Vestmark is seeking a Systems Engineer to join our Enterprise IT team and help modernize our IT environment by improving hardware deployment, management efficiency, and user support.
This role serves as the first point of contact for end-user technical support across Windows, Mac, and Linux systems, with a growing focus on Apple device management (Macs and iOS devices) through Intune. The engineer will play a key role in our upcoming migration from on-premises Active Directory and OKTA to Entra ID (Azure AD) with Microsoft Authenticator, including setting up SSO integrations, implementing SCIM provisioning, and applying RBAC best practices.
The ideal candidate is customer-focused, ensuring a superior IT support experience while maintaining system security, availability, and efficiency. This position involves managing IT systems, driving strategic IT projects, and directly supporting Vestmark’s hybrid workforce.
Key Responsibilities
- Serve as frontline support for Apple devices (MacBooks, iPhones) within Intune MDM, including deployment, security, and lifecycle management.
- Manage Intune and Autopilot for Windows and Apple endpoints, ensuring seamless zero-touch deployment and configuration.
- Support Vestmark’s migration projects, including:
- Transition from on-premises Active Directory to Entra ID (Azure AD).
- Migration of SSO applications from OKTA to Azure ID.
- Implementation of SCIM and RBAC for identity and access management.
- Administer Microsoft 365, Exchange Online, SharePoint, OneDrive, and Teams.
- Familiarity with networking (TCP/IP, Switching, WiFi, Routing, Firewalls)
- Administer and maintain Active Directory, DNS, DHCP, and Group Policy (during transition).
- Deploy, configure, and manage endpoint management and security solutions.
- Perform system builds, including desktops, laptops, and servers.
- Administer and maintain cloud-based solutions and SaaS applications.
- Manage system backups and perform data restores as required.
- Monitor IT support ticket queues, ensuring timely resolutions and adherence to SLAs.
- Create, maintain, and improve IT documentation, best practices, and knowledge base articles.
- Evaluate emerging technologies to ensure compatibility with business needs.
- Maintain compliance with IT security standards and industry best practices.
Required Qualifications
- 4+ years of experience as a Systems Administrator/Engineer.
- Must be able to work onsite in the Wakefield, MA office at least 3 days per week.
- Strong experience with Microsoft Intune, Autopilot, and endpoint management for both Windows and Apple devices.
- Hands-on experience with Azure AD / Entra ID, including SSO integrations, SCIM provisioning, and RBAC.
- Strong understanding of Microsoft 365 administration (Exchange Online, SharePoint, OneDrive, Teams).
- Familiarity with OKTA to Azure ID migration projects is a plus.
- Understanding of networking concepts: DNS, DHCP, VPNs, and firewalls.
- Experience with virtualization (VMware vSphere).
- Scripting/automation with PowerShell.
- Strong troubleshooting skills across hardware, software, and cloud services.
- Experience with security tools (Mimecast, Sentinel One, Zscaler).
Preferred Qualifications
- Experience with the Atlassian suite (Jira, Confluence, JSM).
- Knowledge of compliance and data protection tools (Varonis, Arctic Wolf).
- Familiarity with Palo Alto Panorama firewall management.
- Experience with vulnerability management tools (Tenable).
- Experience with policy and risk management software (LogicGate).
- Broader scripting/automation experience.
Necessary Attributes
- Customer-first mindset with strong support skills.
- Ability to work independently and collaboratively in a dynamic environment.
- Excellent analytical, troubleshooting, and communication skills.
- Strong attention to detail and process documentation.
Vestmark is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Vestmark prohibits employment discrimination on the basis of race, color, religion, gender identity, sex, sexual orientation, pregnancy, national origin, age, disability status, protected military or veteran status, and genetic information. #LI-TG1 #LI-Onsite
Vestmark takes a market-based approach to compensation to ensure we pay fairly and competitively. Compensation for this role depends on several factors such as skills, experience, qualifications, job scope and location.
In addition to base salary, Vestmark offers a comprehensive total rewards package, which includes equity-based grants for all new hires, company-paid medical premiums of 90%, a competitive time-off program, and other variable compensation, if eligible.
Top Skills
Vestmark, Inc. Wakefield, Massachusetts, USA Office
Our company is conveniently located in Wakefield just north of Boston. We also offer a hybrid work option for those who are more comfortable at home.
Vestmark, Inc. Cambridge, Massachusetts, USA Office
One Kendall Square, Cambridge, MA, United States, 02139
Similar Jobs at Vestmark, Inc.
What you need to know about the Boston Tech Scene
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
