Systems Engineer

As a Systems Engineer, you will design, build, secure, and support Malibu's identity, collaboration, and cloud infrastructure across all MBI brands. The role is centered on Microsoft Entra ID, Microsoft 365, Active Directory, and AWS, with a strong emphasis on automation, infrastructure as code, and standardization. You will partner closely with the networking team on connectivity, segmentation, and hybrid cloud integration across on-premises, AWS, and Azure environments, and work with the security, platform, and support teams to deliver reliable, scalable, and well-documented systems, and serve as an escalation point for complex technical issues. Your knowledge of hybrid identity and cloud infrastructure will be integral in this role.

Essential Duties and Responsibilities

List the job's essential or most important functions and responsibilities. Include all important aspects for the job whether performed daily weekly, monthly, or annually and any that occur at irregular intervals.

• Administer, secure, and maintain Microsoft Entra ID, including identity lifecycle, Conditional Access, MFA, Privileged Identity Management (PIM), app registrations, enterprise applications, and SSO integrations for third-party SaaS solutions.
• Administer and maintain hybrid identity between on-premises Active Directory and Entra ID, including Entra Connect / Cloud Sync, hybrid join, and directory synchronization health.
• Administer Active Directory Domain Services, Group Policy, DNS, DHCP, and Windows Server systems across MBI sites; maintain AD health, replication, and a tiered administrative access model.
• Administer Microsoft 365 workloads, including Exchange Online, SharePoint Online, OneDrive, and Teams; manage tenant configuration, licensing, mail flow, retention, and collaboration governance.
• Manage endpoint configuration and compliance through Microsoft Intune, including Windows Autopilot, configuration profiles, compliance policies, application deployment, and patch management.
• Design, provision, and manage AWS infrastructure (EC2, VPC, Transit Gateway, IAM, S3, RDS, Systems Manager, AWS Backup, Organizations) to ensure standardization, security, cost-efficiency, and supportability.
• Design, provision, and manage Azure infrastructure (Virtual Machines, Virtual Networks, Storage, Azure SQL, Key Vault, Azure Monitor, Azure Backup, Management Groups and Azure Policy) and Microsoft Fabric (capacities, workspaces, OneLake, and access governance) to ensure standardization, security, cost-efficiency, and supportability.
• Implement and maintain identity federation between Entra ID and AWS (IAM Identity Center) and other platforms, applying least-privilege and role-based access principles.
• Develop and maintain infrastructure as code using Terraform, CloudFormation, Ansible, or similar tools, and contribute to CI/CD pipelines (GitHub Actions, AWS CodePipeline) for infrastructure changes.
• Develop automation scripts and tools (PowerShell, Microsoft Graph, AWS CLI/SDK, Python) for provisioning, configuration management, and recurring administrative tasks.
• Monitor system health, performance, and capacity, including logging, metrics, and alerting (CloudWatch, Entra sign-in and audit logs, M365 service health); drive root-cause resolution for recurring issues.
• Partner with the security team to implement and maintain security controls, hardening baselines (CIS, Microsoft Secure Score), vulnerability remediation, and audit and regulatory compliance requirements, including SOX IT general controls.
• Test, implement, and maintain backup and disaster recovery systems for on-premises, AWS, and Microsoft 365 workloads, and participate in DR exercises.
• Support network and security infrastructure as it relates to systems -- firewalls, VPNs, site-to-site and AWS connectivity -- in coordination with network and security engineers.
• Create and maintain documentation, runbooks, standards, and architecture diagrams, and work closely with platform, development, security, and support teams to optimize platform performance.
• Communicate with users, technical teams, and vendors regarding system implementations, changes, and interruptions, following established change management processes.
• Serve as an escalation point for the service desk and support teams, and provide technical guidance on identity, M365, and cloud issues.
• Participate in the after-hours on-call rotation.
• Other duties may be assigned.

#MBICareers #MalibuBoats

Qualifications

• BS or AA degree in Computer Science, Information Systems, Business or an equivalent combination of education and experience
• Microsoft certifications (MS-102 Microsoft 365 Administrator, SC-300 Identity and Access Administrator) and/or AWS certifications (Solutions Architect - Associate, CloudOps Engineer - Associate) preferred.
• 6+ years supporting, troubleshooting and maintaining IT systems -- servers (physical, virtual, and cloud), client endpoints, and enterprise applications
• 4+ years of experience administering Active Directory, Group Policy, DNS, DHCP, and Windows Server systems
• 4+ years of experience administering Microsoft 365, including Exchange Online, SharePoint Online, OneDrive, and Teams
• 4+ years of experience administering Microsoft Entra ID, including Conditional Access, MFA, hybrid identity (Entra Connect), and SSO (SAML/OIDC)
• 3+ years supporting and administering AWS infrastructure (EC2, VPC, IAM, S3) -- AWS required, Azure preferred
• 3+ years of experience with endpoint management using Intune
• 2+ years of experience scripting and automating with PowerShell; Microsoft Graph API and Python experience preferred
• 2+ years of experience configuring and maintaining backup and disaster recovery systems/processes
• 1+ years of experience with Terraform, CloudFormation, Ansible, or similar IaC tools.  Experience with GitHub Actions or AWS CodePipeline preferred
• Strong working knowledge of networking fundamentals -- TCP/IP, DNS, VPN, LAN/WAN, and firewalls (Fortinet and Cisco preferred).  AWS Transit Gateway preferred.
• Experience supporting audit and compliance requirements (e.g., SOX ITGC user access reviews) preferred
• General understanding of business process, application logic, development environment, databases, data management and infrastructure capabilities and constraints
• Demonstrated ability to think strategically about business, products and technical challenges
• Strong verbal and written communication skills, with an ability to express complex technical concepts in business terms
• Must be able to lead meetings and discuss implications of systems implementations, deployment and changes
• Solid teamwork and interpersonal skills and ability to communicate with customers, associates, and management
• Strong problem-solving and conceptual skills; experience in manufacturing or multi-site environments preferred

Education and/or Experience: Bachelor's degree (B. A.) from four-year college preferred; or Associates Degree (A.A.) from a two-year program; or six years related experience and/or training; or equivalent combination of education and experience.

Language Skills: Ability to read, analyze, and interpret common scientific and technical journals, financial reports, and legal documents. Ability to respond to common inquiries or complaints from customers, regulatory agencies, or members of the business community. Ability to effectively present information to management.

Mathematical Skills: Ability to calculate figures and amounts such as discounts, interest, commissions, proportions, percentages, area, circumference, and volume. Ability to apply concepts of basic algebra and geometry

Reasoning Ability: Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables