Senior Systems Engineer

WRA, Inc.; United States; Remote; USD 125,000 - 145,000; Full time

Job summary

WRA, Inc. is seeking a Senior Systems Engineer to lead cloud infrastructure, IAM, and security operations for a distributed 100-person workforce. You will own Azure/VDI, Microsoft 365, Entra ID, and endpoint management, while coordinating with the Director of IT & Cybersecurity. Remote-friendly with occasional travel to offices.

The role emphasizes standing up new tools, migrating from MSP to in-house IT, and building automations to improve secure, efficient operations.

Qualifications

• Experience managing Azure/M365 environments and IAM
• Ability to deploy and automate cloud infrastructure
• Familiarity with security operations and incident response

Responsibilities

• Own Azure infrastructure and VDI for CAD/GIS/Accounting teams
• Manage Microsoft 365 including Exchange, SharePoint, OneDrive, Teams
• Administer Entra ID and SSO, implement conditional access
• Maintain endpoint management and Autopilot configurations
• Develop automation using PowerShell and Microsoft Graph
• Collaborate on cyber security posture with Director
• Support change management and documentation practices

Skills

Azure

Microsoft 365

Entra ID

PowerShell

Microsoft Graph

Automation

IAM

Tools

Azure Virtual Desktop

Exchange

SharePoint/OneDrive

Intune/MDM

Autopilot

Claude AI

Job description

We’rehiringa Senior Systems Engineer as WRAbuildsits new internal IT & Cybersecurity functions. We are actively transitioningfrom an MSP model to a fully in-housemodel,and this role willoperateunder the guidance of our Director ofInformation Technology& Cybersecurity.This isalsoan excellent role for someone looking to refinetheircybersecurity skillset.

In this role, you will act as the primary engineer for ourcloud andSaaS platforms, including Microsoft 365, Azure infrastructure, Entra ID, endpoint management, and a variety of general platforms used by each of our departments.Initially, most of your timewill focuson standingupnew tools andassistingin the migration of select tools used by our MSP.Afterwards, your general duties willshift toengineeringAzure Virtual Desktop, Microsoft 365/Entra ID, endpointmanagementand building automations.

You will be highly autonomous and will work closely with yourDirectortomaintainand improve our current technology stack. Our100-personworkforce is highly distributed,and your priority is engineeringourtoolstoenableour stafftodotheir best work securely,efficientlyand consistently.

WRA has offices in the San Francisco Bay Area (San Rafael, Petaluma, and Emeryville) and in San Diego. This position may be performedfullyremotely by candidateslocatedin California, Colorado, Arizona, orOregonbut travel to our offices may benecessary1-2 times per year on average.

Candidates in the Denvermetro areaare especiallyencouraged to apply.

In this role, you will be responsible for:

Cloud Infrastructure

• Own our Azure environment, including Azure Virtual Desktopand virtual servers,whichenablesourCAD,GISand Accountingteams. This includes image management, patching, right-sizing,scalingand scheduling,backups,performance optimization, and software versioning.

• Deployactionable virtual machine monitoring to measure performance(CPU, GPU, memory,diskand session latency),idle capacityandactive usetime,andimplementalertstomonitorthese metrics.

• Perform root-cause analysis of virtual infrastructure concerns and propose solutions.

• Administer our Microsoft 365 environment, including Exchange, SharePoint& OneDrive,Teamsanddatagovernance.

• Engage with your Director and our specialized departments to ensure their tools are appropriately sized, configured and performant.

• Co-manage our SaaS and cloud infrastructure backup platforms,including forMicrosoft 365, Azure virtualmachinesand other platforms.

Identity & Access Management (IAM)

• Administer Entra ID and SSO, including conditional access, authentication, dynamic groups, and guest access governance.

• Own employee identity lifecycle automations for onboarding,offboardingand role changes.

• Maintain SCIM provisioning across our SaaS applications.

Endpoint & Mobile Device Management

• Manage our Windows and limited Mac fleet by administering our endpoint management platform, including device enrollment, Autopilot, compliance & configuration policies, appdeploymentsand system patching.

• Manage our mobile device configuration and application policies.

AI & Automations

• Automate IT processes using PowerShell, MicrosoftGraphand other platforms to reduce oreliminatemanual administrative tasks and to ensure consistent quality.

• Collaborate with your Director and other stakeholders to improve our implementation of Claude AI, including Connector configurations,Skillsand Design.

Cybersecurity

• Partner with your Directorto build newsecurityoperationscapabilitiesfrom product selection and concept trialsthroughimplementation and administration.

• Alongside yourDirector, administer our security stack, including our managed detection and response platform, email security, DNS and web filtering, and vulnerability management.

• Participate inourincident response process,including investigations and root-causeanalyses,andapply technical containment measures as directedor delegated.

• Assistin strengtheningour infrastructure to be compliant with industry-standard benchmarks such as CMMC and NIST SP 800-171.

General IT Support

• Work with ourITOperationsSpecialist as needed and serve asafinalescalation point for complex IT Support requests.

• Participate inanon-call rotation for criticalbut rareIT outages and other emergent duties.

Change Management & Documentation

• Maintain runbooks, architecture diagrams, and system configuration documentation. Documentation must beconsidered a deliverable - not a "nice to have."

• Followindustry-standard Change Management practices for all system changes.

How You Work

• Azero-trust security mindsetdemonstratedthrough the methods you provide IT service and engineer solutions.

• Excellentcustomer service skills and the ability to translate complex technical issues into plain language that anyone can understand.

Physical Requirements

• Able to perform physical duties that may includelifting upto 50lbs, climbing ladders indoors, crawling under furniture and reaching behind wall-mounted equipment.

Bonus Points forexperience withor having:

• Supporting CAD and GIS applications, such as AutoCAD, Civil3D,ArcGISand spatial datasets.

• Supporting Egnyte, VantagePoint,Eleviaor markup tools like Bluebeam and Adobe Acrobat.

• Microsoft certifications, including (but not limited to) AZ-104, AZ-140, AZ-305,AZ-700,SC-200, SC-300, SC-401, MS-102or MD-102.

• Familiarity withindustry-standard frameworks, such as CMMCL1/L2, NIST SP 800-171, CCPA, SOC 2, ITSM,orITIL.

• Executing platform migrations using third-party tools and/or PowerShell.

• Integrating IAM automations into ITSM platforms such as Jira,Freshservice,ZendeskorSolarWinds.

• Supporting the implementation of data retention policies.

• Administering UniFi Network and Protect.

WRA has an established internal leveling system for our staff thatmaps tosalary bands that have been informed by market data. Our leveling system is dependent on years of relevant industry experience, education, and the level of responsibility and autonomy at whichyou’reexpected tooperate.

We have posted a salary range that corresponds to theappropriate levelfor this position. In your first conversation with our recruiter, we will discuss leveling and compensation with you to make sure that our expectations are aligned.

*The salary range for this position is$125,000 - $145,000

Who are we?

WRA’s an employee-owned environmental consultancy. We are a tenacious team of planners, engineers, and scientists, and we aim to leave the lands we love better than we found them.

Our clients and partners hire us becausewe’reskilled at navigating through challenging projects involving wildlands, parks, community spaces, and infrastructure. We bring over four decades ofexpertise, long-standing relationships, and connections to our local communities to make sure that projects are pursued in responsible ways where both people and the environment thrive.

As an organization, we believe that independence and interdependence are not mutually exclusive. We invest in systems, processes, and employee programs to support our staff’s collective engagement and success. At the same time, we encourage our employees tooperatewith an ownership mindset, taking responsibility foroutcomesand being true to our commitments.

WRA’s company vision is to cultivate a sustainable future where people and the environment thrive, and that effort starts first with our staff. We are committed to building a diverse, equitable, and inclusive work environment, and we have developed flexible policies, internal practices, and are investing in programs that prioritize learning and sustainability. We aim to create conditions that allow employees to prioritize their families, lead healthy and balanced lives, and to bring their authentic selves to work every day. We believe that by creating an exceptional workplace, our employees will be able to do their best work and be able to meaningfully contribute to the sustainability of the environment and the communities in which we live.

WRA is an equal opportunity employer, and we are committed to creating a diverse environment. We recruit, employ, train,compensateand promote regardless of race, religion, color, national origin, gender, sexual orientation, disability, age, veteran status, and other protected status as required by applicable law.