JOB SUMMARY:

The IT Sr. Systems Engineer (Senior Infrastructure & Systems Architect) acts as a principal technical authority leading the technical evaluation, design, and integration of newly acquired environments into our core enterprise infrastructure. This position is responsible for architecting Active Directory/Entra ID domain collapses and federations, optimizing enterprise desktop and application virtualization platforms (Citrix, RDS, IGEL), and embedding operational AI automation into repetitive deployment and maintenance workflows.

While not a dedicated Security Architect position, security diligence is central to this role. The IT Sr. Systems Engineer is directly responsible for enforcing baseline security hygiene across all migrated systems, managing SSL/TLS certificate lifecycles, and ensuring strict adherence to healthcare regulatory frameworks including HIPAA, HITECH, and patient data compliance standards.

MAJOR DUTIES AND RESPONSIBILITIES:

Analytical and Critical Thinking

• Lead technical due diligence on acquired entities by evaluating legacy IT estates, network topologies, identity structures, and clinical systems.

• Design, architect, and execute zero business hour downtime Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID (Azure AD) tenants.

• Architect, maintain, and tune multi-site virtualization environments utilizing Citrix Virtual Apps and Desktops (CVAD/Citrix Cloud), Remote Desktop Services (RDS), and thin-client OS solutions (IGEL OS/Universal Management Suite).

• Optimize image baselines and FSLogix profile containers to maximize host density and reduce compute resource usage.

• Configure and support remote access infrastructure, including NetScaler ADC / Citrix Gateway, load balancing, and Storefront.

• Identify high-frequency, repetitive infrastructure tasks (provisioning, image updates, patch testing, user offboarding/onboarding) and design automated workflows to streamline operations.

• Leverage modern generative AI tools and programmatic scripting (PowerShell, Azure CLI, REST APIs, Python) to accelerate script generation, log auditing, configuration troubleshooting, and automated runbook documentation.

• Maintain end-to-end management of SSL/TLS certificates, including automated renewals, private key security, gateway bindings (NetScaler ADC, IIS, reverse proxies), and cipher suite hardening to prevent service interruptions or protocol vulnerabilities.

Workplace Computers and Equipment

• Ensure peak application performance and high availability across distributed clinicians and office personnel accessing critical line-of-business and EMR platforms (Epic, NextGen, AthenaHealth, Allscripts).

Planning and Organizing

• Formulate standardized migration runbooks, baseline discovery checklists, and cutover playbooks to transition user profiles, mailboxes, and file services seamlessly with zero data loss.

• Build intelligent operational reporting and telemetry to proactively detect infrastructure bottlenecks, license drift, and capacity constraints before they impact end users.

Compliance, Policy, and Procedure

• Oversee identity governance post-acquisition, including Conditional Access policies, Microsoft Intune endpoint enrollments, and tenant consolidation.

• Enforce security best practices across all operating systems, hypervisors, and gateway access points (nFactor MFA, SAML/SSO federation, conditional access).

• Ensure all architectural designs and integrated systems strictly comply with HIPAA, HITECH, and clinical data governance guidelines.

• Conduct perimeter assessments and access reviews to protect protected health information (PHI) and enterprise identities against external compromise.

SKILLS AND ABILITIES:

• Directory & Identity Services: Proven track record architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID (Azure AD) Connect/Cloud Sync.

• Application & Desktop Virtualization: Deep hands-on expertise with Citrix (Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC), Microsoft Remote Desktop Services (RDS), Azure Virtual Desktop (AVD), and IGEL thin client deployments/management.

• Scripting & AI Automation: Advanced proficiency in PowerShell or Azure CLI for systems administration; proven experience integrating AI assistance or automation tools into operational deployment routines.

• Security & Certificate Lifecycle: Strong understanding of Public Key Infrastructure (PKI), SSL/TLS certificate chain deployment, Web Application Firewalls (WAF), and multi-factor authentication (nFactor/MFA).

• Compliance Knowledge: Practical understanding of healthcare regulatory frameworks (HIPAA Security & Privacy Rules, Business Associate Agreements, clinical system audit readiness).

• Healthcare & Cloud Integration (Preferred): Experience supporting or migrating healthcare workloads and EMR/EHR platforms (Epic, AthenaHealth, NextGen), as well as migrating workloads across on-premises datacenters, VMware vSphere, and public cloud (Azure/AWS).

EDUCATION AND/OR EXPERIENCE:

• 8–10+ years in senior infrastructure systems engineering or solutions architecture, with demonstrated experience in multi-site migrations, M&A integrations, or large-scale domain consolidations.

• Bachelor’s degree in Computer Science, Information Technology, or equivalent military/professional experience.

• Citrix Certified Associate/Professional (CCA-V, CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator.

WORKING CONDITIONS/PHYSICAL DEMANDS:

Work is typically performed in an office environment.

The specific statements shown in each section of this description are not intended to be all-inclusive. They represent typical elements considered necessary to successfully perform the job.