Senior IT Systems Engineer

About Care Access Care Access is working to make the future of health better for all. With hundreds of research locations, mobile clinics, and clinicians across the globe, we bring world-class research and health services directly to communities that often face barriers to care. We are dedicated to ensuring that every person has the opportunity to understand their health, access the care they need, and contribute to the medical breakthroughs of tomorrow. With programs like Future of Medicine, which makes advanced health screenings and research opportunities accessible to communities worldwide, and Difference Makers, which supports local leaders to expand their community health and wellbeing efforts, we put people at the heart of medical progress. Through partnerships, technology, and perseverance, we are reimagining how clinical research and health services reach the world. Together, we are building a future of health that is better and more accessible for all. To learn more about Care Access, visit www.CareAccess.com. How This Role Makes a Difference The Senior IT Systems Engineer will lead the design, implementation, and continuous optimization of our core enterprise infrastructure, cloud services, and endpoint management systems. In this role, you will champion operational excellence by driving automation, proactively hardening system security, and leading the technical response and root-cause analysis for critical service incidents. Additionally, you will foster a culture of continuous learning by mentoring junior administrators, maintaining high-quality technical documentation, and collaborating cross-functionally on strategic business initiatives and platform migrations. How You'll Make An Impact - Design & implement core infrastructure and systems: Research, design, deploy, and improve enterprise systems (identity, M365, endpoint management, cloud services). Lead upgrades, migrations, and new platform rollouts with clear standards and documentation. - Reliability, monitoring, and incident escalation: Own operational excellence for critical services—monitoring/alerting, incident response, root-cause analysis, and permanent fixes. Improve uptime, performance, and security posture through automation and hardening. - Security, compliance, and vendor/partner collaboration: Partner with Security and Compliance to implement controls (least privilege, patching, logging, access reviews). Manage vendor escalations, evaluate tools, and ensure systems meet internal standards and audit requirements. - Mentor junior system admins and build a robust knowledge base for new hires to the IT team and self-service guides for end users - Other Responsibilities: - Maintain and continuously improve technical documentation (runbooks, SOPs, architecture diagrams, CMDB/service catalog entries). - Participate in on-call rotation and provide escalation support; contribute to incident postmortems and track corrective actions to completion. - Contribute to tool evaluations and proof-of-concepts; recommend standards and drive adoption (MDM, EDR, IAM, backup, monitoring). - Help implement and test business continuity/disaster recovery runbooks (backup verification, restore tests, DR exercises). - Participate in cross-functional projects (e.g., M&A integrations, system migrations, data center/cloud transitions). The Expertise Required - Strong knowledge of enterprise infrastructure: identity/IAM, M365, endpoint management, networking fundamentals, and directory services. - Working knowledge of cloud platforms (Azure and/or AWS): core services, IAM, networking, logging, and cost/guardrail concepts. - Understanding of security best practices: MFA/conditional access, least privilege, hardening, patch/vulnerability management, and audit logging. - Familiarity with IT service management concepts: incident/problem/change management, SLAs, and operational metrics. - Knowledge of automation patterns and configuration management concepts (IaC mindset, repeatability, drift prevention). - Ability to design and implement scalable, secure systems end-to-end (requirements → architecture → rollout → runbooks). - Strong troubleshooting skills across endpoints, identity/auth, networking, and SaaS/cloud dependencies (root-cause oriented). - Proficiency in scripting/automation (PowerShell strongly preferred; Python/Bash a plus) for provisioning, reporting, and remediation. - Experience with monitoring and observability (log collection, alert tuning, dashboards) and on-call/incident leadership. - Solid documentation skills: standards, runbooks, diagrams, and change plans that others can execute. Certifications/Licenses, Education, and Experience - Minimum Education: - Bachelor’s Degree or Equivalent - Minimum Experience: - 7+ years of experience within an information technology specific role How We Work Together - Location: Remote within the United States. This role requires 100% of work to be performed in a remote office environment. - Travel: This is a remote position with less than 10% travel requirements. Occasional planned travel may be required as part of the role. - Physical demands associated with this position Include: The ability to use keyboards and other computer equipment. The expected pay range for this role is $120,000 - $170,000 USD per year for full time team members. Benefits & Perks (US Full Time Employees) - Paid Time Off (PTO) and Company Paid Holidays - 100% Employer paid medical, dental, and vision insurance plan options - Health Savings Account and Flexible Spending Accounts - Bi-weekly HSA employer contribution - Company paid Short-Term Disability and Long-Term Disability - 401(k) Retirement Plan, with Company Match Mandatory Employer Disclosures Notice to Illinois applicants: Applicants are not obligated to disclose expunged juvenile records or adjudication, arrest, or conviction. Notice to Connecticut applicants: Care Access may require applicants to submit to a urinalysis drug test in connection with an application for employment. Notice to Arizona, Georgia, Indiana, and North Dakota applicants: Care Access complies with applicable laws prohibiting smoking in and around places of employment. Notice to Massachusetts applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Notice to Rhode Island applicants: Care Access complies with Rhode Island law prohibiting smoking in enclosed areas within places of employment. Care Access is also subject to is subject to Chapters 29–38 of Title 28 of the Rhode Island General Laws. Notice to Maryland applicants: UNDER MARYLAND LAW, AN EMPLOYER MAY NOT REQUIRE OR DEMAND, AS A CONDITION OF EMPLOYMENT, PROSPECTIVE EMPLOYMENT, OR CONTINUED EMPLOYMENT, THAT AN INDIVIDUAL SUBMIT TO OR TAKE A LIE DETECTOR OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100. #LI-Remote Diversity & Inclusion We work with and serve people from diverse cultures and communities around the world. We are stronger and better when we build a team representing the communities we support. We maintain an inclusive culture where people from a broad range of backgrounds feel valued and respected as they contribute to our mission. We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to, and will not be discriminated against on the basis of, race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Care Access is unable to sponsor work visas at this time. If you need an accommodation to apply for a role with Care Access, please reach out to: TalentAcquisition@careaccess.com