Senior System Engineer

About the role

SD Solutions is seeking a Senior System Engineer to act as a technical expert for designing, deploying, securing, and supporting customer environments across cloud, on‑premise, and hybrid infrastructures. The role involves high‑level troubleshooting, migration projects, and security implementation for a diverse client base.

Key responsibilities

• Architect, deploy, and maintain Microsoft 365, Azure, Azure AD (Entra ID), and Azure Virtual Desktop environments.
• Manage Windows Server ecosystems, including Terminal Servers, Remote Desktop Services, and Remote Desktop farms.
• Perform advanced troubleshooting of performance, authentication, networking, DNS, storage, virtualization, and service outages.
• Lead migrations for Microsoft 365, Exchange, file servers, and cloud workloads.
• Implement and tune enterprise security tools such as Sophos Central, Windows Defender, and SonicWall firewalls.
• Conduct vulnerability mitigation, system hardening, and enforce security policies.
• Serve as Tier 3‑4 escalation point and participate in on‑call rotations for critical incidents.
• Create and maintain documentation, runbooks, diagrams, and knowledge‑base resources.
• Recommend and implement infrastructure improvements for reliability, security, and performance.
• Develop automations and scripts using PowerShell, Intune, Azure Automation, and Group Policy.

Required profile

• 5+ years in a senior systems, cloud, or infrastructure engineering role, preferably within an MSP environment.
• Proven ability to handle complex escalations and resolve technical issues under pressure.
• Excellent communication and customer‑facing skills.
• Strong documentation discipline and ability to produce clear technical materials.
• Capacity to thrive in high‑pressure settings while managing multiple priorities.

Required skills

• Microsoft 365, Azure, Azure AD/Entra ID, Azure Virtual Desktop.
• Windows Server (2012‑2025), Terminal Server, Remote Desktop Services, Remote Desktop farms.
• PowerShell, Intune, Azure Automation, Group Policy.
• Sophos Central, Sophos firewalls, SonicWall firewalls (rule tuning, NAT, VPN).
• DNS, DHCP, Active Directory/domain services.
• VMware and/or Hyper‑V virtualization.