Sr. System Engineer

Gotham Technology Group; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Gotham Technology Group in New York is seeking a Senior Engineer to own the performance and reliability of a hybrid Azure/on-prem platform. This hands-on role requires deep Azure experience, strong identity/security knowledge, and a track record of delivering scalable infrastructure.

You will partner with IT teams, design and troubleshoot across cloud and on-prem, automate with IaC, and contribute to incident response and governance. Superior collaboration and problem-solving are essential.

Qualifications

• 10+ years of hands-on cloud/infrastructure experience with demonstrated Azure depth.
• Strong Windows Server, Active Directory, and networking knowledge.
• Experience with IT operations, monitoring, backup, and incident response.

Responsibilities

• Support hybrid infrastructure including Azure cloud services and on‑prem servers.
• Design, troubleshoot, and optimize across cloud and on‑prem environments.
• Automate infrastructure using IaC and scripting to improve reliability.
• Respond to incidents, participate in on‑call rotations, and document procedures.
• Collaborate with IT teams and vendors on deployments and governance.

Skills

Azure

Infrastructure as Code

PowerShell

Python

Active Directory

Education

Bachelors degree in Computer Science / Information Technology

Tools

Cisco UCS

Pure Storage

VMware

SCCM

Intune

Job description

Position Summary

The Senior Engineer is a key contributor to the performance, reliability, and evolution of a modern hybrid technology platform spanning Azure cloud and on-premises environments. This is a hands-on, high-impact role for someone who has already made the transition from traditional infrastructure into modern cloud engineering, and who thrives on solving complex technical problems in a fast-paced, mission-critical, high-availability environment.

The ideal candidate is familiar with Azure infrastructure, identity, automation, and security, and Windows Server, Active Directory, and virtualization knowledge to design, troubleshoot, and support solutions across the full hybrid stack. This person will partner closely with IT teams and vendors to build resilient, well-governed infrastructure, and will take direct ownership of system performance, incident response, and continuous improvement.

Essential Functions

• Support the day-to-day operation, monitoring, and maintenance of hybrid infrastructure, including Azure cloud services, on-prem servers, networks, storage, and enterprise applications.
• Design and support hybrid solutions spanning Azure and on-premises environments
• Proactively monitor system performance, availability, and capacity using enterprise monitoring/observability tools; identify and resolve issues before they impact the business.
• Respond to and troubleshoot infrastructure incidents across cloud, network, storage, and application layers, ensuring timely resolution and minimal disruption.
• Participate in on-call rotation and after-hours support for critical incidents, outages, and operational escalations.
• Build, automate, and maintain infrastructure using Infrastructure-as-Code and scripting (e.g., Terraform, Bicep, ARM, PowerShell, Python) to improve efficiency, reliability, and scalability.
• Support identity and access management, including Entra ID (Azure AD), Active Directory, RBAC, managed identities, MFA/SSO, and privileged access controls.
• Support system patching, upgrades, and vulnerability remediation to maintain a secure, compliant environment.
• Collaborate cross-functionally on new system implementations, application deployments, and infrastructure changes.
• Maintain and improve documentation for systems, processes, configurations, and incident response procedures.
• Work with third‑party vendors and service providers to support infrastructure services and resolve issues.
• Support backup, disaster recovery, and business continuity processes
• Analyze system logs, metrics, and alerts to identify root causes and recommend long‑term improvements.
• Contribute to operational standards, governance, tagging, and best practices across cloud subscriptions and management groups.

Technical Skills & Requirements

• Comfortable evaluating an application architecture to determine networking, identity, connectivity, monitoring, and recovery design.

Identity & Security

• Entra ID (Azure AD), RBAC, Managed Identities, application registrations/enterprise applications, token audience and authorization concepts.
• Understanding of how modern authentication differs from traditional Windows authentication
• Active Directory, DNS, MFA, SSO, and privileged access management.
• Familiarity with zero trust networking concepts and platforms a plus
• Must understand how infrastructure, networking, identity, and security operate around PaaS workloads.

Automation / Infrastructure as Code

• Scripting proficiency in PowerShell, Python, and/or Bash for operational automation.

Traditional / Hybrid Infrastructure

• Working knowledge of Windows Server, Active Directory, and DNS.
• Familiarity with virtualization technologies (e.g., VMware) and, ideally, Citrix, storage, and traditional infrastructure, enough to troubleshoot across the full stack, though deep specialization is not required.
• Understanding of enterprise storage platforms and backup/replication/disaster recovery strategies.
• Solid grasp of networking fundamentals: TCP/IP, DNS, routing, firewalls, VPNs.

Operations & Tooling

• Experience with monitoring/observability tools
• Experience with ITSM tools and processes (incident, problem, and change management); ITIL familiarity preferred.

Education & Experience

• 10+ years of relevant, hands‑on experience in cloud/infrastructure engineering, IT operations, or systems engineering, with demonstrated depth in Azure.
• Strong experience with Cisco UCS compute and Pure Storage (or similar) environments
• Windows Server administration including SQL, Exchange, and Active Directory (planning, deployment, maintenance)
• Active Directory expertise: troubleshooting, replication, domain setup, GPOs, ACLs
• Office 365, Azure AD, and related Microsoft 365 services
• MS security tools (Defender ATP, Intune) and vulnerability scanning/remediation (e.g., Rapid7) a plus
• Knowledge of authentication/security protocols: SAML, Kerberos, RADIUS, MFA, PAM/PIM
• SCCM (or similar) for patching and software deployment
• Monitoring platform management with custom alerting/reporting
• PowerShell scripting and CI/CD pipeline experience with code repositories
• 4‑year college degree preferred (Computer Science, Information Technology, or related field).