OVERVIEWWe are seeking a player-coach, Systems Engineer Manager, to lead a small, high-impact team of system engineers while actively executing on core technical initiatives. This role requires a 60% hands-on engineering / 40% team management split.  The ideal candidate will possess a strong technical background, proven leadership abilities, and a passion for delivering innovative solutions.REPORTS TOThe Systems Engineer Manager reports to the Director, Technology Operations in the Technology department.  The ideal candidate is a deeply technical practitioner who thrives on solving complex system engineering challenges, driving backlog execution, and modernizing legacy systems into cloud-first, AI-augmented solutions. You will own our identity boundaries, endpoint management pipelines, workspace infrastructure, and edge services, while serving as a champion for AI-driven IT operations.ESSENTIAL DUTIESThe essential duties for this role include, but are not limited to: Team Management & Operational Leadership (40%)Team Management:  Lead, mentor, and manage a team of 2–3 system engineers, ensuring the highest standards of quality and efficiency.Agile/Kanban Delivery & Metrics: Manage team backlog using Agile/Kanban best practices to establish clear priorities, maximize throughput, and maintain predictable delivery schedules. Track and maintain key operational metrics for monthly leadership reporting and capacity planning.Cross-Functional Partnership: Collaborate with leaders across Service Desk, Enterprise Applications, and DevOps to execute multi-departmental technical initiatives, establish seamless escalation paths, and drive shared operational efficiencies.Vendor Management & Managed Services Oversight: Direct operational and contract management for primary IT infrastructure partners—specifically YellowDog Networks (co-managed office networking, Palo Alto firewalls, switches) and core endpoint/identity vendors (e.g., Okta, JAMF, NinjaOne). Track vendor SLA compliance, oversee change validation protocols, manage contract renewals, and optimize licensing spend. Hands-On Technical Execution (60%)Identity & Access Control (IAM): Architect, deploy, and maintain identity infrastructure across Active Directory (ADUC/GPO), Azure hybrid environments, Okta (SSO, Workflows, SAML, MFA), and Google Workspace (GSuite, Gemini access controls, Vault, GCP,GAM, API integrations) to enforce strict, HIPAA-compliant RBAC and zero-trust access controls. Endpoint & Workspace Systems Engineering: Own the lifecycle, system design, and security of physical and virtual endpoints (Windows and macOS) using NinjaOne, JAMF, PDQ SmartDeploy, WSUS, and AWS WorkSpaces. Modernize legacy deployment workflows into cloud-first solutions.AI-First Automation & Modernization: Actively write and maintain scripts (PowerShell, Bash, Python) using AI-assisted development platforms (e.g., Cursor) to eliminate manual IT toil, automate patch pipelines, and refactor legacy administrative processes. Network Access & Infrastructure Administration: Administer user-facing access policies and services, including Active Directory-integrated Radius Auth, GlobalProtect VPN user provisioning/client software, internal DNS, PKI/Certificate Authorities, AWS FSx / AWS File Gateway local storage, and Cisco voice/Jabber services. Partner with managed network providers (YellowDog Networks) to review, test, and validate global office network and Palo Alto firewall updates. Systemic Security & Vulnerability Remediation: Execute workstation endpoint encryption (BitLocker/JAMF) and proactively remediate endpoint OS and application vulnerabilities in close coordination with Information Security.Complex Cross-System Troubleshooting: Act as a primary technical escalation point.  Lead root-cause analysis and resolution for complex, heavily integrated multi-departmental systems to minimize operational downtime. 
