Senior IT Systems Engineer

This role will be based in the New York City office. Our team follows a hybrid schedule working in-office three days a week and remotely for the rest. This is an exempt position.

Each day can be different here at Nexxen, but some of the things you can expect to be doing daily are:

The Role
The Senior IT Systems Engineer serves as a senior technical leader responsible for the design, administration, security, reliability, and operational excellence of Nexxen's enterprise technology platforms across cloud, SaaS, and on-premises environments. This role leads infrastructure strategy, drives modernization initiatives, strengthens security and compliance controls, and serves as a key escalation point for complex technical issues.

Working with substantial autonomy, the Senior IT Systems Engineer partners across business and technical teams to deliver highly available, secure, and scalable technology solutions while improving operational efficiency through automation, standardization, and process improvement.

What you will do

Infrastructure Engineering & Operations

• Design, implement, and support enterprise infrastructure across AWS, Azure, Microsoft 365, SaaS platforms, and on-premises environments.

• Lead infrastructure modernization, platform standardization, migration, and lifecycle management initiatives.

• Design and support highly available, scalable, and resilient systems, including disaster recovery and business continuity capabilities.

• Perform capacity planning, performance optimization, proactive monitoring, and operational health management.

• Lead complex troubleshooting efforts, root cause analysis, and post-incident remediation activities.

• Serve as the highest-level escalation point for infrastructure, networking, cloud, and identity-related issues.

Identity & Access Management

• Architect and administer Active Directory and Microsoft Entra ID environments.

• Lead enterprise identity initiatives including SSO, SCIM provisioning, MFA, and identity lifecycle management.

• Implement and maintain RBAC, privileged access controls, and least-privilege security models.

• Partner with application owners to integrate enterprise authentication and access governance solutions.

Microsoft 365, Automation & Collaboration

• Administer and optimize Microsoft 365 services including Exchange Online, SharePoint Online, Teams, and OneDrive.

• Develop automation solutions using PowerShell, Microsoft Graph, APIs, and cloud-native technologies.

• Implement AI-enabled operational efficiencies while maintaining governance, security, and compliance controls.

• Support and integrate enterprise collaboration platforms including Microsoft 365, Slack, and Jira Cloud.

Network & Security Engineering

• Administer and optimize enterprise network infrastructure, including Cisco Meraki and Palo Alto Prisma Access/GlobalProtect environments.

• Design and maintain secure remote access, VPN, segmentation, firewall, and network security architectures.

• Implement security controls across cloud, identity, endpoint, and network environments.

• Lead vulnerability management, patch management, endpoint protection, and remediation programs.

• Assess infrastructure and technology risks and recommend appropriate mitigation strategies.

Compliance, Governance & Operational Excellence

• Define and maintain backup, retention, recovery, logging, and business continuity standards.

• Support SOX, SOC 2, and other regulatory or audit requirements through control validation and documentation.

• Develop and maintain architecture documentation, runbooks, operational procedures, and engineering standards.

• Lead large-scale projects, technology migrations, integrations, and strategic initiatives.

• Mentor engineers and contribute to technical leadership, knowledge sharing, and continuous improvement efforts.

What you will bring

• 7+ years of experience in systems engineering, infrastructure engineering, or related enterprise IT roles.

• Demonstrated experience managing complex enterprise environments across cloud, SaaS, and on-premises platforms.

• Strong expertise with:

  • AWS cloud infrastructure and services

  • Microsoft 365 and Entra ID

  • Active Directory and identity services

  • VMware administration

  • Enterprise networking, routing, switching, firewalls, VPNs, and high-availability architectures

• Experience implementing and supporting:

  • SSO

  • MFA

  • SCIM provisioning

  • RBAC and access governance

• Advanced PowerShell scripting and automation experience utilizing APIs and Microsoft Graph.

• Strong knowledge of cybersecurity principles, vulnerability management, risk management, and compliance frameworks.

• Experience leading infrastructure projects, migrations, and operational improvement initiatives.

• Proven ability to perform advanced troubleshooting and root cause analysis across infrastructure, networking, cloud, and SaaS technologies.

• Strong documentation, communication, and cross-functional collaboration skills.

Extra Credit if you Bring

• Industry certifications in AWS, Microsoft, VMware, Security, or Networking.

• Experience with Google Cloud Platform (GCP).

• Experience administering PagerDuty or similar incident management platforms.

• Experience supporting global, geographically distributed organizations.

At Nexxen, we value our differences, varied experiences, and collective contribution. We know that not everyone takes the same career path, so if you don’t match this job description perfectly, don’t worry! We would rather see your application than risk missing out on your potential to make an impact.

In support of pay transparency and equity, the minimum and maximum full-time annual base salary for this role is $100,00-$130,000 at the time of posting, with the potential of an incentive or bonus. While this is our reasonable expectation this is not a guarantee of compensation or salary, actual compensation is influenced by a wide range of factors including but not limited to skill set, level of experience, education, certifications, responsibility, and geographic location. Candidates hired to work in other locations will be subject to the pay range associated with that location. We offer a variety of benefits including medical, dental, vision, disability insurance, 401(k), EAP, parental leave, unlimited vacation, and company-paid holidays. The specific programs and options available will vary depending on the state, start date, and employment type. Our Talent Acquisition team will be happy to answer any questions you may have.

#LI-DN1

#LI-Hybrid

At Nexxen, we value our differences, varied experiences, and collective contribution. We know that not everyone takes the same career path, so if you don’t match this job description perfectly, don’t worry! We would rather see your application than risk missing out on your potential to make an impact.

For information about how we handle your personal information please view our Applicant and Candidate Privacy Notice

Important Notice from Nexxen: Your Safety Matters

At Nexxen, we care about the well-being of our current and future employees. We are aware of the growing number of online scams and fraudulent job postings, and we urge all job seekers to remain vigilant. Please be advised that Nexxen will never request payment (whether in cash, cryptocurrency, or any other form) as a condition of employment, offer positions that require you to invest in vague or dubious financial schemes, or promote roles that resemble get-rich-quick opportunities. If you receive a suspicious message claiming to be from Nexxen or encounter a questionable job posting associated with our name, please contact us at [email protected] to verify its legitimacy. Your trust is important to us. Stay safe and informed.

Nexxen Fraud Alert and Notice: Protect Yourself from Impersonation and Fraudulent Activity