Sr. Systems Engineer

This role provides technical leadership to all infrastructure engineers and exercises matrix leadership across the Security, Applications, Service Desk, and Infrastructure functions. It leads the architecture review board, holds accountability for engineering standards and their enforcement, oversees prioritization of the infrastructure project portfolio, and provides formal technical leadership on major implementations. Accountability is measured in business outcomes rather than task completion: infrastructure availability and uptime, disaster recovery readiness, cybersecurity posture, audit readiness, platform scalability, and the capacity to absorb acquisitions and integrate acquired environments. The role retains deep hands-on capability and serves as the final technical escalation point in a multi-client environment where downtime affects patient care.

ESSENTIAL FUNCTIONS

Infrastructure Strategy & Roadmap

• Define and maintain the enterprise infrastructure roadmap across network, compute, storage, virtualization, identity, and cloud.
• Own technology standards and reference architectures, and keep them current as platforms, threats, and business needs change.
• Drive technology lifecycle planning across all business units, including refresh cycles, end-of-support exposure, and capacity forecasting.
• Evaluate emerging technologies against Hopper standards for interoperability, reliability, supportability, and total cost, and issue written recommendations.
• Review and approve major infrastructure and cloud investments, and support the business case with technical and financial analysis.

Technical Leadership & Governance

• Provide technical leadership and direction to all infrastructure engineers, and mentor them toward higher design capability.
• Lead the architecture review board, including submission standards, review cadence, decision records, and exception handling.
• Hold accountability for engineering standards, and review designs and changes proposed by other engineers with substantive, binding feedback.
• Oversee prioritization and sequencing of the infrastructure project portfolio in partnership with IT leadership.
• Provide formal technical leadership on major implementations, including design ownership, cutover strategy, and go or no-go recommendations.
• Exercise matrix leadership across the Security, Applications, Service Desk, and Infrastructure functions on work that spans team boundaries.

Network & Cloud Engineering

• Design and maintain enterprise network architecture, including routing, switching, wireless, VLAN and segmentation design, SD-WAN, WAN and carrier circuits, and firewall and edge security.
• Establish network standards, including naming conventions, addressing schemes, segmentation models, and cabling and connectivity standards.
• Design and govern Azure cloud architecture, including landing zones, subscription and tenant topology, hybrid connectivity, identity integration, governance controls, and cost management.
• Monitor and analyze network and cloud performance, capacity, and utilization, and resolve bottlenecks before they affect service.
• Direct hybrid and cloud migration strategy, including workload placement decisions and exit and rollback planning.

Systems, Identity & Platform Engineering

• Design and maintain Windows Server, virtualization, storage, and backup platforms supporting Hopper and client environments.
• Engineer Active Directory, Entra ID, Group Policy, conditional access, and privileged access configurations.
• Engineer and govern Microsoft 365 workloads, and maintain tenant separation, delegation models, and administrative boundaries appropriate to a multi-client environment. Resilience, Security & Audit Readiness
• Own disaster recovery readiness, including design, documented recovery objectives, test schedule, and demonstrated recovery results.
• Own infrastructure availability and uptime against defined service commitments, including monitoring, alerting, and capacity headroom.
• Drive the infrastructure contribution to cybersecurity posture, including hardening benchmarks, vulnerability remediation, patching cadence, and configuration drift control.
• Maintain audit readiness for HIPAA, HITRUST, and SOC 2 by producing accurate technical documentation and control evidence on the required cycle.
• Lead infrastructure and security incident response, including root cause analysis and corrective action. Acquisitions, Integration & Scalability
• Provide infrastructure due diligence, assessment, and integration planning for acquisitions and new business units.
• Lead technical integration of acquired environments, including identity, network, endpoint, and tenant consolidation.
• Design platforms for scalability, so that growth in sites, users, and clients is absorbed without redesign. Escalation, Automation & Documentation
• Serve as the final technical escalation point for complex, multi-system problems raised by the Service Desk, Desktop Support, Implementation, and Infrastructure teams.
• Execute and approve changes through formal change management, including risk assessment, testing, rollback planning, and post-change validation.
• Drive automation and infrastructure-as-code adoption to reduce manual effort and configuration variance across environments.
• Maintain architecture diagrams, build documents, runbooks, and as-built records to an audit-ready standard.