Systems Engineer

As a Systems Engineer, you will design, build, secure, and support Malibu's identity, collaboration, and cloud infrastructure across all MBI brands. The role is centered on Microsoft Entra ID, Microsoft 365, Active Directory, and AWS, with a strong emphasis on automation, infrastructure as code, and standardization. You will partner closely with the networking team on connectivity, segmentation, and hybrid cloud integration across on-premises, AWS, and Azure environments, and work with the security, platform, and support teams to deliver reliable, scalable, and well-documented systems, and serve as an escalation point for complex technical issues. Your knowledge of hybrid identity and cloud infrastructure will be integral in this role.

 

Essential Duties and Responsibilities

List the job's essential or most important functions and responsibilities. Include all important aspects for the job whether performed daily weekly, monthly, or annually and any that occur at irregular intervals.

• Administer, secure, and maintain Microsoft Entra ID, including identity lifecycle, Conditional Access, MFA, Privileged Identity Management (PIM), app registrations, enterprise applications, and SSO integrations for third-party SaaS solutions.
• Administer and maintain hybrid identity between on-premises Active Directory and Entra ID, including Entra Connect / Cloud Sync, hybrid join, and directory synchronization health.
• Administer Active Directory Domain Services, Group Policy, DNS, DHCP, and Windows Server systems across MBI sites; maintain AD health, replication, and a tiered administrative access model.
• Administer Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, and Teams; manage tenant configuration, licensing, mail flow, retention, and collaboration governance.
• Manage endpoint configuration and compliance through Microsoft Intune, including Windows Autopilot, configuration profiles, compliance policies, application deployment, and patch management.
• Design, provision, and manage AWS infrastructure (EC2, VPC, Transit Gateway, IAM, S3, RDS, Systems Manager, AWS Backup, Organizations) to ensure standardization, security, cost-efficiency, and supportability.
• Design, provision, and manage Azure infrastructure (Virtual Machines, Virtual Networks, Storage, Azure SQL, Key Vault, Azure Monitor, Azure Backup, Management Groups and Azure Policy) and Microsoft Fabric (capacities, workspaces, OneLake, and access governance) to ensure standardization, security, cost-efficiency, and supportability.
• Implement and maintain identity federation between Entra ID and AWS (IAM Identity Center) and other platforms, applying least-privilege and role-based access principles.
• Develop and maintain infrastructure as code using Terraform, CloudFormation, Ansible, or similar tools, and contribute to CI/CD pipelines (GitHub Actions, AWS CodePipeline) for infrastructure changes.
• Develop automation scripts and tools (PowerShell, Microsoft Graph, AWS CLI/SDK, Python) for provisioning, configuration management, and recurring administrative tasks.
• Monitor system health, performance, and capacity, including logging, metrics, and alerting (CloudWatch, Entra sign-in and audit logs, M365 service health); drive root-cause resolution for recurring issues.
• Partner with the security team to implement and maintain security controls, hardening baselines (CIS, Microsoft Secure Score), vulnerability remediation, and audit and regulatory compliance requirements, including SOX IT general controls.
• Test, implement, and maintain backup and disaster recovery systems for on-premises, AWS, and Microsoft 365 workloads, and participate in DR exercises.
• Support network and security infrastructure as it relates to systems -- firewalls, VPNs, site-to-site and AWS connectivity -- in coordination with network and security engineers.
• Create and maintain documentation, runbooks, standards, and architecture diagrams, and work closely with platform, development, security, and support teams to optimize platform performance.
• Communicate with users, technical teams, and vendors regarding system implementations, changes, and interruptions, following established change management processes.
• Serve as an escalation point for the service desk and support teams, and provide technical guidance on identity, M365, and cloud issues.
• Participate in the after-hours on-call rotation.
• Other duties may be assigned.

 

#MBICareers #MalibuBoats