System Engineer

TrustedTech; Irvine (CA); On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical coverage

Dental & Vision

401(k) with company match

Paid vacation

Parental leave

Employee Assistance Program (EAP)

Job summary

TrustedTech is seeking a technically capable and operationally driven Systems Engineer to join our internal Information Technology department. This hands‑on role focuses on implementing, configuring, maintaining, and improving systems and platforms trusted by employees daily.

In a Microsoft‑first environment, you will own tasks spanning Microsoft cloud services, on‑prem infrastructure, automation, and internal tooling, proactively resolving issues and growing with a team of engineers.

Qualifications

• 4+ years in a systems engineering or similar IT role with Microsoft cloud and on‑prem infrastructure ownership.
• Strong ability to configure and maintain Microsoft 365 workloads (Exchange Online, Teams, SharePoint, OneDrive, Intune).
• Experience with Entra ID/Azure AD, Conditional Access, MFA, and RBAC in hybrid/cloud environments.
• Hands-on with on‑premises Windows Server, AD DS, DNS and DHCP.
• Scripting in PowerShell for admin automation and operations.
• Experience with Intune-based device enrollment, compliance, and app deployment.
• Familiarity with Azure VMs, VNets, storage, and resource management.
• Strong troubleshooting across Windows Server, 365 services, identities, and networking.
• Valid Microsoft certifications (AZ-104 and/or MS-102) are a strong plus.
• Excellent written and verbal communication in a remote-first environment.

Responsibilities

• Implement, configure, and deploy internal systems and infrastructure components per architectural designs.
• Build and configure Microsoft 365 workloads, supporting new deployments and ongoing changes.
• Configure and maintain on‑premises infrastructure (Windows Server, AD DS, DNS, DHCP).
• Support Azure resources (VMs, VNets, storage) for internal operations.
• Participate in hybrid identity configurations (Entra Connect) for consistent identity management.
• Own day-to-day operational health, monitoring, and security posture.
• Perform patching, updates, certificates, and configuration hygiene.
• Manage Intune device enrollment, compliance, and app deployment.
• Maintain identity/access management (Entra ID, RBAC, MFA, PIM) and access reviews.
• Support backups, DR tests, and remediation of failures.

Skills

Microsoft 365 admin

Azure fundamentals

Active Directory

PowerShell scripting

Intune endpoint management

Hybrid identity

Troubleshooting

Communication

IT governance

Education

AZ-104 / MS-102 certification

Tools

Windows Server

Active Directory

DNS/DHCP

Entra Connect (AAD Connect)

Job description

TrustedTech is seeking a technically capable and operationally driven Systems Engineer to join our internal Information Technology department. This role sits within a focused, high-performing IT team, occupying the implementation and operational layer of TrustedTech’s internal technology environment. The Systems Engineer is responsible for implementing, configuring, maintaining, and continuously improving the systems and platforms that TrustedTech employees depend on every day.

This is a hands-on, execution-focused role that spans Microsoft cloud services, on-premises infrastructure, system automation, and internal tooling. The ideal candidate is a self-directed technical professional who takes pride in keeping systems running cleanly, brings a proactive mindset to identifying and resolving issues before they impact the business, and is motivated by the opportunity to grow alongside a team of strong engineers in a Microsoft-first environment.

Responsibilities:

Systems Implementation & Configuration:

• Implement, configure, and deploy internal systems and infrastructure components based on architectural designs and specifications provided by the Sr. Infrastructure Architect, ensuring accurate, well-documented, and production-ready delivery.
• Build and configure Microsoft 365 workloads including Exchange Online, SharePoint, Teams, OneDrive, and Microsoft Intune, supporting both new deployments and ongoing configuration changes as TrustedTech’s environment evolves.
• Configure and maintain on-premises infrastructure components including Windows Server environments, Active Directory Domain Services, Group Policy objects, DNS, and DHCP services in line with established standards.
• Support the setup, configuration, and maintenance of Azure resources including virtual machines, virtual networks, storage accounts, and associated services that underpin TrustedTech’s internal operations.
• Participate in the implementation of hybrid identity configurations, including Entra Connect (AAD Connect) synchronization, ensuring consistent identity management across cloud and on-premises environments.

Systems Operations & Maintenance:

• Own day-to-day operational health across assigned internal systems, proactively monitoring performance, availability, and security posture and addressing issues before they impact the business.
• Perform routine systems maintenance including patch management, software updates, certificate renewals, and configuration hygiene across cloud and on-premises environments.
• Manage endpoint compliance and device management through Microsoft Intune, including device enrollment, compliance policy enforcement, application deployment, and configuration profile management.
• Maintain user identity and access management across Microsoft Entra ID, including provisioning and deprovisioning workflows, group and role management, and ongoing access reviews.
• Support backup and disaster recovery operations, ensuring backup jobs run successfully, recovery procedures are tested, and any failures are identified and remediated promptly.

Automation & Process Improvement:

• Develop and maintain PowerShell scripts and automation workflows to reduce manual effort across routine systems administration, provisioning, monitoring, and reporting tasks.
• Identify repetitive or error-prone manual processes within the IT team’s operational workflows and proactively build automation or tooling to address them, surfacing improvements to the Director, IT and Sr. Infrastructure Architect.
• Contribute to the development and upkeep of internal runbooks, standard operating procedures, and system documentation, ensuring the team’s institutional knowledge is captured, current, and accessible.
• Support the evaluation and implementation of new tools or process improvements recommended by the Sr. Infrastructure Architect or Director, IT, contributing hands‑on technical execution to approved initiatives.

Security, Compliance & Governance:

• Assist in the implementation and ongoing maintenance of internal security controls, including endpoint protection tooling, email security policies, data loss prevention configurations, and Conditional Access policies.
• Support identity security controls including MFA enforcement, role-based access control (RBAC), and Privileged Identity Management (PIM) configurations in alignment with TrustedTech’s security standards.
• Contribute to internal audit and compliance activities by providing system documentation, configuration evidence, and access records as required.
• Monitor security alerts and operational events across TrustedTech’s internal environment, escalating findings to the Sr. Infrastructure Architect or Director, IT as appropriate.

Collaboration & Cross-Functional Support:

• Work closely as a peer with the Sr. Infrastructure Architect and Lead IT Support Administrator, contributing to shared IT team projects, coordinating on system changes, and supporting escalated technical issues that cross the boundary between support and systems engineering.
• Partner with the Lead IT Support Administrator on complex infrastructure‑related helpdesk escalations, providing systems‑level troubleshooting and resolution support where end‑user issues have an underlying systems cause.
• Collaborate with cross‑functional departments including Operations, Finance, and HR to support system rollouts, access provisioning, and IT‑related operational changes as needed.
• Stay current on Microsoft platform updates, security advisories, and enterprise systems best practices, bringing relevant insights to the team and flagging items that may require action in TrustedTech’s environment.

Required Skills & Qualifications (must-haves):

• 4+ years of hands‑on experience in a systems engineering, systems administration, or related internal IT role, with demonstrated ownership of Microsoft cloud and on‑premises infrastructure in a corporate environment.
• Strong working knowledge of Microsoft 365 services including Exchange Online, Teams, SharePoint, OneDrive, and Microsoft Intune, with practical experience configuring and maintaining these platforms.
• Solid experience with Microsoft Entra ID (Azure AD), including user and group management, Conditional Access, MFA, and role‑based access control in a hybrid or cloud‑native environment.
• Hands‑on experience with on‑premises Microsoft infrastructure including Active Directory Domain Services, Windows Server, Group Policy, DNS, and DHCP.
• Practical PowerShell scripting skills for systems administration, automation, and operational task efficiency across Microsoft 365 and Active Directory.
• Experience with Microsoft Intune for endpoint management, including device enrollment, compliance policy configuration, and application deployment.
• Familiarity with Azure fundamentals including virtual machines, virtual networks, storage, and resource management.
• Strong troubleshooting skills across Windows Server environments, Microsoft 365 services, identity systems, and networking fundamentals.
• Microsoft Certification Required: at minimum AZ-104 (Azure Administrator Associate) or MS-102 (Microsoft 365 Administrator); additional certifications are a strong plus.
• Effective written and verbal communication skills, with the ability to collaborate clearly across technical and non‑technical colleagues in a remote‑first environment.

Preferred Skills & Qualifications (nice‑to‑haves):

• Experience working within a Microsoft Cloud Solution Provider (CSP) or Microsoft partner environment, with familiarity with TrustedTech’s product and service ecosystem.
• Working knowledge of hybrid identity scenarios including Entra Connect (AAD Connect) synchronization, password hash sync, and coexistence configurations between on‑premises Active Directory and Microsoft 365.
• Familiarity with Microsoft Defender for Endpoint, Defender for Office 365, or Microsoft Purview for internal endpoint protection and data governance.
• Exposure to networking fundamentals including VLANs, VPN configuration, firewall concepts, and basic network troubleshooting in a corporate environment.
• Experience with backup and disaster recovery tooling, including configuration, monitoring, and recovery testing in a Windows and Azure environment.
• Familiarity with ITSM or helpdesk platforms such as ConnectWise, ServiceNow, or Zendesk, used in the context of IT change management and incident tracking.
• ITIL Foundation certification or exposure to structured IT service management frameworks applied in a corporate IT context.
• Experience with infrastructure‑as‑code or configuration management tooling (e.g., Terraform, Bicep, or DSC) as a complement to hands‑on systems engineering work.
• Type: Onsite, Monday - Friday (UCI Research Park, Irvine, CA)
• Hours: 6:00 am to 3:00 pm PT OR 7:00 am to 4:00 pm PT
• Compensation Range: $120K - $140K (*DOE)

• - 100% employer-paid base medical coverage: HMO (CA) | PPO (out-of-state)
• - Dental and vision coverage
• - 401(k) with 4% company match (fully vested)
• - Paid vacation, sick leave, and holidays
• - Paid parental leave
• - Voluntary benefits (STD*, life/AD&D, accident, critical illness, hospital)
• - Employee Assistance Program (EAP)
• (*Short-term Disability available for employees outside California)

*TrustedTech is an equal opportunity employer and does not discriminate on the basis of race, color, religion, sex, age, national origin, veteran status, disability, sexual orientation/gender identity, or any other characteristic protected by applicable law.*