Senior Systems Engineer – Cloud, Identity & Platform

Washington Commanders; College Park (MD); On-site; USD 100,000 - 125,000; Full time

Job summary

The Washington Commanders are seeking a Senior Systems Engineer to own the compute, cloud, and identity platform that every other technology lane builds on, across headquarters, the practice facility, and the stadium. This is a hands‑on senior role that sets architecture and standards and reports to the Director of Technology Operations.

You will design, operate, and maintain servers, cloud services, identity governance, and device management across three sites, with on‑call duties for game days

Qualifications

• Eight or more years in systems administration, cloud infrastructure, or enterprise IT operations.
• Hands-on experience administering Microsoft 365 and Azure, including Exchange Online, Teams, and SharePoint.
• Strong identity and access management experience: directory services, single sign-on, MFA, conditional access, and automated lifecycle provisioning, on Microsoft Entra ID or an equivalent platform.
• Experience owning backup, disaster recovery, and business-continuity testing.
• Experience with patching, hardening, configuration baselines, and change control for Windows and macOS environments.
• Scripting and automation such as PowerShell.
• Solid networking fundamentals (TCP/IP, VLANs, VPNs, firewalls) to partner effectively with the Network Engineer.
• Strong documentation, standards-setting, and cross-team collaboration skills.
• Ability to troubleshoot complex infrastructure, cloud, and identity issues.
• Willingness to be onsite and on call during home games and major events.

Responsibilities

• Design, operate, and maintain physical and virtual servers, storage, and the Microsoft 365 and Azure cloud environment.
• Administer core cloud services including Exchange Online, Teams, and SharePoint, with secure access and governance.
• Optimize, operate, and maintain our vSphere environment.
• Set server and cloud architecture standards and reference designs, and approve platform changes.
• Own directory and identity architecture and administration standards on Microsoft Entra ID.
• Implement single sign‑on, multi‑factor authentication, conditional access, and least‑privilege access across business systems.
• Build and maintain automated user lifecycle processes for onboarding, offboarding, role changes, and access reviews.
• Administer Active Directory, including domain controllers, organizational units, DNS and DHCP integration, and directory hygiene, and maintain hybrid identity synchronization between Active Directory and Microsoft Entra ID.
• Design and maintain Group Policy for servers and endpoints.
• Manage the enterprise public key infrastructure and full certificate lifecycle, including issuance, renewal, revocation, and automated deployment of device, user, and TLS certificates.
• Own the certificate services and authentication backend that support 802.1x network access control and certificate‑based device authentication, in partnership with the Network and IT Security lanes.
• Manage privileged and service accounts, enforcing least‑privilege and strong authentication on all administrative access.
• Run backup, disaster recovery, and business‑continuity testing, and maintain recovery standards.
• Validate recovery on a defined schedule so the club can restore quickly when it matters.
• Own patching standards, system hardening, and configuration baselines for servers and endpoints.
• Own the enterprise device management platform for Windows and macOS, including enrollment, configuration profiles, compliance policies, and disk encryption standards.
• Build and maintain standardized OS images and zero‑touch provisioning so devices deploy consistently across all three sites.
• Own software packaging, application deployment, and update standards across the device fleet.
• Own platform‑level data hygiene: directory and identity cleanup, storage and file‑share management, and data retention and lifecycle enforcement.
• Enforce data classification, retention, and access‑governance standards set by IT Security and Enterprise Applications, escalating gaps to the Director.
• Manage change control for platform changes and monitor systems health across all three sites.
• Automate administration and provisioning with scripting such as PowerShell.
• Create and maintain architecture diagrams, standard operating procedures, runbooks, and reference designs.
• Partner with IT Security on hardening, access governance, and compliance, and with Network on connectivity and identity during incidents.
• Serve as a senior escalation point for IT Operations on complex systems issues, and provide technical leadership on infrastructure projects, cloud migrations, and new‑facility builds.
• Support events and game days where systems or identity are involved.

Skills

Systems administration

Cloud platforms

Identity management

PowerShell scripting

Documentation & standards

On-call readiness

Tools

Microsoft 365

Azure

Exchange Online

Teams

SharePoint

vSphere

Active Directory

Microsoft Entra ID

Job description

The Washington Commanders are seeking a Senior Systems Engineer to own the compute, cloud, and identity platform that every other technology lane builds on, across headquarters, the practice facility, and the stadium. This is a hands‑on senior role that sets architecture and standards and reports to the Director of Technology Operations.

You will design, operate, and maintain servers, cloud services, identity governance, and device management across three sites, with on‑call duties for game days