Systems Engineer – Cloud & Infrastructure

Position Overview

The Systems Engineer is responsible for deploying, configuring, troubleshooting, and supporting network, server, cloud, and security infrastructure for F8 Tech and our managed clients.

This role includes hands-on work with SonicWall firewalls, modern SASE/cloud security solutions, switches, Windows Server environments, Microsoft 365, Microsoft Entra ID, Azure infrastructure, Azure Virtual Desktop, Intune, backup solutions, endpoint automation tools, and related security platforms.

The Systems Engineer will serve as an escalation resource for complex technical issues, assist with project implementation, and help ensure client environments are secure, reliable, well-documented, and aligned with F8 Tech standards.

Experience with ConnectWise Manage/RMM, Microsoft Intune, Microsoft 365 migrations, Nerdio, ImmyBot, and MSP environments is a strong plus.

Key ResponsibilitiesNetwork, Firewall, and Security Engineering

• Deploy, configure, and troubleshoot SonicWall firewalls, including NAT policies, firewall rules, DPI, content filtering, VPNs, high availability, and firmware updates.
• Support modern SASE, cloud firewall, and cloud-delivered security solutions where traditional firewall services are replaced or extended by cloud-based filtering, security, and remote access tools.
• Configure and support switches, VLANs, routing, wireless networks, WAN failover, and site-to-site connectivity.
• Troubleshoot network performance, connectivity, DNS, DHCP, VPN, and routing issues.
• Monitor, triage, and respond to SIEM and SOC alerts, coordinating remediation and documenting actions taken.
• Assist with security hardening, MFA, Conditional Access, Zero Trust practices, endpoint protection, DNS filtering, email security, and related security controls.

Server and Infrastructure Engineering

• Install, configure, and support Windows Server environments.
• Manage Active Directory, Group Policy, DNS, DHCP, file services, print services, and related server roles.
• Support Microsoft Entra ID, hybrid identity, Microsoft Entra Domain Services, Azure Files, and related cloud identity/file services where applicable.
• Support virtualization platforms such as Scale Computing, Hyper-V, and other client infrastructure platforms.
• Implement and support backup, disaster recovery, and business continuity solutions.
• Troubleshoot server performance, storage, application access, authentication, and infrastructure-related issues.

Azure, Microsoft 365, and Cloud Services

• Deploy, configure, and support Azure infrastructure, including virtual machines, virtual networks, storage, NSGs, and hybrid connectivity.
• Configure and support Azure Virtual Desktop environments, including host pools, session hosts, FSLogix profiles, user access, and performance troubleshooting.
• Use Nerdio, where applicable, to assist with Azure Virtual Desktop, Windows 365, Intune, automation, scaling, and management tasks.
• Administer Microsoft 365 services including Exchange Online, SharePoint, OneDrive, Teams, licensing, security, and compliance settings.
• Manage Microsoft Entra ID, user authentication, MFA, Conditional Access, security defaults, and identity-related troubleshooting.
• Assist with Microsoft 365 migrations, including tenant-to-tenant migrations, Exchange Online migrations, domain cutovers, mailbox moves, and related project planning.
• Support client cloud adoption and modernization efforts while following F8 Tech standards and best practices.

Endpoint Management and Automation

• Assist with Microsoft Intune deployments and ongoing management.
• Configure device enrollment, compliance policies, configuration profiles, security baselines, application deployments, and update policies.
• Support Microsoft Entra joined and hybrid-joined Windows devices.
• Use endpoint automation tools such as ImmyBot, where applicable, to assist with workstation deployments, software installation, configuration consistency, and onboarding automation.
• Troubleshoot endpoint management, policy application, device compliance, software deployment, and application installation issues.
• Assist with standardizing device management and deployment processes across client environments.

Client Support and Project Delivery

• Act as an escalation point for advanced network, firewall, server, Azure, AVD, Microsoft 365, Intune, automation, and security-related issues.
• Lead or assist with client onboarding, infrastructure upgrades, server replacements, cloud migrations, firewall replacements, Microsoft 365 migrations, workstation deployment automation, and security projects.
• Work with the Service Desk, Field Services, Account Management, and Engineering teams to resolve issues and complete projects successfully.
• Participate in Quarterly Network Checkups and provide clear findings, risks, and recommendations.
• Communicate professionally with clients and internal team members.
• Document all work thoroughly in ConnectWise and IT Glue.

Tools and Platforms

• Use ConnectWise Manage and ConnectWise RMM for ticketing, monitoring, alerting, automation, and service delivery.
• Work with F8 Tech’s standard toolset, including SentinelOne, DNSFilter, Proofpoint, Acronis, SIEM/SOC platforms, Microsoft 365, Azure, Intune, Nerdio, ImmyBot, and related client management tools.
• Follow F8 Tech documentation, security, and deployment standards.

QualificationsRequired

• 3+ years of systems engineering, network engineering, or senior technical support experience.
• Strong understanding of Windows Server, Active Directory, DNS, DHCP, Group Policy, and core infrastructure services.
• Experience troubleshooting networks, firewalls, VPNs, servers, Microsoft 365, and cloud services.
• Experience with Azure infrastructure and/or Azure Virtual Desktop.
• Strong documentation, communication, and client service skills.
• Ability to manage multiple tickets, projects, and priorities in a fast-paced MSP environment.
• Ability to work independently while also collaborating with Service Desk, Field Services, Account Management, and Engineering leadership.

Preferred

• MSP experience.
• SonicWall firewall deployment and troubleshooting experience.
• Experience with SASE, cloud firewall, or cloud-delivered security platforms.
• Microsoft 365 migration experience, including Exchange Online, tenant-to-tenant, domain cutovers, or mailbox migrations.
• Microsoft Intune experience, including device enrollment, compliance policies, configuration profiles, and app deployment.
• Nerdio experience for Azure Virtual Desktop, Windows 365, Intune, automation, scaling, or Azure management.
• ImmyBot experience for workstation deployment, software automation, onboarding, and endpoint configuration consistency.
• ConnectWise Manage and ConnectWise RMM experience.
• SIEM/SOC monitoring and incident response experience.
• Experience with SentinelOne, DNSFilter, Proofpoint, Acronis, or similar security and backup platforms.
• Microsoft, SonicWall, networking, security, or cloud certifications.

Work Environment

• Full-time position based in Gatesville, Texas.
• Onsite client work may be required depending on project and support needs.
• After-hours maintenance windows, project cutovers, and emergency escalations may be required.
• Reports to the Engineering Manager.

Ideal Candidate

The ideal candidate is a strong technical problem solver who can move between network, server, Microsoft 365, Azure, AVD, endpoint management, automation, and security work without needing every step defined. This person should be comfortable with escalations, client-facing communication, documentation, and project work.

This role is best suited for someone who enjoys building and improving environments, not just maintaining them.

This is primarily an in-office position based in Gatesville, Texas. Limited hybrid flexibility may be considered after onboarding for the right candidate based on performance, communication, project needs, and ability to remain fully productive. This is not a fully remote position.

Pay: $65,000.00 - $80,000.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Experience:

• Windows Server, AD, DNS, DHCP, and Group Policy: 3 years (Required)
• Azure Virtual Desktop: 1 year (Preferred)
• Microsoft 365 Admin: 2 years (Required)
• Firewall and VPN: 2 years (Required)
• SonicWALL: 1 year (Preferred)
• Azure: 1 year (Preferred)
• Intune: 1 year (Preferred)

Language:

• English (Required)

Location:

• Gatesville, TX 76528 (Preferred)

Ability to Commute:

• Gatesville, TX 76528 (Required)

Work Location: In person