Overview

About the RoleThe Sr. Systems Engineer is a senior individual contributor at Leonardo Electronics US Inc. responsible for the design, implementation, and day-to-day operation of enterprise network, cloud, and on-premises infrastructure. This role owns two primary technical domains - the Cisco Meraki network environment and the Microsoft Azure GCC High cloud tenant - and supports the broader IT environment through virtualization, storage, monitoring, and backup operations. The Sr. Systems Engineer works closely with the IT Manager and broader IT team to ensure all configurations meet security hardening requirements and organizational compliance obligations.What You'll DoNetwork Infrastructure Own the full Cisco Meraki environment (MX, MS, MR) - firewall rules, VPN, VLAN segmentation, SD-WAN, wireless, and IDS/IPS - and serve as the organization's Meraki SME.Manage DNS, DHCP, and internet circuit providers; maintain ISP relationships, circuit diversity, and failover to keep the business running.Apply Zero Trust principles across the network - microsegmentation, least-privilege access, and identity-based policy enforcement.Monitor network health and respond to performance and security events; maintain configuration baselines and documentation. Cloud Infrastructure Administer the Azure GCC High tenant - Entra ID (user lifecycle, conditional access, PIM), virtual machines, virtual networking, NSGs, and VPN/ExpressRoute connectivity.Keep M365 GCC High running smoothly - Exchange Online, SharePoint Online, and Teams - in coordination with the support team.Monitor the cloud environment with Azure Monitor, Defender for Cloud, and Sentinel; tune alerts and respond to incidents with the security team. Infrastructure Operations Manage on-premises virtualization (VMware or Hyper-V), storage (NAS/SAN), backup (Veeam or Azure Backup), and infrastructure monitoring - keeping systems healthy and recoverable.Automate repetitive tasks and provisioning workflows using PowerShell, Python, or IaC tools; document what you build so the team can support it.Lead DR planning and testing; ensure RTO/RPO targets are defined, tested, and achievable.Mentor junior team members and serve as the escalation point for complex infrastructure issues. What You BringRequired 7-10 years in IT systems engineering or infrastructure administrationCisco Meraki - hands-on MX, MS, and MR administration; Meraki Dashboard proficiencyMicrosoft Azure (GCC High or commercial) - Entra ID, Azure networking, Defender for Cloud, IntuneNetworking fundamentals - TCP/IP, DNS, DHCP, VLANs, BGP/OSPF, firewall management, VPN, SD-WANZero Trust - practical experience with microsegmentation, identity-based access, or least-privilege network designBackup and DR - Veeam, Azure Backup, or equivalent; RTO/RPO planning and testingScripting - PowerShell required; Python or Bash a plusCompTIA Security+ CE (DoD 8140 compliant) Preferred Azure GCC High tenant experienceMicrosoft Sentinel - KQL queries, analytic rules, playbook automationVirtualization - VMware vSphere/vCenter or Hyper-VStorage - NAS/SAN provisioning and administrationAzure certifications: AZ-104, AZ-800, AZ-305, or AZ-700Cisco Meraki ECMS certification Education Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent hands-on experience Logistics Location: Tucson, AZ (on-site)Travel: 10% (approximately one week per quarter)Clearance: No active clearance required; ability to obtain may be required in the future NOTE: The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All personnel may be required to perform duties outside of their normal responsibilities from time to time, as needed. Leonardo is an Equal Opportunity Employer. All qualified applicants will receive considerat