Senior Systems Engineer

Role & responsibilities

Monitoring, RMM and alert response

• Daily driver on our RMM platform [NinjaOne / Datto RMM / ConnectWise Automate / N-able name yours]: patching policies, scripting, monitor configuration, automation
• Zabbix building templates, triggers and thresholds that produce actionable alerts rather than noise
• Owning the alert queue — triaging what comes in, resolving what you can, escalating what you cannot, and permanently killing alerts that never mattered
• Tuning monitoring so recurring false positives get fixed at the source instead of muted

Firewalls, networking and VPN

• Sophos firewalls — rules, NAT, web and application filtering, IPS, and Sophos Central administration
• pfSense / OPNsense — configuration, upgrades, high availability and troubleshooting
• IPsec site-to-site tunnels — building them, and more importantly diagnosing why phase 1 or phase 2 dropped
• SSL VPN — remote access configuration, certificate handling, client-side troubleshooting
• Core networking judgment: VLANs, routing, NAT, DNS, and reading a packet capture when it comes to that

Virtualization and servers

• VMware (vSphere / ESXi) — host and cluster administration, storage, patching, upgrades
• Proxmox — cluster management, backups, ZFS and storage, VM and container administration
• Windows Server 2016 to 2019 upgrades — in-place and migration paths, AD and domain controller role handling, application compatibility, and a real rollback plan
• General Windows Server administration: Active Directory, group policy, DNS, DHCP, certificates, file services

Identity and Microsoft 365

• Microsoft 365 tenant administration — Exchange Online, mail flow and mail security, SharePoint and OneDrive, licensing
• Entra ID (Azure AD) — Entra Connect / AD Connect sync, conditional access, MFA, hybrid identity
• Diagnosing sync failures, duplicate objects and hybrid identity problems that do not show up cleanly in the portal

Backup and recovery

• Veeam — Backup & Replication and Microsoft 365 backup: job design, repository management, failure triage
• Restore testing — actually performing test restores on a schedule, not assuming green jobs mean recoverable data
• Understanding each client’s RPO and RTO, and knowing where the real gaps are

Documentation

• IT Glue — you keep it accurate. Passwords, configurations, network diagrams and runbooks stay current because you update them as you work, not in a quarterly cleanup sprint
• Writing documentation an L1 engineer can follow without calling you

Preferred candidate profile

Required

• [3-10]+ years in systems administration, with meaningful time in an MSP or multi-client environment
• Hands-on depth across the stack above we will test this in interview
• Proven experience supporting North American or other overseas clients
• Excellent written and spoken English; you will speak directly to Canadian and US clients
• The judgment to work independently — for most of your shift, you are the senior engineer on duty
• Clear written handover discipline, so the North American team picks up exactly where you left off
• Documentation discipline — a genuine requirement here, not a bullet point

Strongly preferred

• Certifications: [Sophos Certified Engineer or Architect, VMware VCP, Microsoft AZ-800 or AZ-104, Veeam VMCE, CCNA]
• Experience running or improving a NOC alert queue
• Scripting in PowerShell and/or Bash for automation
• Experience migrating clients between platforms — on-premises to cloud, Hyper-V to VMware or Proxmox