server environments including Active Directory, Group Policy, DNS, DHCP, and related services
• Monitor system performance, availability, and capacity across cloud services
• Troubleshoot and resolve advanced network, server, and connectivity issues
• Oversee day‑to‑day operations of networking infrastructure, including firewalls, switches, VPNs, SDWAN, and wireless systems
• Provide oversight of fleet of Windows endpoints and BYOD mobile devices
• Implement automation (PowerShell, Azure Automation, Logic Apps, Infrastructure as Code) to improve reliability and efficiency
• Lead lifecycle management for infrastructure components (patching, upgrades, replacements)
• Implement cybersecurity best‑practice controls leveraging Microsoft Defender, Azure security services, Data Loss Prevention, Purview, and zero‑trust principles
• Partner with Compliance and SOC to support cybersecurity initiatives across the organization and contribute to mitigation strategies to reduce risk
• Monitor security alerts, perform root‑cause analysis, and apply corrective measures
• Support incident response activities and participate in security audits using MDR and IR tools

Qualifications

• 8+ years of experience in systems engineering or cloud/infrastructure roles
• Strong mastery of M365 administration, Azure architecture, and cloud security concepts
• Proficiency in scripting (PowerShell preferred) and infrastructure automation
• Deep understanding of identity and access management, conditional access, MFA, and modern authentication
• Familiarity with NIST, CIS hardening standards, and similar frameworks
• Strong analytical and problem‑solving skills with ability to work independently to tackle well‑scoped and loosely scoped user stories
• Effective communication skills with the ability to collaborate with cross‑functional teams and communicate technical concepts to non‑technical stakeholders

Employment Details

• This role is an in‑office, full‑time, and exempt position. We are a work‑from‑office culture with a lot of flexibility
• Targeted base salary range is $130,000 – $160,000 per year
• Visa sponsorship: please note we are unable to provide visa sponsorship for the position offered, and we are unable to hire individuals who require, or will require, employment visa sponsorship either now or in the future

Benefits

Ownership & Financial Wellbeing

• Fully paid medical, dental, and vision coverage for employees
• 401(k) with 100% match up to 3% of annual compensation
• Equity ownership opportunities for every employee
• New Business Incentive Program
• Generous employee referral bonus
• Cell phone data reimbursement
• Financial planning services discount for employees and immediate family members

Time & Flexibility

• Minimum 3 weeks PTO starting Day 1
• Winter Break, Summer Friday flex‑days, and 10 paid holidays
• Unlimited Volunteer Time Off plus company grant matching
• Heavily subsidized transit

Growth & Development

• 100% reimbursement for required training, certifications, licensing, and dues
• Personal career development plans
• Richer Life Business Partner (coaching for all employees)
• Mindful Emotional & Social Intelligence training
• Annual professional & personal wellbeing stipend

Connection & Community

• Quarterly team‑building events
• Regular social events
• Employee‑led book clubs, committees, and affinity groups

Family & Milestones

• Paid parental leave (13 weeks for birthing parent and 6 weeks for non‑birthing parent)
• Adoption benefits
• Anniversary milestone celebrations, including a 3‑month paid sabbatical at 10 years

Brighton Jones provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or caste. In addition to federal law requirements, Brighton Jones complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has offices. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.