System Engineer

The majority of this engagement will be dedicated to two interconnected workstreams:vSphere Version UpgradesAssess and upgrade legacy vSphere environments (currently running 6.7 and 7.0.3) across production vCenter environments covering ~560 VMs at Glenview HQ and Westmont colocationPlan upgrade sequencing across ESXi hosts, vCenter Server, and dependent workloads (NetApp ONTAP, vSAN) — accounting for compatibility matrices and workload risk per siteValidate upgrade readiness, manage pre/post validation checklists, and produce runbooks for each site phaseWork within the CAB change management process — submitting RFCs, supporting approval workflows, and owning change execution windowsVMware to Alternative Hypervisor MigrationLead technical planning and phased execution of migrating workloads from VMware vSphere to an alternative hypervisor platformAssess VM inventory, identify migration waves by workload criticality, and produce a detailed migration runbookValidate storage integration (NetApp ONTAP) and network compatibility across migration targetsIdentify and document platform-specific gaps (HA behavior, DRS equivalents, backup/snapshot integration, tooling changes)Coordinate with storage and application teams to validate workloads post-migrationProduce clear before/after documentation suitable for handoff to permanent staffBroader ResponsibilitiesActive Directory Hygiene & IdentityDesign, maintain, and remediate Active Directory across multiple untrusted forests — including GPO architecture, OU structure, security delegation, and encryption policy enforcementDrive AD hygiene initiatives: stale object cleanup, OU rationalization, privileged account audits, and group membership reviewsEvaluate authentication protocols, enforce encryption standards (AES Kerberos, RC4 remediation), and remediate misconfigurations before they become incidentsOperate identity and secrets infrastructure including Delinea Secret Server, service account lifecycle, and rotation automation across untrusted forestsAdopt and expand gMSA usage to reduce reliance on manually managed service account passwordsSCOM & SCCMManage and evolve SCOM and SCCM across the environment — service account hygiene, gMSA migration, alert management, and agent healthServer InfrastructurePlan and execute server deployments end-to-end — from build templates and hardening scripts through rack, stack, and production handoff across both physical and virtual infrastructureAdminister VMware vSphere and Hyper-V platforms and NetApp ONTAP storage — VM provisioning, datastore management, and performance tuning for Windows workloadsAzure Infrastructure ManagementManage Azure infrastructure — resource administration, subscription hygiene, tagging, cost awareness, and access controlMaintain hybrid connectivity between on-premises environments and Azure — ensuring consistent identity, DNS, and routing across the boundaryAdminister Azure Backup — backup policy management, vault configuration, and recovery validation for both Azure-hosted and hybrid workloadsSupport Azure infrastructure buildout for ongoing migration and modernization projects (SharePoint, server workloads)Automation & ToolingBuild and maintain PowerShell tooling for audit, remediation, and operational reporting — writing production-grade scripts that the team can maintain and extend