Systems Engineer

Candidates must be Wisconsin residents or willing to relocate to Wisconsin prior to starting the role at their own expense. This is a hybrid position, so on-site work is required some days based on project and operational demands. Will need to start in office for the first two weeks or so, then it could transition to primarily remote in-office 2 days a week or so.

Required Skills & Years of Experience:
•Experience in system administration or cloud engineering within hybrid environments (5+ Years)
• Extensive knowledge of Microsoft 365, Entra ID, Windows Server, and AWS storage services (S3, Glacier, Intelligent Tiering) (5+ Years)
• Demonstrated ability to design and implement automation, monitoring, or integration scripts using PowerShell, Python, or equivalent tools (5+ Years)
• Experience integrating and supporting enterprise SaaS platforms and SSO/IAM solutions (5+ Years)
• Experience with cloud lifecycle management, cost optimization, or hybrid storage automation.
• Working knowledge of vulnerability management, SIEM, or related monitoring tools (e.g., Tenable, Splunk, IronPort, Cloudflare)
• Understanding of security best practices including encryption, access control, and patch management
• Familiarity with compliance frameworks such as NIST, PCI DSS, CIS, or ISO 27001
• Excellent documentation and communication skills, with the ability to translate complex technical concepts for diverse audiences
• Strong problem-solving and analytical skills with a focus on continuous improvement

Preferred Experience & Skills:
• Experience evaluating AI tools or emerging technologies for compliance, privacy, or ethical risks
• Expertise in AWS S3 Bucket, lifecycle, and IAM policies as well as AWS Billing Console and advanced cost reporting
• Experience coordinating or supporting IT security reviews, exception workflows, or audit responses
• Familiarity with single tenant multi-agency state government IT environments, policies, and collaboration
• Relevant industry certifications (e.g., Microsoft, AWS, CompTIA, ISC2, or ITIL) preferred

Responsibilities:
• Administer and maintain agency servers, virtual machines, and hybrid infrastructure to ensure reliability, performance, and data protection
• Lead the configuration, monitoring, and patching of Windows Server, M365, and Entra ID environments in coordination with partner agencies
• Implement and maintain automation scripts and workflows (PowerShell, CLI, or platform tools) to streamline routine tasks and improve system efficiency
• Integrate and manage hybrid identity and authentication systems (Entra ID, SSO) for secure access to enterprise SaaS and cloud resources
• Plan and coordinate upgrades, migrations, and maintenance windows to minimize service disruption
• Maintain accurate documentation for configurations, integrations, and operational standards
• Manage AWS and other cloud-based storage platforms, including lifecycle automation, data tiering, and integration with on-prem systems
• Monitor cloud utilization and performance, recommending optimizations for scalability, resilience, and cost-effectiveness
• Support deployment and configuration of new SaaS applications, ensuring compliance with state and agency standards
• Evaluate and implement secure connectivity and data-transfer methods between on-prem and cloud systems
• Coordinate technology intake and vendor review processes, gathering business use cases, data classifications, and system requirements
• Review vendor documentation such as privacy policies, security artifacts (SOC 2, StateRAMP, FedRAMP), and licensing terms to assess compliance and risk
• Evaluate products and services that incorporate Artificial Intelligence (AI) for compliance with agency data governance, privacy, and security standards
• Identify accountable business stakeholders to help ensure technology and its use adheres to prescribed business processes
• Gather and document technical details and approved use cases for AI-enabled tools, coordinate review and approval through Client governance processes
• Maintain an inventory of approved AI applications and related risk considerations. Monitor for changes to AI sub processors and terms of use for applications in the portfolio
• Monitor infrastructure health, performance, and alerts using enterprise tools (e.g., Splunk, Tenable, IronPort, or equivalent)
• Assist with vulnerability management coordination by reviewing findings, tracking remediation, and maintaining dashboards in collaboration with system owners
• Translate technical information into clear, actionable summaries for diverse audiences, including executive leadership
• Support incident response activities and coordinate with partner agencies or managed service providers during investigations or escalations
• Support adherence to state, NIST, and PCI-aligned standards by documenting processes, controls, and exceptions related to systems and cloud infrastructure
• Contribute to audit preparation, evidence collection, and compliance reporting
• Champion secure and efficient technology practices across IT and business units, balancing innovation with governance

• **Only those lawfully authorized to work in the designated country associated with the position will be considered.**

• **Please note that all Position start dates and duration are estimates and may be reduced or lengthened based upon a client’s business needs and requirements.**