Systems Engineer

BBR Partners is a premiere, boutique wealth management firm providing customized investment strategies and bespoke advice to high-net-worth individuals and families. The firm was founded in early 2000 and for over 25 years, we have nurtured our culture with talented people from diverse backgrounds who care about each other, our clients, and our collective communities. In our quest for continuous improvement, we strive to develop not only world class talent but world class humans! BBR Partners is seeking a Systems Engineer to play an integral role as a member of the IT department. This person will help manage and support BBR’s IT infrastructure including servers, storage, virtualization, operating systems, and enterprise services. We are looking for a highly motivated self-starter with a strong work ethic who enjoys contributing to a small-firm environment.

This is a full-time position that requires 6-8 years of experience in systems engineering, infrastructure, or IT operations roles, and the ability to work on premises from our New York City headquarters three days per week.   

Responsibilities:         

Infrastructure & Platform Management

• Administer and optimize Windows Servers, workstations, Active Directory/Entra ID, Group Policy, DNS/DHCP, and certificate services.
• Administer our virtual infrastructure (VMWare/Nutanix), network infrastructure such as firewalls (Fortinet) and switches (Cisco), and backup/restore systems (Rubrik)
• Manage Linux systems including patching, hardening, performance tuning, and automation.
• Administer our virtual desktop environment (Citrix and Cloud PC/Azure Virtual Desktops)

Cloud & Identity

• Operate and secure Azure environments, including Entra ID, conditional access, MFA, and privileged access tools.
• Configure and maintain cloud networking components (VPC/VNet, VPN, private endpoints, firewalls).
• Administer our O365 environment including Exchange Online, Teams, Entra, Intune, and Dynamics 365

Monitoring, Operations & Reliability

• Monitor system performance, capacity, and availability across on‑prem and cloud environments using tools such as Logic monitor/Datadog.
• Develop automation for IT processes using PowerShell or Python to streamline operations and improve consistency.
• Participate in incident response, root-cause analysis, on-call rotations, and creation of operational runbooks.

Security & Compliance

• Implement system hardening (CIS benchmarks), patching, encryption, and logging/monitoring standards.
• Operate vulnerability management tools; remediate findings within SLA.
• Administer EDR (SentinelOne) and work with 3^rd party MSSP to monitor SIEM feeds and alerts.

Data, Applications & Integrations

• Support application and database servers (SQL Server/PostgreSQL), scheduled jobs, and secure data flows.
• Work with 3^rd party vendors and service providers to implement or maintain managed solutions
• Build and maintain DR/BCP capabilities including backups, failover testing, and documented recovery procedures.

Collaboration & Support

• Provide escalation support for infrastructure issues.
• Create documentation of BBR IT infrastructure using knowledge-base and how-to articles (Confluence)
• Work cross‑functionally with Development team to ensure reliability and performance.
• Partner with Director of IT to implement new IT initiatives/solutions

Ideal Qualifications:             

• Experience managing a Windows environment (Windows 11, Windows Server 2019/22, Active Directory, Group Policy, DNS) and Linux environments
• Experience managing major cloud service providers (MS Azure preferred) 
• Experience managing Microsoft Office 365 environment (Exchange Online, SharePoint, Teams, Power Platform/CRM)   
• Experience managing hypervisor solutions (VMware ESXi preferred)
• Understanding of computer networking (ex. Routing, switching, VPN, DNS, TLS, etc.) 
• Experience managing Firewalls (Fortinet preferred) and Switches (Cisco preferred)
• Knowledge of Citrix, MS Teams, Zoom, MS Dynamics CRM, MS SQL Server
• Familiarity with vulnerability management, EDR (SentinelOne), patching programs, and system hardening
• PowerShell scripting experience/knowledge is strongly preferred
• Experience managing endpoint management solutions (MS Intune preferred)
• Experience with incident response, troubleshooting, and operational support in regulated environments.
• An undergraduate degree in Information Technology or a related field with a strong academic track record is preferred
• Must have strong communication skills (written and verbal) and critical thinking skills
• Must be successful working in a team-based environment
• Must be highly motivated, proactive, ethical, and professional
• Solid organizational skills including attention to detail and multi-tasking skills
• Financial Services experiences a plus

What We Offer:

• Competitive base salary and incentive compensation.
• Company subsidized medical/Rx, dental and vision insurance for employee, partner, and dependents.
• 401K plan, Life insurance, and short & long-term disability coverage.
• One Medical membership (covered for employee and dependents), Employee assistance program (EAP), Gym reimbursement and other wellness offerings.
• Pre-tax transit and parking programs, Health Savings Account (HSA) and flexible spending programs for medical and dependent care.
• Personalized development and career growth opportunities.
• Volunteerism opportunities and matching gift program.
• Flexible time off, paid parental leave, and Sabbatical with company tenure.
• Hybrid remote work environment, “Work from Anywhere” weeks, and casual dress. 
• New office space with a variety of perks and amenities including catered lunches and stocked pantry.

Additional Information:

Base salary for this position will be determined during the interview process and will vary based on multiple reasons, including but not limited to prior experience, relevant expertise, current business needs, and market factors. The expected base salary for the role will generally be between $125,000 and $150,000 per year at the commencement of employment, but the final salary offered may be outside this range based on these reasons and individual circumstances. Additionally, base salary is only part of the total compensation package, which, depending on the position, may also include discretionary bonuses, alternative incentive packages and Company-sponsored benefit programs. This position is at-will, and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.