Senior IT Systems Engineer (L3 Support)

Overview of Role

The IT Service Desk L3 Engineer is a senior-level technical role responsible for providing the highest level of internal support and acting as the final escalation point for the IT Service Desk. This individual will lead complex project implementations, architect secure identity solutions, and ensure the stability of core infrastructure services. The L3 Engineer works closely with IT leadership to define technical standards, automate workflows, and maintain a high-security posture across all platforms.

Responsibilities

• Serve as the primary escalation point for complex technical issues from L1 and L2 engineers, ensuring timely resolution and adherence to SLAs.
• Architect, implement, and manage enterprise-grade SSO and Identity Provider (IDP) solutions.
• Manage and optimize Google Workspace and Administration at an expert level, including advanced security configurations and audit logging.
• Serve as the Subject Matter Expert (SME) for the Atlassian suite, specifically Jira Service Management, to streamline IT and business workflows.
• Enforce email security standards by configuring and monitoring SPF, DKIM, and DMARC protocols.
• Automate user lifecycle management through SCIM, JIT, and other advanced provisioning protocols.
• Oversee global Mac OS device management using advanced MDM tools and hardware asset management protocols.
• Manage complex storage infrastructure including iSCSI, NFS, and SFTP environments.
• Conduct Problem Management to identify root causes of recurring incidents and implement long-term preventative measures.
• Lead technical documentation efforts, creating architectural diagrams and high-level knowledge base articles.

Key Skillsets

• Identity & Access: Deep expertise in Single Sign-On (SSO) integration and Identity Provider (IDP) solutions (e.g., Okta, Azure AD). Mastery of identity protocols including OAuth 2.0, SAML 2.0, and OpenID Connect. Hands-on experience with automated user provisioning via SCIM and Just-in-Time (JIT) provisioning for user lifecycle management.
• Messaging Security: Expert-level knowledge in configuring, deploying, and troubleshooting email authentication protocols (SPF, DKIM, DMARC) to prevent spoofing and enforce email security policies.
• Infrastructure & Storage: Strong understanding of storage protocols (iSCSI, NFS) for enterprise environments. Experience managing secure file transfer protocols (SFTP) and core networking services (DNS, DHCP) for reliability and performance.
• Collaboration Suites: In-depth and demonstrable expertise in Google Workspace Administration, including advanced security settings, organizational unit (OU) management, audit log analysis, and Chrome Enterprise Management.
• Atlassian Suite: Expert level knowledge in Atlassian products, including designing and managing complex workflows, automation, and reporting within Jira Service Management (JSM), Jira Software, and Confluence to streamline IT operations and project delivery. Specific JSM expertise must include:
  • Incident & On-Call Management: Implementing and managing JSM Premium features such as the Operations Center for on-call scheduling with various shifts, rotations, and overrides, full escalation policies, and advanced notifications (SMS, voice calls, Slack) for P1/P2 alerts.
  • Platform Administration: Creating new request types and approval workflows based on ITIL principles, and leveraging the JSM/Confluence integration for knowledge base management.
  • Integration & Automation: Expert experience with JSM API usage, troubleshooting complex API integrations (including webhooks for real-time data synchronization to external systems like CRM), and developing API scripts for user and data migration.
  • Licensing & Cost Reduction: Utilizing Identity Providers (IDPs) (like Rippling/Okta) to reduce Atlassian license spend, manage user access based on organizational needs, and transition license models.
  • AI Integration: Implementing Atlassian Rovo and integrating it with the IT Service Desk knowledge base to provide initial assistance and automated responses for incoming tickets.
• Endpoint Management: Proven experience with Enterprise Mac OS and Windows endpoint management, including deployment, patch management, security baselining, and inventory using modern MDM solutions (e.g., Rippling, Jamf, Intune).
• Operating Systems: Advanced troubleshooting and scripting skills for Mac OS and Windows operating systems.