{"id":3978803,"url":"https://alion.io/job/impact-networking-systems-engineer","title":"Systems Engineer","company":{"id":182513,"name":"Impact Networking","domain":"impactmybiz.com","url":"https://alion.io/company/impactmybiz","size_band":"201-500","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lake Forest, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":80000,"max":115000,"currency":"USD","period":"year","gross":null,"usd_annual":115000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure SQL Database","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Desk","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Windows Server","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-11-09T16:21:19Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-13T18:31:34Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Built on service. Powered by people.\nImpact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first.\nWhat makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We’ve built something special, but we’re far from finished. The people who join Impact now will help define what comes next.\n\nJob Overview\nImpact is seeking a Systems Engineer to design, operate, secure, and improve Microsoft Azure, Microsoft 365, and enterprise systems across a hybrid environment. This hands-on infrastructure and cloud engineering role owns solutions across Azure compute, storage, networking, identity, monitoring, automation, backup, disaster recovery, and platform services. You will partner directly with business and technology leaders to establish reliable, scalable, and secure systems standards, taking ownership from architecture and implementation through troubleshooting, documentation, lifecycle management, and measurable operational results.\nResponsibilities\nDesign, deploy, and operate Azure IaaS and PaaS services, including virtual machines, availability zones, virtual machine scale sets, App Service, Azure Functions, storage accounts, Azure SQL, and supporting platform services.\n\nEstablish and maintain Azure governance across tenants, management groups, subscriptions, resource groups, naming, tagging, Azure Policy, role-based access control, budgets, cost controls, and security baselines.\n\nEngineer identity and access controls using Microsoft Entra ID, Conditional Access, Privileged Identity Management, managed identities, service principals, workload identities, and least-privilege role assignments.\n\nDesign and maintain Azure networking, including virtual networks, peering, network security groups, Azure Firewall, Application Gateway, web application firewall, load balancing, private endpoints, Private Link, DNS, VPN, and ExpressRoute connectivity.\n\nConfigure and improve Microsoft Defender for Cloud, Azure Monitor, Log Analytics, Application Insights, Network Watcher, and Microsoft Sentinel integrations, including diagnostic settings, service health alerts, dashboards, reporting, and automated response workflows for reliability, performance, threat detection, and security visibility.\n\nAutomate deployments, configuration management, controls, reporting, and remediation using PowerShell, Azure CLI, ARM templates, Bicep, Terraform, Azure Automation, Logic Apps, or approved Infrastructure-as-Code practices.\n\nAssess and execute Azure migrations and modernization using Azure Migrate and related services, from workload discovery and dependency analysis through architecture, sizing, deployment, validation, optimization, and operational handoff.\n\nPartner with application, infrastructure, security, and service teams to incorporate availability, supportability, security, cost management, and operational requirements into solution design and change management.\n\nAdminister Windows Server, Active Directory, Group Policy, DNS, DHCP, certificate services, file services, virtualization, and Microsoft 365 services connected through identity, networking, automation, or Azure integration.\n\nBuild and maintain backup, recovery, and resiliency capabilities using Recovery Services vaults, Azure Backup, Azure Site Recovery, restore testing, retention standards, and documented recovery procedures.\n\nManage compute and platform lifecycle activities, including patching, image management, capacity planning, right-sizing, reservations, cost optimization, and retirement of obsolete resources.\n\nMaintain hybrid connectivity and management across on-premises and Azure environments, including Azure Arc, hybrid identity, synchronization, monitoring, and secure administrative access.\n\nImplement Azure Key Vault, certificates, secrets, encryption, managed identities, and secure application configuration patterns to protect systems, identities, privileged workflows, and data in transit and at rest.\n\nDevelop and enforce security policies, configuration standards, technical baselines, and practices for secure administration, change control, patch management, backup, monitoring, recovery, and operational handoff.\n\nEvaluate Azure architecture against the Cloud Adoption Framework and Well-Architected Framework, and remediate gaps in reliability, security, cost optimization, operational excellence, and performance efficiency.\n\nCollaborate with incident response and service teams on response, escalation, recovery, and communications procedures; investigate suspicious activity and service degradation; and support containment, restoration, forensic analysis, root-cause analysis, and corrective action planning.\n\nPerform recurring reviews of Azure configurations, privileged access, service principals, identities, systems, accounts, backup status, patch status, and security activities.\n\nMaintain architecture diagrams, build documents, standard operating procedures, recovery plans, troubleshooting guides, and runbooks; provide technical guidance, knowledge transfer, and training to end users, administrators, application owners, and service desk, infrastructure, security, and application support teams.\n\nMap systems, Azure, and data security controls to applicable regulatory, contractual, and compliance requirements; partner with legal, compliance, security, and audit teams to provide technical evidence and address control gaps.\n\nStay current with Azure platform changes, security advisories, service retirements, technical roadmaps, and data protection laws, and update systems standards and security measures accordingly.\n\nQualifications & Experience\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.\n\nMinimum of 5 years of hands-on experience in systems engineering, cloud engineering, cloud administration, infrastructure operations, or enterprise IT.\n\nMicrosoft Azure Administrator Associate (AZ-104) certification or equivalent hands-on Azure administration experience.\n\nProven experience engineering and operating Azure services across compute, networking, storage, identity, monitoring, backup, recovery, governance, automation, and security.\n\nHands-on experience administering Microsoft Azure, Microsoft 365, Microsoft Entra ID, Windows Server, Active Directory, networking, virtualization, logging, and governance services.\n\nStrong knowledge of cloud architecture, Zero Trust, least privilege, shared responsibility, high availability, disaster recovery, systems lifecycle management, and operational control design.\n\nStrong understanding of Azure Landing Zones, subscription design, hybrid identity, network architecture, backup and recovery, monitoring, patching, cost management, and resource lifecycle management.\n\nProficiency with PowerShell and working knowledge of Azure CLI, Bicep, Terraform, KQL, REST APIs, Microsoft Graph, or Python for automation, reporting, and operational tooling.\n\nStrong communication and collaboration skills, including working with remote and cross-functional teams and explaining technical risks, service impacts, architecture decisions, and recovery requirements to engineers, business stakeholders, auditors, and leadership through clear documentation and runbooks.\n\nOne or more relevant certifications preferred, including AZ-305, AZ-500, AZ-700, AZ-800, AZ-801, SC-300, SC-200, MS-102, Security+, CCSP, CISSP, or comparable infrastructure and cloud certifications.\n\nExperience within a Microsoft Partner organization, a Managed Services Provider, or complex Microsoft cloud environments supporting multiple business units, tenants, or regulated environments preferred.\n\nExperience with Azure Landing Zones, Azure Migrate, Cloud Adoption Framework, Well-Architected Framework, Azure Arc, or comparable cloud governance and hybrid management patterns preferred.\n\nExperience with Microsoft Sentinel, KQL, Defender XDR, Defender for Cloud, Azure Key Vault, Azure Policy, Azure Monitor, Log Analytics, Azure Backup, and Azure Site Recovery preferred.\n\nExperience supporting cloud-native applications, APIs, containers, Azure Kubernetes Service, CI/CD pipelines, database platforms, or AI-enabled workloads preferred.\n\nWhat Drives Impact\nBehaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them:\nInnovation: We embrace change because innovation lives outside the comfort zone.\n\nPassion: We are driven by purpose, fueled by passion, and obsessed with making an impact.\n\nHonesty: We are fiercely transparent and consistently honest.\n\nFun: We fuel work with fun, knowing life's too short for boring.\n\nLow Ego: We champion ideas over titles, because brilliance knows no rank.\n\nOne Team: We win as a team, we lose as a team, we are one team.\n\nCompensation\nActual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs.\nImpact may offer applicable incentive compensation plans depending on role and/or department.\nFull compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process.\nBenefits We Take Pride In\n5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards\n\nValuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave\n\nDevelopment and growth opportunities with on-going training & continued education reimbursement\n\n401(K) & retirement plans with complimentary financial advisory services\n\nComprehensive health, disability, life, dental, and vision plans\n\nFor full benefit information, visit https://www.impactmybiz.com/careers/#benefits\nWork Authorization & Immigration Sponsorship\nCandidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements.\nCertain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a “U.S. Person,” as defined by law, or otherwise be eligible to obtain any required government authorizations.","description_format":"text","description_chars":11333,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Growth opportunities","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed Security","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-11-09T19:03:40Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":41,"reasons":["conf:0","win:early"],"computed_at":"2026-11-12T10:38:37Z"},"pay":{"stated_usd_annual":115000,"is_top_pay":false},"html_url":"https://alion.io/job/impact-networking-systems-engineer","json_url":"https://alion.io/job/impact-networking-systems-engineer.json","meta":{"generated_at":"2026-11-13T23:26:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":46738,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":182513},"rest":"https://alion.io/mcp/rest/get_company?id=182513"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fimpact-networking-systems-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fimpact-networking-systems-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fimpact-networking-systems-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/impact-networking-systems-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fimpact-networking-systems-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3978803}},{"tool":"search_jobs","arguments":{"company":"impactmybiz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3978803},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}