JOB SUMMARY: The IT Sr. Systems Engineer (Senior Infrastructure & Systems Architect) acts as a principal technical authority leading the technical evaluation, design, and integration of newly acquired environments into our core enterprise infrastructure. This position is responsible for architecting Active Directory/Entra ID domain collapses and federations, optimizing enterprise desktop and application virtualization platforms (Citrix, RDS, IGEL), and embedding operational AI automation into repetitive deployment and maintenance workflows. While not a dedicated Security Architect position, security diligence is central to this role. The IT Sr. Systems Engineer is directly responsible for enforcing baseline security hygiene across all migrated systems, managing SSL/TLS certificate lifecycles, and ensuring strict adherence to healthcare regulatory frameworks including HIPAA, HITECH, and patient data compliance standards. MAJOR DUTIES AND RESPONSIBILITIES: Analytical and Critical Thinking • Lead technical due diligence on acquired entities by evaluating legacy IT estates, network topologies, identity structures, and clinical systems. • Design, architect, and execute zero business hour downtime Active Directory forest consolidations, domain collapses, and identity synchronization into corporate Microsoft Entra ID (Azure AD) tenants. • Architect, maintain, and tune multi-site virtualization environments utilizing Citrix Virtual Apps and Desktops (CVAD/Citrix Cloud), Remote Desktop Services (RDS), and thin-client OS solutions (IGEL OS/Universal Management Suite). • Optimize image baselines and FSLogix profile containers to maximize host density and reduce compute resource usage. • Configure and support remote access infrastructure, including NetScaler ADC / Citrix Gateway, load balancing, and Storefront. • Identify high-frequency, repetitive infrastructure tasks (provisioning, image updates, patch testing, user offboarding/onboarding) and design automated workflows to streamline operations. • Leverage modern generative AI tools and programmatic scripting (PowerShell, Azure CLI, REST APIs, Python) to accelerate script generation, log auditing, configuration troubleshooting, and automated runbook documentation. • Maintain end-to-end management of SSL/TLS certificates, including automated renewals, private key security, gateway bindings (NetScaler ADC, IIS, reverse proxies), and cipher suite hardening to prevent service interruptions or protocol vulnerabilities. Workplace Computers and Equipment • Ensure peak application performance and high availability across distributed clinicians and office personnel accessing critical line-of-business and EMR platforms (Epic, NextGen, AthenaHealth, Allscripts). Planning and Organizing • Formulate standardized migration runbooks, baseline discovery checklists, and cutover playbooks to transition user profiles, mailboxes, and file services seamlessly with zero data loss. • Build intelligent operational reporting and telemetry to proactively detect infrastructure bottlenecks, license drift, and capacity constraints before they impact end users. Compliance, Policy, and Procedure • Oversee identity governance post-acquisition, including Conditional Access policies, Microsoft Intune endpoint enrollments, and tenant consolidation. • Enforce security best practices across all operating systems, hypervisors, and gateway access points (nFactor MFA, SAML/SSO federation, conditional access). • Ensure all architectural designs and integrated systems strictly comply with HIPAA, HITECH, and clinical data governance guidelines. • Conduct perimeter assessments and access reviews to protect protected health information (PHI) and enterprise identities against external compromise. SKILLS AND ABILITIES: • Directory & Identity Services: Proven track record architecting complex Active Directory forests, trusts, DNS/DHCP, and Microsoft Entra ID (Azure AD) Connect/Cloud Sync. • Application & Desktop Virtualization: Deep hands-on expertise with Citrix (Virtual Apps and Desktops, Citrix Cloud, NetScaler ADC), Microsoft Remote Desktop Services (RDS), Azure Virtual Desktop (AVD), and IGEL thin client deployments/management. • Scripting & AI Automation: Advanced proficiency in PowerShell or Azure CLI for systems administration; proven experience integrating AI assistance or automation tools into operational deployment routines. • Security & Certificate Lifecycle: Strong understanding of Public Key Infrastructure (PKI), SSL/TLS certificate chain deployment, Web Application Firewalls (WAF), and multi-factor authentication (nFactor/MFA). • Compliance Knowledge: Practical understanding of healthcare regulatory frameworks (HIPAA Security & Privacy Rules, Business Associate Agreements, clinical system audit readiness). • Healthcare & Cloud Integration (Preferred): Experience supporting or migrating healthcare workloads and EMR/EHR platforms (Epic, AthenaHealth, NextGen), as well as migrating workloads across on-premises datacenters, VMware vSphere, and public cloud (Azure/AWS). EDUCATION AND/OR EXPERIENCE: • 8–10+ years in senior infrastructure systems engineering or solutions architecture, with demonstrated experience in multi-site migrations, M&A integrations, or large-scale domain consolidations. • Bachelor’s degree in Computer Science, Information Technology, or equivalent military/professional experience. • Citrix Certified Associate/Professional (CCA-V, CCP-V), VMware VCP, Microsoft Certified: Azure Solutions Architect Expert, or Entra/Security Administrator. WORKING CONDITIONS/PHYSICAL DEMANDS: Work is typically performed in an office environment. The specific statements shown in each section of this description are not intended to be all-inclusive. They represent typical elements considered necessary to successfully perform the job.