Tier 3 Systems Engineer

Local MSP Provider; Mankato (MN); Remote; USD 85,000 - 95,000; Full time

Job summary

Local MSP Provider seeks an experienced Level 3 Systems Engineer to solve complex problems, design and implement solutions, and lead projects. You will mentor others, manage escalations, and support Microsoft 365, Azure, and on‑premises infrastructure across client environments.

The role blends systems engineering with security, networking, and disaster recovery, with occasional on‑site work in our primary service areas. Remote work within the United States is supported.

Qualifications

• Minimum 3 years in MSP or similar senior engineering role.
• Strong Windows Server administration and troubleshooting skills.
• Experience with cloud platforms and hybrid Active Directory.

Responsibilities

• Own complex escalations from diagnosis through resolution.
• Design, implement, migrate, and secure client environments.
• Lead projects and mentor junior technicians.
• Communicate findings and recommendations clearly to clients.
• Support backup, disaster recover, and security initiatives.

Skills

Windows Server

Active Directory

PowerShell

Microsoft 365

Azure

Networking

VMware

Hyper-V

Security

Tools

Hyper-V

VMware

Fortinet

Datto RMM

Job description

Job Description

Job Description:

Location: Remote within the United States. Open to candidates in Minnesota and Colorado, with preference given to candidates near Mankato, MN; Minneapolis and St. Paul, MN; or Denver, CO. Occasional on-site troubleshooting, installations, or project work may be required, particularly for engineers located near our primary service areas.

Schedule: Monday through Friday, primarily during normal business hours, with occasional after-hours project or escalation work. Salary: $85,000 to $95,000 per year.

About Us We are a cybersecurity-focused Managed Service Provider helping businesses get more value from technology. We provide managed IT services, cybersecurity, Microsoft 365 and cloud solutions, network infrastructure, business continuity and disaster recovery, compliance support, and strategic technology consulting. We do not outsource our technical support. Our engineers work directly with our clients and collaborate closely as a team. We value technical ability, extreme ownership, continuous learning, strong communication, accurate documentation, security, and exceptional client service.

About the Role We are looking for an experienced Level 3 Systems Engineer who can solve complex technical problems, design and implement solutions, lead projects, mentor other technicians, and serve as a senior technical escalation resource. This position combines advanced Tier 3 technical support with systems engineering, cloud infrastructure, networking, cybersecurity, and project responsibilities. When Tier 1 and Tier 2 technicians encounter difficult server, Microsoft cloud, networking, cybersecurity, or infrastructure problems, you are one of the people they elevate to. You will also design, implement, migrate, secure, and improve client technology environments. You should be comfortable independently investigating complex technical problems, developing a plan, implementing a solution, and communicating with the client throughout the process. Candidates whose experience is primarily desktop support, helpdesk, or Microsoft 365 administration without meaningful hands‑on Windows Server experience will not meet the technical requirements of this position.

What You’ll Do

• Windows Server and Active Directory Strong hands‑on Microsoft Windows Server experience is required. You should be comfortable administering, engineering, and troubleshooting:

• Windows Server 2016, 2019, 2022, and newer environments


• Active Directory Domain Services, Domain Controllers, and Active Directory replication


• Group Policy


• DNS and DHCP


• Authentication and domain trust issues


• File servers, NTFS permissions, and shared folders


• Windows services, Event Viewer, storage, networking, and performance


• Hyper‑V and VMware environments


• Windows Server migrations, upgrades, replacements, and decommissioning


• Hybrid Active Directory and Microsoft cloud environments

You must be able to walk into an unfamiliar Windows Server environment, determine how it is configured, identify problems, and independently develop a solution.

Microsoft 365, Azure, and Cloud Engineering Modern client environments increasingly combine traditional infrastructure with cloud-hosted services. You must be comfortable supporting both, including traditional Active Directory, hybrid Active Directory and Entra ID, and cloud-only environments. You will:

• Administer and troubleshoot Microsoft 365 environments, including Exchange Online, SharePoint Online, Microsoft Teams, and Microsoft Intune


• Administer Microsoft Entra ID, including identity, roles, authentication, MFA, and Conditional Access


• Support and troubleshoot Microsoft Azure and cloud-hosted infrastructure, including virtual machines, storage, networking, identity, connectivity, servers, applications, and services


• Lead or assist with client transitions and migrations to Microsoft 365, Azure, Exchange Online, SharePoint, Entra ID, SaaS, and hybrid‑cloud architectures


• Apply modern identity‑security and Zero Trust principles to cloud environments

Networking and Cybersecurity Making something work is only part of the job. It also needs to be secure. You will:

• Configure and troubleshoot LAN and WAN, VLANs, routing, switching, wireless, VPNs, DNS, and DHCP


• Configure and support next‑generation firewalls, switches, wireless access points, and secure remote access


• Work with Fortinet technologies including FortiGate, FortiSwitch, FortiAP, FortiManager, FortiClient, and EMS


• Configure, administer, and troubleshoot iBoss SaaS cloud security solutions


• Support endpoint security, EDR, MFA, email security, SOC monitoring, vulnerability management, and secure web technologies


• Assist with cybersecurity remediation, system hardening, and incident response


• Apply cybersecurity best practices when designing and implementing technical solutions

Systems Engineering and Advanced Escalations

• Own complex technical escalations from diagnosis through resolution


• Perform root‑cause analysis and design long‑term solutions rather than relying on temporary fixes


• Analyze logs, monitoring data, packet captures, and other diagnostic information to resolve complex issues


• Work directly with vendors on advanced technical issues


• Identify opportunities to improve client technology environments


• Clearly communicate technical findings, business impact, and recommended solutions

Projects, Backup, and Disaster Recovery You will lead or participate in projects involving:

• Windows Server replacements and migrations


• Microsoft 365, Azure, Entra ID, SharePoint, file, on‑premises‑to‑cloud, and hybrid‑cloud migrations


• Firewall, network, and wireless projects


• Cybersecurity implementations


• Backup and disaster‑recovery solutions


• Infrastructure modernization

You will develop implementation plans, identify risks, create rollback plans when appropriate, coordinate with clients and vendors, test changes, and accurately document completed work. You will also support backup and disaster‑recovery environments, troubleshoot backup failures, perform restores and recovery testing, and assist during major recovery events.

Mentoring and Technical Leadership A Level 3 Systems Engineer should make the entire technical team stronger. You will:

• Mentor Tier 1 and Tier 2 technicians and review their technical escalations


• Teach troubleshooting skills rather than simply providing answers


• Share technical knowledge with the team and improve technical documentation


• Help establish and improve technical standards and best practices


• Lead through your actions, regardless of title

Required Qualifications

• Minimum of 3 years of MSP experience


• Experience at a Senior Tier 2, Senior NOC, Tier 3, Systems Administrator, Systems Engineer, or comparable technical level


• Significant hands‑on Windows Server administration and troubleshooting experience, including strong Group Policy, DNS, DHCP, authentication, permissions, and Active Directory troubleshooting skills


• Experience performing Windows Server migrations, upgrades, and replacements


• Experience supporting Hyper‑V and/or VMware


• Strong Microsoft 365 and Exchange Online knowledge


• Strong Microsoft Entra ID administration and troubleshooting skills, including MFA, Conditional Access, and modern identity‑security technologies


• Working knowledge of Microsoft Azure and cloud-hosted infrastructure, including Azure Virtual Machines, networking, storage, identity, and cloud‑security concepts


• Experience supporting hybrid Active Directory and Entra ID environments


• Strong networking knowledge, including TCP/IP, VLANs, routing, switching, VPNs, and wireless


• Experience configuring and troubleshooting next‑generation firewalls


• Familiarity with how MSPs use RMM, PSA, documentation, and remote‑support platforms


• Strong root‑cause troubleshooting and problem‑solving skills


• Ability to independently research and learn unfamiliar technologies


• Strong written and verbal communication skills

Technology You'll Work With Our environment includes technologies such as Windows Server, Active Directory, Microsoft 365, Microsoft Entra ID, Azure, Exchange Online, SharePoint, Intune, Hyper‑V, VMware, Fortinet, iBoss SaaS, Datto RMM, Autotask PSA, Kaseya technologies, Datto BCDR, Microsoft Defender, RocketCyber SOC, EDR, vulnerability management, email security, and VoIP and UCaaS platforms. We don't expect candidates to know every product in our stack. We value strong technical fundamentals across traditional infrastructure, cloud services, networking, and cybersecurity, along with MSP experience, troubleshooting ability, and the ability to quickly learn unfamiliar technologies.

What We're Looking for in You

Technical ability alone is not enough.

Extreme Ownership If you own an issue, you own it through resolution or proper handoff. We want engineers whose mindset is \"What needs to happen to get this resolved?\" rather than \"That is not my problem.\"

The Platinum Rule We believe in the Platinum Rule: treat others the way they want to be treated. Every client, coworker, and end user communicates differently. Successful engineers listen first, understand what the person needs, adapt their communication style, explain technology at the appropriate level, and remain patient and professional when someone is frustrated. Technical ability gets the problem solved. The Platinum Rule helps ensure the client has a great experience while we solve it.

Self‑Starter and Continuous Learner You should be comfortable researching documentation, reviewing logs, testing theories, working with vendors, and learning unfamiliar technologies independently. Technology changes quickly, and we expect the engineer we hire today to be significantly more technically capable a year from now.

Customer Communication Communication is part of the engineering job here. You must be able to explain complex technology in plain English, communicate professionally with both technical and non‑technical stakeholders, set realistic expectations, provide timely updates, explain the business impact of technical problems and recommendations, adapt your communication style to the person you are working with, and remain professional when users are frustrated. Our goal is not simply to resolve the technical problem. Our goal is to make clients confident that their technology is being taken care of.

Performance Expectations Because this position includes significant engineering and project responsibilities, ticket volume alone will not define success. Success will be evaluated based on:

• Technical quality and accuracy


• Ownership and resolution of escalated issues


• Successful project execution


• Customer Satisfaction (CSAT) of 98% or greater


• Root‑cause analysis and long‑term solutions


• Timely client and internal communication


• Accurate documentation and time entry


• Knowledge transfer and mentorship


• Adherence to cybersecurity and change‑management standards


• Meeting applicable client SLAs and project commitments

Employment and Security Requirements Because this position provides privileged administrative access to sensitive client systems and information, candidates must:

• Successfully complete required pre‑employment background screening


• Complete fingerprint‑based criminal history screening when required


• Satisfy applicable Criminal Justice Information Services (CJIS) personnel‑screening requirements and maintain CJIS access eligibility, which is a condition of this position


• Complete required CJIS and cybersecurity‑awareness training


• Comply with company and client confidentiality, cybersecurity, acceptable‑use, and data‑protection requirements

Nice‑to‑Haves The following experience is valuable but not required:

• Fortinet certifications or significant Fortinet engineering experience


• Datto RMM, Autotask PSA, Kaseya 365, Datto BCDR, or other MSP RMM, PSA, documentation, automation, or remote‑management platforms


• iBoss SaaS


• Microsoft Intune, Azure networking, or Azure Virtual Desktop


• PowerShell, Microsoft Graph, or IT automation


• Cybersecurity incident response


• Vulnerability management


• Network design or SD‑WAN


• Technical project management


• Experience supporting regulated or compliance‑focused environments

Certifications and Professional Development Certifications such as CompTIA A+, Network+, Server+, Security+, and Cloud+, Microsoft Azure or Microsoft 365 certifications, and Fortinet certifications are valuable. Equivalent certifications and demonstrated advanced real‑world MSP experience may be considered. Continued technical training and professional development are expected.

Career Growth Level 3 Systems Engineer to Senior Systems Engineer to Technical Lead or Systems Architect to vCIO or other technical leadership opportunities.

Why This Role We are looking for more than someone who can close support tickets. We are looking for an experienced MSP engineer who can become a trusted technical resource in our organization: someone our technicians can turn to when they are stuck, someone who can design and implement the next solution, and someone our clients can depend on when the problem is complicated. If you have strong Windows Server and Active Directory experience, understand both traditional and cloud‑hosted Microsoft environments, take ownership, follow the Platinum Rule, enjoy engineering solutions and solving difficult problems, and want to continue developing your technical skills, we would like to talk with you.

Application Process Submit your resume. Qualified candidates will participate in an initial interview, technical and/or behavioral assessments, additional technical and team interviews, and required background and security screening

Company Description

Small but rapidly growing MSP, providing computer and networking support to businesses in the Colorado Front Range region since 1993. We specialize in providing reliable, efficient, and timely IT support and consulting services to companies of all sizes. In the business world today, building and maintaining a reliable computer network system is not only a standard but also a necessity.