Vestmark is seeking a Systems Engineer to join our Enterprise IT team and help modernize our IT environment by improving hardware deployment, management efficiency, and user support.
This role serves as the first point of contact for end-user technical support across Windows, Mac, and Linux systems, with a growing focus on Apple device management (Macs and iOS devices) through Intune. The engineer will play a key role in our upcoming migration from on-premises Active Directory and OKTA to Entra ID (Azure AD) with Microsoft Authenticator, including setting up SSO integrations, implementing SCIM provisioning, and applying RBAC best practices.
The ideal candidate is customer-focused, ensuring a superior IT support experience while maintaining system security, availability, and efficiency. This position involves managing IT systems, driving strategic IT projects, and directly supporting Vestmark’s hybrid workforce.
Key Responsibilities
- Serve as frontline support for Apple devices (MacBooks, iPhones) within Intune MDM, including deployment, security, and lifecycle management.
- Manage Intune and Autopilot for Windows and Apple endpoints, ensuring seamless zero-touch deployment and configuration.
- Support Vestmark’s migration projects, including:
- Transition from on-premises Active Directory to Entra ID (Azure AD).
- Migration of SSO applications from OKTA to Azure ID.
- Implementation of SCIM and RBAC for identity and access management.
- Administer Microsoft 365, Exchange Online, SharePoint, OneDrive, and Teams.
- Familiarity with networking (TCP/IP, Switching, WiFi, Routing, Firewalls)
- Administer and maintain Active Directory, DNS, DHCP, and Group Policy (during transition).
- Deploy, configure, and manage endpoint management and security solutions.
- Perform system builds, including desktops, laptops, and servers.
- Administer and maintain cloud-based solutions and SaaS applications.
- Manage system backups and perform data restores as required.
- Monitor IT support ticket queues, ensuring timely resolutions and adherence to SLAs.
- Create, maintain, and improve IT documentation, best practices, and knowledge base articles.
- Evaluate emerging technologies to ensure compatibility with business needs.
- Maintain compliance with IT security standards and industry best practices.
Required Qualifications
- 4+ years of experience as a Systems Administrator/Engineer.
- Must be able to work onsite in the Wakefield, MA office at least 3 days per week.
- Strong experience with Microsoft Intune, Autopilot, and endpoint management for both Windows and Apple devices.
- Hands-on experience with Azure AD / Entra ID, including SSO integrations, SCIM provisioning, and RBAC.
- Strong understanding of Microsoft 365 administration (Exchange Online, SharePoint, OneDrive, Teams).
- Familiarity with OKTA to Azure ID migration projects is a plus.
- Understanding of networking concepts: DNS, DHCP, VPNs, and firewalls.
- Experience with virtualization (VMware vSphere).
- Scripting/automation with PowerShell.
- Strong troubleshooting skills across hardware, software, and cloud services.
- Experience with security tools (Mimecast, Sentinel One, Zscaler).
Preferred Qualifications
- Experience with the Atlassian suite (Jira, Confluence, JSM).
- Knowledge of compliance and data protection tools (Varonis, Arctic Wolf).
- Familiarity with Palo Alto Panorama firewall management.
- Experience with vulnerability management tools (Tenable).
- Experience with policy and risk management software (LogicGate).
- Broader scripting/automation experience.
Necessary Attributes
- Customer-first mindset with strong support skills.
- Ability to work independently and collaboratively in a dynamic environment.
- Excellent analytical, troubleshooting, and communication skills.
- Strong attention to detail and process documentation.
Vestmark is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Vestmark prohibits employment discrimination on the basis of race, color, religion, gender identity, sex, sexual orientation, pregnancy, national origin, age, disability status, protected military or veteran status, and genetic information. #LI-TG1 #LI-Onsite
Top Skills
What the Team is Saying
What We Do
Headquartered outside of Boston, Mass. and founded in 2001, Vestmark is a leading provider of portfolio management/trading solutions and outsourced services for financial institutions and their advisors, enabling them to efficiently manage and trade customized client portfolios through an innovative SaaS platform. Supporting over $1.5 trillion in assets and more than 5 million accounts, Vestmark is a partner to some of the largest and most respected wealth management firms.
Why Work With Us
Our employees are the reason we've been named a Best Places to Work for several years! Our thriving hybrid work culture promotes individual growth, team collaboration, and employee wellness. This environment keeps client satisfaction high and employee turn-over low.
Gallery
Vestmark, Inc. Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
We have a mix of fully remote, hybrid, and in-office employees. We established Tuesdays & Thursdays as collaboration days for hybrid employees.
