Systems Engineer

Chris Baily; New York (NY); On-site; USD 125,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

401(k) plan

Life insurance

Disability insurance

One Medical membership

Gym reimbursement

Health Savings Account

Flexible time off

Parental leave

Sabbatical

Hybrid remote work

Job summary

BBR Partners in New York City seeks a Systems Engineer to join our IT team. The full-time role requires presence three days per week at the NYC headquarters and 6–8 years of experience in systems engineering, infrastructure, or IT operations.

You will manage Windows servers and AD, administer VMware/Nutanix, Azure Entra ID, Office 365, Citrix, and security tooling, build automation with PowerShell or Python, and collaborate with Development to ensure reliability and compliance.

Qualifications

• Experience managing a Windows environment (Windows 11/Server 2019/22) and Active Directory.
• Experience with Linux environments and major cloud providers (preferably Microsoft Azure).
• Experience with Office 365 (Exchange Online, SharePoint, Teams, Power Platform/CRM).
• Experience with hypervisors (VMware ESXi) and networking fundamentals.
• Strong scripting (PowerShell) and endpoint management (Intune).
• Ability to operate in regulated environments with incident response and runbooks.

Responsibilities

• Infrastructure & Platform Management: Administer Windows servers/workstations, AD/Entra ID, DNS/DHCP, and certificate services.
• Cloud & Identity: Manage Azure environments, Entra ID, conditional access, MFA, and cloud networking.
• Monitoring, Operations & Reliability: Monitor performance and automate IT processes using PowerShell or Python.
• Security & Compliance: Implement system hardening, patching, logging, and coordinate with MSSP for SIEM.
• Data, Applications & Integrations: Support SQL Server/PostgreSQL, jobs, and secure data flows.
• Collaboration & Support: Provide escalation support and document infrastructure; partner with Development.

Skills

Windows Server administration

Azure administration

Office 365 administration

VMware/Nutanix

Citrix

PowerShell/Python scripting

Entra ID / Azure AD

Networking fundamentals

Incident response & runbooks

Security & compliance basics

Education

Undergraduate degree in Information Technology or related field

Tools

Fortinet

Rubrik

Citrix Virtual Apps & Desktops

Azure Virtual Desktop

SentinelOne

Confluence

Job description

Systems Engineer

BBR Partners is a boutique wealth management firm that provides customized investment strategies and bespoke advice to high‑net‑worth individuals and families. Founded in early 2000, the firm has cultivated a culture of talent, diversity, and community care for over 25 years.

This full‑time position is based in our New York City headquarters, requiring presence three days per week. The role requires 6‑8 years of experience in systems engineering, infrastructure, or IT operations and a self‑starter mindset that thrives in a small‑firm environment.

Responsibilities

• Infrastructure & Platform Management
  • Administer and optimize Windows Servers, workstations, Active Directory/Entra ID, Group Policy, DNS/DHCP, and certificate services.
  • Manage Windows and Linux systems, including patching, hardening, performance tuning, and automation.
  • Administer virtual infrastructure (VMWare/Nutanix), network infrastructure (Fortinet firewalls, Cisco switches), and backup/restore systems (Rubrik).
  • Administer virtual desktop environment (Citrix and Cloud PC/Azure Virtual Desktops).
• Cloud & Identity
  • Operate and secure Azure environments, including Entra ID, conditional access, MFA, and privileged access tools.
  • Configure and maintain cloud networking components (VPC/VNet, VPN, private endpoints, firewalls).
  • Administer O365 environment: Exchange Online, Teams, Entra, Intune, and Dynamics 365.
• Monitoring, Operations & Reliability
  • Monitor system performance, capacity, and availability across on‑prem and cloud environments.
  • Develop automation for IT processes using PowerShell or Python.
  • Participate in incident response, root‑cause analysis, on‑call rotations, and creation of operational runbooks.
• Security & Compliance
  • Implement system hardening (CIS benchmarks), patching, encryption, and logging/monitoring standards.
  • Operate vulnerability management tools and remediate findings within SLA.
  • Administer EDR (SentinelOne) and coordinate with an MSSP to monitor SIEM feeds and alerts.
• Data, Applications & Integrations
  • Support application and database servers (SQL Server, PostgreSQL), scheduled jobs, and secure data flows.
  • Collaborate with third‑party vendors and service providers to deploy managed solutions.
  • Build and maintain DR/BCP capabilities—including backups, failover testing, and documented recovery procedures.
• Collaboration & Support
  • Provide escalation support for infrastructure issues.
  • Document BBR IT infrastructure in Confluence and other knowledge‑base platforms.
  • Work cross‑functionally with the Development team to ensure reliability and performance.
  • Partner with the Director of IT to implement new IT initiatives and solutions.

Qualifications

• Experience managing a Windows environment (Windows 11, Windows Server 2019/22, Active Directory, Group Policy, DNS).
• Experience managing Linux environments.
• Experience managing major cloud service providers, preferably Microsoft Azure.
• Experience managing Microsoft Office 365 (Exchange Online, SharePoint, Teams, Power Platform/CRM).
• Experience with hypervisor solutions (VMware ESXi preferred).
• Understanding of computer networking (routing, switching, VPN, DNS, TLS, etc.) and firewall management (Fortinet preferred).
• Knowledge of Citrix, MS Teams, Zoom, MS Dynamics CRM, and MS SQL Server.
• Familiarity with vulnerability management, EDR (SentinelOne), patching programs, and system hardening.
• PowerShell scripting experience or strong knowledge.
• Experience managing endpoint management solutions (MS Intune preferred).
• Experience with incident response and operational support in regulated environments.
• Undergraduate degree in Information Technology or related field with a strong academic record (preferred).
• Strong written and verbal communication skills, critical thinking, and teamwork.
• Highly motivated, proactive, ethical, professional, with solid organizational skills and attention to detail.
• Financial services experience is a plus.

Benefits

• Competitive base salary and incentive compensation.
• Company‑subsidized medical, prescription, dental, and vision insurance for employee, partner, and dependents.
• 401(k) plan, life insurance, and short‑term and long‑term disability coverage.
• One Medical membership (covered for employee and dependents), employee assistance program, gym reimbursement, and other wellness offerings.
• Pre‑tax transit and parking programs, Health Savings Account (HSA), and flexible spending programs for medical and dependent care.
• Personalized development and career growth opportunities.
• Volunteerism opportunities and matching gift program.
• Flexible time off, paid parental leave, and sabbatical with company tenure.
• Hybrid remote work environment with “Work from Anywhere” weeks and casual dress.
• New office space with catered lunches and stocked pantry.

Base salary for this position will be determined during the interview process and may vary based on experience, expertise, and market factors. The expected base salary range is $125,000 to $150,000 per year at the commencement of employment, though the final offer may be outside this range. Compensation may also include discretionary bonuses, alternative incentive packages, and company‑sponsored benefit programs. This position is at‑will, and the Company reserves the right to modify base salary or other compensation at any time.