System Engineer - Infrastructure

We’re looking for a hands-on System Engineer who can build, secure, and run hybrid infrastructure across on-prem and cloud environments. This is a mid-level role for someone who is comfortable owning core IT systems, standardizing endpoints, and keeping networks secure — while working in a fast-moving startup setup.

You’ll be close to the infrastructure, security, and engineering teams, and you’ll have real ownership over how systems are designed and operated.

What You’ll Do

Build & Run Hybrid Infrastructure

- Set up and manage site-to-site VPNs connecting on-prem networks with cloud environments. - Design and configure VLANs for secure network segmentation. - Configure and manage firewalls across on-prem and cloud setups. - Support hybrid connectivity, routing, and access control between environments.

Own Security & Access

- Configure and enforce Group Policies (GPOs) and endpoint security policies. - Implement practical security controls aligned with organizational standards.

Standardize & Manage Endpoints

- Provision desktops and laptops using golden images. - Maintain base images with OS updates, drivers, tools, and security controls. - Manage OS and application patching across the endpoint fleet. - Ensure endpoints remain compliant with defined security baselines.

Operate, Improve, Automate

- Troubleshoot network, system, and access issues across hybrid environments. - Document configurations, processes, and standard operating procedures. - Continuously look for opportunities to improve reliability, security, and automation.

What We’re Looking For (Must-Have)

- 6+ years of hands-on experience as a System / Infrastructure Engineer. - Proven experience with cloud and hybrid environments (on-prem + cloud connectivity). - Strong networking fundamentals: VPNs, VLANs, routing basics. - Hands-on experience configuring and managing firewalls. - Solid experience with Windows environments, Active Directory, and Group Policies. - Experience provisioning endpoints using golden images (MDT, SCCM, Intune, or similar). - Experience managing patching and endpoint lifecycle. - Strong troubleshooting skills and a bias toward clean documentation.

Good to Have

- Experience with cloud networking and security constructs. - Basic scripting or automation skills (PowerShell preferred). - Exposure to security-focused or regulated environments.