Systems Engineer

BUILT ON SERVICE. POWERED BY PEOPLE.

Impact exists because a small group of industry leaders believed companies in our space were doing it wrong. Many prioritized margins while the people doing the work and the clients relying on it became an afterthought. Impact was built differently: invest in great people, trust them to do great work, and deliver the kind of service clients remember. That approach helped us grow from a small office technology company into a national managed services provider, while remaining privately owned and people-first.

What makes Impact special is that growth has never come at the expense of the values that got us here. We continue to reinvest in our people, our capabilities, and the opportunities ahead so employees can grow alongside the business. We’ve built something special, but we’re far from finished. The people who join Impact now will help define what comes next.

JOB OVERVIEW

Impact is seeking a Systems Engineer to design, operate, secure, and improve Microsoft Azure, Microsoft 365, and enterprise systems across a hybrid environment. This hands-on infrastructure and cloud engineering role owns solutions across Azure compute, storage, networking, identity, monitoring, automation, backup, disaster recovery, and platform services. You will partner directly with business and technology leaders to establish reliable, scalable, and secure systems standards, taking ownership from architecture and implementation through troubleshooting, documentation, lifecycle management, and measurable operational results.

RESPONSIBILITIES

• Design, deploy, and operate Azure IaaS and PaaS services, including virtual machines, availability zones, virtual machine scale sets, App Service, Azure Functions, storage accounts, Azure SQL, and supporting platform services.
• Establish and maintain Azure governance across tenants, management groups, subscriptions, resource groups, naming, tagging, Azure Policy, role-based access control, budgets, cost controls, and security baselines.
• Engineer identity and access controls using Microsoft Entra ID, Conditional Access, Privileged Identity Management, managed identities, service principals, workload identities, and least-privilege role assignments.
• Design and maintain Azure networking, including virtual networks, peering, network security groups, Azure Firewall, Application Gateway, web application firewall, load balancing, private endpoints, Private Link, DNS, VPN, and ExpressRoute connectivity.
• Configure and improve Microsoft Defender for Cloud, Azure Monitor, Log Analytics, Application Insights, Network Watcher, and Microsoft Sentinel integrations, including diagnostic settings, service health alerts, dashboards, reporting, and automated response workflows for reliability, performance, threat detection, and security visibility.
• Automate deployments, configuration management, controls, reporting, and remediation using PowerShell, Azure CLI, ARM templates, Bicep, Terraform, Azure Automation, Logic Apps, or approved Infrastructure-as-Code practices.
• Assess and execute Azure migrations and modernization using Azure Migrate and related services, from workload discovery and dependency analysis through architecture, sizing, deployment, validation, optimization, and operational handoff.
• Partner with application, infrastructure, security, and service teams to incorporate availability, supportability, security, cost management, and operational requirements into solution design and change management.
• Administer Windows Server, Active Directory, Group Policy, DNS, DHCP, certificate services, file services, virtualization, and Microsoft 365 services connected through identity, networking, automation, or Azure integration.
• Build and maintain backup, recovery, and resiliency capabilities using Recovery Services vaults, Azure Backup, Azure Site Recovery, restore testing, retention standards, and documented recovery procedures.
• Manage compute and platform lifecycle activities, including patching, image management, capacity planning, right-sizing, reservations, cost optimization, and retirement of obsolete resources.
• Maintain hybrid connectivity and management across on-premises and Azure environments, including Azure Arc, hybrid identity, synchronization, monitoring, and secure administrative access.
• Implement Azure Key Vault, certificates, secrets, encryption, managed identities, and secure application configuration patterns to protect systems, identities, privileged workflows, and data in transit and at rest.
• Develop and enforce security policies, configuration standards, technical baselines, and practices for secure administration, change control, patch management, backup, monitoring, recovery, and operational handoff.
• Evaluate Azure architecture against the Cloud Adoption Framework and Well-Architected Framework, and remediate gaps in reliability, security, cost optimization, operational excellence, and performance efficiency.
• Collaborate with incident response and service teams on response, escalation, recovery, and communications procedures; investigate suspicious activity and service degradation; and support containment, restoration, forensic analysis, root-cause analysis, and corrective action planning.
• Perform recurring reviews of Azure configurations, privileged access, service principals, identities, systems, accounts, backup status, patch status, and security activities.
• Maintain architecture diagrams, build documents, standard operating procedures, recovery plans, troubleshooting guides, and runbooks; provide technical guidance, knowledge transfer, and training to end users, administrators, application owners, and service desk, infrastructure, security, and application support teams.
• Map systems, Azure, and data security controls to applicable regulatory, contractual, and compliance requirements; partner with legal, compliance, security, and audit teams to provide technical evidence and address control gaps.
• Stay current with Azure platform changes, security advisories, service retirements, technical roadmaps, and data protection laws, and update systems standards and security measures accordingly.

QUALIFICATIONS & EXPERIENCE

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.
• Minimum of 5 years of hands-on experience in systems engineering, cloud engineering, cloud administration, infrastructure operations, or enterprise IT.
• Microsoft Azure Administrator Associate (AZ-104) certification or equivalent hands-on Azure administration experience.
• Proven experience engineering and operating Azure services across compute, networking, storage, identity, monitoring, backup, recovery, governance, automation, and security.
• Hands-on experience administering Microsoft Azure, Microsoft 365, Microsoft Entra ID, Windows Server, Active Directory, networking, virtualization, logging, and governance services.
• Strong knowledge of cloud architecture, Zero Trust, least privilege, shared responsibility, high availability, disaster recovery, systems lifecycle management, and operational control design.
• Strong understanding of Azure Landing Zones, subscription design, hybrid identity, network architecture, backup and recovery, monitoring, patching, cost management, and resource lifecycle management.
• Proficiency with PowerShell and working knowledge of Azure CLI, Bicep, Terraform, KQL, REST APIs, Microsoft Graph, or Python for automation, reporting, and operational tooling.
• Strong communication and collaboration skills, including working with remote and cross-functional teams and explaining technical risks, service impacts, architecture decisions, and recovery requirements to engineers, business stakeholders, auditors, and leadership through clear documentation and runbooks.
• One or more relevant certifications preferred, including AZ-305, AZ-500, AZ-700, AZ-800, AZ-801, SC-300, SC-200, MS-102, Security+, CCSP, CISSP, or comparable infrastructure and cloud certifications.
• Experience within a Microsoft Partner organization, a Managed Services Provider, or complex Microsoft cloud environments supporting multiple business units, tenants, or regulated environments preferred.
• Experience with Azure Landing Zones, Azure Migrate, Cloud Adoption Framework, Well-Architected Framework, Azure Arc, or comparable cloud governance and hybrid management patterns preferred.
• Experience with Microsoft Sentinel, KQL, Defender XDR, Defender for Cloud, Azure Key Vault, Azure Policy, Azure Monitor, Log Analytics, Azure Backup, and Azure Site Recovery preferred.
• Experience supporting cloud-native applications, APIs, containers, Azure Kubernetes Service, CI/CD pipelines, database platforms, or AI-enabled workloads preferred.

WHAT DRIVES IMPACT

Behaviors define what our core values look like in action. Leaders are expected to model them; teams are expected to live them:

• Innovation: We embrace change because innovation lives outside the comfort zone.
• Passion: We are driven by purpose, fueled by passion, and obsessed with making an impact.
• Honesty: We are fiercely transparent and consistently honest.
• Fun: We fuel work with fun, knowing life's too short for boring.
• Low Ego: We champion ideas over titles, because brilliance knows no rank.
• One Team: We win as a team, we lose as a team, we are one team.

COMPENSATION

Actual compensation packages are based on several factors that are unique to each candidate, including but not limited to skillset, experience and training, licensures and/or certifications, and other organizational needs.

Impact may offer applicable incentive compensation plans depending on role and/or department.

Full compensation details can and will be discussed with an Impact Talent Acquisition team member at the start of the interview process.

BENEFITS WE TAKE PRIDE IN

• 5-year Tiffany & Co. Gift Card or Custom Menswear, 10-year Custom Rolex, 20-year $20,000 Check incentive rewards
• Valuable time off with up to 20 days of PTO, 7 Paid Sick Days, 12+ paid holidays, and Paid Parental Leave
• Development and growth opportunities with on-going training & continued education reimbursement
• 401(K) & retirement plans with complimentary financial advisory services
• Comprehensive health, disability, life, dental, and vision plans

For full benefit information, visit https://www.impactmybiz.com/careers/#benefits

WORK AUTHORIZATION & IMMIGRATION SPONSORSHIP

Candidates must be authorized to work in the United States at the time of application. Immigration sponsorship may be considered in select cases based on business need, cost, workforce planning, and applicable government requirements. Impact does not guarantee sponsorship for any visa category and may decline certain petitions based on associated costs or regulatory requirements.

Certain positions within Impact may involve access to information, technology, software, or technical data that is subject to U.S. export control laws and regulations, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). Where required by applicable law based on the nature of the role, individuals in such positions must qualify as a “U.S. Person,” as defined by law, or otherwise be eligible to obtain any required government authorizations.