{"id":1326032,"url":"https://alion.io/job/onto-innovation-it-infrastructure-systems-engineer","title":"IT Infrastructure Systems Engineer","company":{"id":2025019,"name":"Onto Innovation","domain":"ontoinnovation.com","url":"https://alion.io/company/ontoinnovation","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":31,"ghost_share":0,"stale_share":0.355,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-02T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Milpitas, United States","Wilmington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108000,"max":162000,"currency":"USD","period":"year","gross":null,"usd_annual":162000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agentic Workflows","optional":false},{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"Amazon S3","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CentOS Stream","optional":false},{"name":"Configuration Management","optional":false},{"name":"Copilot","optional":false},{"name":"CyberArk","optional":false},{"name":"FinOps","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITSM","optional":false},{"name":"Kanban","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Terraform","optional":false},{"name":"Ubuntu","optional":false},{"name":"VMWare","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-05-28T00:00:00Z","employer_posted_date":"2026-05-28","last_verified_at":"2026-10-02T16:14:01Z","board_verified":true,"closed_at":null,"days_open":128,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":127},"description":"Onto Innovation is a leader in process control, combining global scale with an expanded portfolio of leading-edge technologies that include: 3D metrology spanning the chip from nanometer-scale transistors to micron-level die-interconnects; macro defect inspection of wafers and packages; metal interconnect composition; factory analytics; and lithography for advanced semiconductor packaging. Our breadth of offerings across the entire semiconductor value chain helps our customers solve their most difficult yield, device performance, quality, and reliability issues. Onto Innovation strives to optimize customers’ critical path of progress by making them smarter, faster and more efficient.\nJob Summary & Responsibilities\nWe are seeking a highly skilled Sr. Systems & Infrastructure Engineer to join a dynamic, security-first IT team operating across on-premises, hybrid cloud, and modern cloud-managed environments. This role spans traditional enterprise infrastructure, modern cloud operations (CloudOps), Microsoft 365 administration, AI-augmented tooling, and endpoint management through Microsoft Intune and Windows Autopilot. The ideal candidate brings deep technical depth, an Agile mindset, and a passion for continuous improvement in both operations and security posture.\nKey Responsibilities\nVirtualization & On-Premises Infrastructure\nLead VMware vSphere/ESXi architecture, cluster operations, lifecycle management, and performance tuning.\nSupport HPE Synergy compute infrastructure, firmware updates, and template management.\nAdminister enterprise storage platforms including Pure Storage and HPE systems; manage Cloudian HyperStore object storage and capacity planning.\nSupport Komprise data lifecycle management, analytics, and file tiering optimization.\nParticipate in data center buildouts, hardware refresh planning, rack/power design, and operational support.\nManage PKI infrastructure, certificate lifecycle, and CA operations.\nCloud Operations (CloudOps)\nAdminister and optimize Azure and/or AWS cloud environments, including resource governance, cost management, and infrastructure-as-code (IaC) pipelines.\nManage cloud networking, virtual machine operations, storage accounts, and security group configurations.\nSupport cloud-native DR architectures and hybrid on-prem/cloud failover workflows.\nImplement tagging, policy, and RBAC controls to maintain cloud governance standards.\nContribute to FinOps practices, including cost attribution, rightsizing, and cloud spend visibility reporting.\nMicrosoft 365 & Modern Workplace Administration\nAdminister Microsoft 365 tenant services including Exchange Online, SharePoint, Teams, OneDrive, and Entra ID (Azure AD) in a hybrid environment.\nManage Microsoft Intune for cloud-based endpoint management, compliance policy enforcement, app deployment, and conditional access.\nDesign and operate Windows Autopilot deployment profiles for zero-touch provisioning of new and replacement devices.\nBackup, Disaster Recovery & Resilience\nManage Rubrik backups, SLA policies, archival workflows, replication, and orchestrated DR operations including Cloud Vault air-gap capabilities.\nImplement and maintain Zerto and/or Rubrik Orchestrator for automated failover, recovery workflows, and DR testing.\nContribute to DR runbooks, tabletop exercises, and hybrid on-prem/cloud recovery architecture design.\nApply structured recovery zone models (e.g., Red/Yellow/Green) to ensure clean-state recovery in breach scenarios.\nSecurity Operations & Vulnerability Management\nExecute vulnerability scanning, patch management workflows, and risk-based remediation tracking across Windows, Linux, and cloud workloads.\nSupport system hardening, CIS benchmarking, and security baseline enforcement across server and endpoint fleets.\nContribute to identity security posture including PAM integration, privilege tiering, and access review processes.\nAssist with compliance evidence collection and audit readiness activities aligned to ISO 27001, SOX, and GDPR requirements.\nAI-Augmented Operations & Automation\nLeverage AI-assisted tooling and agentic workflows (e.g., Copilot for M365, AI-enhanced ITSM, automated runbooks) to accelerate infrastructure operations and reduce manual toil.\nDevelop and maintain automation scripts and pipelines using PowerShell, Python, and Ansible for configuration management, reporting, and operational workflows.\nExplore and operationalize emerging AI capabilities within the IT and security toolchain, partnering with InfoSec and DevOps teams on safe, governed adoption.\nContribute to IaC practices using tools such as Terraform, Bicep, or ARM templates to standardize cloud provisioning.\nAgile Delivery & Team Collaboration\nWork within an Agile/Kanban delivery model using Azure DevOps - participating in sprint planning, backlog grooming, daily standups, and retrospectives.\nBreak down complex infrastructure initiatives into actionable epics, user stories, and tasks with clear acceptance criteria and effort estimates.\nProvide transparent work-item status updates to team leads and stakeholders through sprint reviews and shared dashboards.\nCollaborate cross-functionally with InfoSec, DevOps, and application teams to align infrastructure delivery with broader organizational priorities.\n\nAdminister Microsoft Defender for Endpoint and integrate with SIEM/SOAR platforms for threat visibility and response.\nManage M365 licensing, service health, and change management communications to end users and stakeholders.\nMaintain Active Directory/Entra ID hybrid identity, group policies, MFA, and SSO integrations.\nQualifications\nRequired\n7+ years of enterprise systems administration or engineering experience.\nExpertise with VMware vSphere/ESXi and virtual infrastructure management.\nHands-on experience with Microsoft Intune, Windows Autopilot, and cloud-managed endpoint operations.\nSolid experience administering Microsoft 365 services (Exchange Online, Teams, SharePoint, Entra ID) in a hybrid environment.\nProficiency with Azure and/or AWS cloud platforms, including governance, networking, and IaC fundamentals.\nHands-on experience with Rubrik, Rubrik Orchestrator, and/or Zerto DR automation platforms.\nStrong background in Microsoft Active Directory, hybrid identity, and Windows Server.\nExperience with enterprise storage platforms (Pure Storage, HPE, Cloudian, Komprise).\nFamiliarity with vulnerability management tools and patch management workflows.\nExperience working in Agile/Kanban environments using Azure DevOps or similar work management platforms.\nFamiliarity with compliance frameworks (SOX, GDPR, ISO 27001) and service KPIs.\nStrong troubleshooting skills and an analytical, security-first mindset.\nPreferred\nExperience with HPE Synergy and composable infrastructure.\nISO 27001 experience, audit readiness, and evidence support.\nAutomation skills (PowerShell, Python, Ansible, Terraform/Bicep).\nExperience with Microsoft Defender for Endpoint and integration with SIEM/SOAR platforms.\nExposure to AI-agentic tooling and Microsoft Copilot administration within M365.\nLinux administration experience (RHEL, CentOS, Ubuntu).\nData center build/design experience with strong operational discipline.\nExperience with PAM platforms (e.g., CyberArk) and privileged access governance.\nHybrid cloud storage or integration experience (Azure Blob, AWS S3, hybrid tiering).\nWhy Join Onto Innovation?\nAt Onto Innovation, we believe your work should matter-and so should your well-being. That’s why we offer competitive salaries and a comprehensive benefits package designed to support you and your family. From health, dental, and vision coverage to life and disability insurance, PTO, and a 401(k) with employer match, we’ve got you covered. You’ll also enjoy access to our Employee Stock Purchase Program (ESPP), wellness initiatives, and cutting-edge tools-all within a collaborative, inclusive culture where your contributions are valued and recognized.\nCompensation & Growth\nBase Salary Range:\n$108,000.00 - $162,000.00, offered in good faith and based on experience, location, and qualifications.Additional Rewards: Annual bonus opportunities and potential long-term incentives tied to both company and individual success.\n\nEmpowering Every Voice to Shape the Future:\nOnto Innovation is committed to creating a workplace where every qualified candidate has an equal opportunity to succeed. We evaluate applicants based on skills, experience, and potential - without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, veteran status, or any other characteristic protected by law. We believe diversity of thought and background drives innovation and strengthens our team.\nImportant Note on Export Compliance\nFor certain positions requiring access to technical data, U.S. export licensing review may be necessary for applicants who are not U.S. Citizens, Permanent Residents, or other protected persons under 8 U.S.C. 1324b(a)(3).","description_format":"text","description_chars":8961,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Manufacturing","Electronics Manufacturing"],"lifecycle":[{"event":"open","at":"2026-09-27T03:19:13Z"}],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.392,"p_room":0.36,"age_days":127,"expected_fill_days":69,"reasons":["conf:3","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-02T05:45:00Z"},"pay":{"stated_usd_annual":162000,"is_top_pay":true},"html_url":"https://alion.io/job/onto-innovation-it-infrastructure-systems-engineer","json_url":"https://alion.io/job/onto-innovation-it-infrastructure-systems-engineer.json","meta":{"generated_at":"2026-10-03T04:06:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4166,"day_limit":5000,"remaining_today":834,"minute_limit":60,"resets_at":"2026-10-04T00:00:00Z"}}}