{"id":1508826,"url":"https://alion.io/job/wra-environmental-consultants-senior-systems-engineer","title":"Senior Systems Engineer","company":{"id":689963,"name":"WRA Environmental Consultants","domain":"wra-ca.com","url":"https://alion.io/company/wra-ca","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":192000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OneDrive","optional":false},{"name":"PowerShell","optional":false},{"name":"SharePoint","optional":false},{"name":"Windows","optional":false},{"name":"AutoCAD","optional":true},{"name":"ITIL","optional":true},{"name":"ITSM","optional":true},{"name":"Jira","optional":true},{"name":"SOC 2","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-29T22:57:19Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-10-19T11:51:23Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"We’re hiring a Senior Systems Engineer as WRA builds its new internal IT & Cybersecurity functions. We are actively transitioning from an MSP model to a fully in-house model, and this role will operate under the guidance of our Director of Information Technology & Cybersecurity. This is also an excellent role for someone looking to refine their cybersecurity skillset.\nIn this role, you will act as the primary engineer for our cloud and SaaS platforms, including Microsoft 365, Azure infrastructure, Entra ID, endpoint management, and a variety of general platforms used by each of our departments. Initially, most of your time will focus on standing up new tools and assisting in the migration of select tools used by our MSP. Afterwards, your general duties will shift to engineering Azure Virtual Desktop, Microsoft 365/Entra ID, endpoint management and building automations.\nYou will be highly autonomous and will work closely with your Director to maintain and improve our current technology stack. Our 100-person workforce is highly distributed, and your priority is engineering our tools to enable our staff to do their best work securely, efficiently and consistently.\nWRA has offices in the San Francisco Bay Area (San Rafael, Petaluma, and Emeryville) and in San Diego. This position may be performed fully remotely by candidates located in California, Colorado, Arizona, or Oregon but travel to our offices may be necessary 1 - 2 times per year on average.\nCandidates in the Denver metro area are especially encouraged to apply.\nIn this role, you will be responsible for:\nCloud Infrastructure\nOwn our Azure environment, including Azure Virtual Desktop and virtual servers, which enables our CAD, GIS and Accounting teams. This includes image management, patching, right-sizing, scaling and scheduling, backups, performance optimization, and software versioning.\n\nDeploy actionable virtual machine monitoring to measure performance (CPU, GPU, memory, disk and session latency), idle capacity and active use time, and implement alerts to monitor these metrics.\n\nPerform root-cause analysis of virtual infrastructure concerns and propose solutions.\n\nAdminister our Microsoft 365 environment, including Exchange, SharePoint & OneDrive, Teams and data governance.\n\nEngage with your Director and our specialized departments to ensure their tools are appropriately sized, configured and performant.\n\nCo-manage our SaaS and cloud infrastructure backup platforms, including for Microsoft 365, Azure virtual machines and other platforms.\n\nIdentity & Access Management (IAM)\nAdminister Entra ID and SSO, including conditional access, authentication, dynamic groups, and guest access governance.\n\nOwn employee identity lifecycle automations for onboarding, offboarding and role changes.\n\nMaintain SCIM provisioning across our SaaS applications.\n\nEndpoint & Mobile Device Management\nManage our Windows and limited Mac fleet by administering our endpoint management platform, including device enrollment, Autopilot, compliance & configuration policies, app deployments and system patching.\n\nManage our mobile device configuration and application policies.\n\nAI & Automations\nAutomate IT processes using PowerShell, Microsoft Graph and other platforms to reduce or eliminate manual administrative tasks and to ensure consistent quality.\n\nCollaborate with your Director and other stakeholders to improve our implementation of Claude AI, including Connector configurations, Skills and Design.\n\nCybersecurity\nPartner with your Director to build new security operations capabilities from product selection and concept trials through implementation and administration.\n\nAlongside your Director, administer our security stack, including our managed detection and response platform, email security, DNS and web filtering, and vulnerability management.\n\nParticipate in our incident response process, including investigations and root-cause analyses, and apply technical containment measures as directed or delegated.\n\nAssist in strengthening our infrastructure to be compliant with industry-standard benchmarks such as CMMC and NIST SP 800-171.\n\nGeneral IT Support\nWork with our IT Operations Specialist as needed and serve as a final escalation point for complex IT Support requests.\n\nParticipate in an on-call rotation for critical but rare IT outages and other emergent duties.\n\nChange Management & Documentation\nMaintain runbooks, architecture diagrams, and system configuration documentation. Documentation must be considered a deliverable - not a “nice to have.”\n\nFollow industry-standard Change Management practices for all system changes.\n\nTo be successful in this role, you will need:\nExperience & Location\nAt least 6 years of direct experience supporting a hybrid or remote workforce of at least 50 employees as an engineer.\n\nComfortable working fully remote with travel to our offices in California as described above.\n\nAble to demonstrate past history of performing duties in a high-trust role.\n\nTechnical Skills\nStrong history of managing mission-critical Azure Virtual Desktops and application-specific servers.\n\nDeep, hands-on experience with Microsoft 365 and Entra ID, including conditional access, provisioning, identity governance and general administration.\n\nExperience managing a distributed fleet of endpoints and mobile devices using Intune, NinjaOne, WorkspaceOne or comparable tools.\n\nProven track record of utilizing PowerShell to administer Microsoft 365 and Azure.\n\nHow You Work\nA zero-trust security mindset demonstrated through the methods you provide IT service and engineer solutions.\n\nExcellent customer service skills and the ability to translate complex technical issues into plain language that anyone can understand.\n\nPhysical Requirements\nAble to perform physical duties that may include lifting up to 50 lbs, climbing ladders indoors, crawling under furniture and reaching behind wall-mounted equipment.\n\nBonus Points for experience with or having:\nSupporting CAD and GIS applications, such as AutoCAD, Civil 3D, ArcGIS and spatial datasets.\n\nSupporting Egnyte, Deltek VantagePoint, Elevia or markup tools like Bluebeam and Adobe Acrobat.\n\nMicrosoft certifications, including (but not limited to) AZ-104, AZ-140, AZ-305, AZ-700, SC-200, SC-300, SC-401, MS-102 or MD-102.\n\nFamiliarity with industry-standard frameworks, such as CMMC L1/L2, NIST SP 800-171, CCPA, SOC 2, ITSM, or ITIL.\n\nExecuting platform migrations using third-party tools and/or PowerShell.\n\nIntegrating IAM automations into ITSM platforms such as Jira, Freshservice, Zendesk or SolarWinds.\n\nSupporting the implementation of data retention policies.\n\nAdministering UniFi Network and Protect.","description_format":"text","description_chars":6687,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Environmental Biotechnology"],"lifecycle":[{"event":"open","at":"2026-09-30T07:02:58Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.737,"p_room":0.9,"age_days":19,"expected_fill_days":29,"reasons":["conf:1","win:mid"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/wra-environmental-consultants-senior-systems-engineer","json_url":"https://alion.io/job/wra-environmental-consultants-senior-systems-engineer.json","meta":{"generated_at":"2026-10-19T12:50:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8993,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":689963},"rest":"https://alion.io/mcp/rest/get_company?id=689963"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwra-environmental-consultants-senior-systems-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwra-environmental-consultants-senior-systems-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwra-environmental-consultants-senior-systems-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wra-environmental-consultants-senior-systems-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwra-environmental-consultants-senior-systems-engineer"}]}