Senior Systems Engineer

Position Function: Designs, implements, administers, and supports the Bank's enterprise server and application platforms, with primary responsibility for operating systems, application hosting, middleware, identity, endpoint management, Microsoft 365 administration, certificates, and related enterprise services. The role is oriented toward systems and application engineering rather than ownership of physical infrastructure, which is primarily delivered through infrastructure-as-a-service providers. Serves as a senior technical subject matter expert and escalation point for complex server, application, authentication, certificate, deployment, performance, and integration issues. Leads technical design and implementation for new or upgraded systems, application platforms, and enterprise services; develops repeatable deployment and administration standards; and ensures solutions are secure, resilient, supportable, monitored, and well documented. Performs all duties and interacts with internal and external customers in a manner aligned with the Company's Core Values of Voyaging Spirit and Positively Ohana; Customer Experience Competencies of Customer Interaction, Empowerment and Ownership; and Basic Skills of Listening, Oral Communication, Written Communication, Action Orientated, Thoroughness, Problem Solving. Primary Accountabilities: Server and Operating System Engineering and Administration Designs, builds, configures, upgrades, patches, hardens, and administers Windows Server and, where applicable, Linux server operating systems supporting enterprise applications and services. Administers core Windows services including Active Directory, Group Policy, DNS, DHCP, service accounts, scheduled tasks, file services, and related authentication and authorization dependencies. Plans server and operating-system lifecycle activities including capacity requirements, version upgrades, migrations, decommissioning, technical standards, and production implementation plans. Performs advanced troubleshooting of server availability, performance, authentication, operating-system, service, and dependency issues and leads root-cause analysis for recurring or high-impact problems. Coordinates with infrastructure-as-a-service providers for compute, storage, backup, virtualization, and data-center services and validates that delivered infrastructure meets application and operational requirements. Application Platform, Deployment and Certificate Administration Designs, implements, configures, and administers application hosting and middleware platforms such as Microsoft IIS, web/application servers, Windows services, Java/JBoss/WildFly or comparable runtimes, scheduled jobs, and supporting application components. Leads application and infrastructure-software deployments across development, test, disaster-recovery, and production environments, including prerequisite validation, configuration, release coordination, implementation, rollback, and post-deployment verification. Administers enterprise certificates and TLS dependencies, including certificate requests, renewals, installation, bindings, trust chains, keystores, expiration monitoring, and coordination with internal or external certificate authorities. Manages application service accounts, secrets, environment variables, configuration files, ports, dependencies, load-balancer requirements, and integration endpoints in accordance with security and change-management standards. Partners with application owners, vendors, developers, database teams, Security, and Network teams to diagnose complex application-platform and integration issues. Microsoft Endpoint, Identity and M365 Administration Administers Microsoft Intune for device configuration, compliance policies, application packaging and deployment, endpoint security settings, update rings, enrollment, and troubleshooting for managed Windows and mobile devices. Administers Microsoft Entra ID capabilities including users and groups, enterprise applications, SSO, conditional access, MFA, role-based access, application registrations, service principals, and hybrid identity integrations. Supports the Microsoft 365 administration suite, including tenant-level configuration and administration of Exchange Online, Teams, SharePoint/OneDrive, licensing, security settings, and service-health troubleshooting as assigned. Develops and maintains standardized endpoint, identity, and productivity-service configurations that support secure access, operational consistency, and user productivity. Provides senior escalation support for complex endpoint, identity, authentication, Microsoft 365, and application-access issues. Technical Design, Automation and Operational Excellence Produces technical designs, implementation plans, architecture diagrams, configuration standards, runbooks, test plans, rollback procedures, and operational handoff documentation for assigned systems and applications. Uses PowerShell and other scripting or automation tools to standardize server provisioning, application deployment, certificate management, health checks, configuration, reporting, patching, and recurring administrative tasks. Participates in incident, problem, change, vulnerability, business-continuity, and disaster-recovery processes; supports monitoring, logging, alerting, recovery testing, and audit evidence for assigned platforms. Provides limited network administration and troubleshooting needed to support systems and applications, including DNS, DHCP, routing/connectivity concepts, firewall and port requirements, load balancers, and vendor coordination; escalates advanced network engineering to the appropriate team or provider. Mentors systems administrators and engineers, reviews technical work, and establishes repeatable engineering and administration practices. Minimum Qualifications: Education: Bachelor's degree from an accredited 4-year university, preferably in a related field required. Experience: 7+ years of experience of progressive systems administration or systems engineering experience supporting production enterprise server and application environments required. 5+ years of hands- on experience with Windows Server, Active Directory, application hosting/middleware, application deployment, certificates/TLS, patching, monitoring, and advanced production troubleshooting required. 3+ years of hands-on administration experience of Microsoft Intune, Microsoft Entra ID, and Microsoft 365 services in an enterprise environment preferred. Related experience with IIS, Java/JBoss/WildFly or comparable middleware, PowerShell automation, application integrations, load balancers, Linux, SQL/database connectivity, outsourced infrastructure providers, and regulated or highly available environments preferred. Licenses/Certifications: Microsoft role-based certification such as Windows Server Hybrid Administrator, Endpoint Administrator, Identity and Access Administrator, or Microsoft 365 Administrator preferred. ITIL Foundation or comparable IT service-management certification preferred. Physical Requirements & Working Conditions: Must be able to perform light physical work and to move or lift items including but not limited to boxes, files and papers up to 20 pounds unless otherwise as indicated. Must be able to operate and proficiently use standard office equipment, including phone, copier, personal computer and/or other work related mechanical or electronic devices and applications. Must be able to clearly communicate verbally and in writing with all internal and external customers. Must also be able to hear sufficiently to engage in daily discussions and interactions. Must be able to read and understand bank-related documents. Must be able to work in a conventional office setting, involving sitting at a desk or workstation for long periods of time. Must also be able to adapt to different work environments as needed to perform the job. We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment substance abuse testing.