Lead IT Systems Engineer

nTopology
United States, New York, New York
Mar 26, 2025
About Us: At nTop, we are passionate about building next-generation engineering solutions. We enable the most innovative engineering companies in the world to transform how they develop, test, and manufacture better products faster. Our software has been used to engineer mission-critical satellites, deliver stronger and lighter medical implants for patients in need, and allow engineers to create complex, high-performance products with revolutionary speed and accuracy. We are looking to add smart ambitious teammates who are passionate about problem-solving and cutting-edge technology to a fast-paced, collaborative environment. Overview: The Lead IT Systems Engineer will be responsible for the stability, scalability, and security of our internal IT environment. This includes managing our Google Workspace environment, Slack, end-user hardware and software, networking and cloud infrastructure, SaaS applications, and employee onboarding/offboarding processes. The role will provide technical leadership, oversee IT support operations, and ensure compliance with corporate security policies. This role does not involve responsibilities related to production infrastructure, product DevOps (other than in a supporting capacity as it pertains to cloud infrastructure), or software release processes. It is solely focused on internal corporate IT systems and employee technology enablement. The position is responsible for maintaining a robust cloud and on-premises client/server infrastructure. They must possess excellent communication and documentation skills, taking the lead on IT projects spanning physical and virtual machines. Must be a team player, serving as subject expert for helpdesk escalations. This role is based 4+ days a week in our New York City office, andreports to the Chief Governance Officer. What You'll Do: Corporate IT Infrastructure & Systems Management: Manage and maintain identity management systems (Google Workspace, Slack, SSO, MFA). Oversee endpoint management solutions for Windows environments (e.g., Intune equivalents for Google environments). Administer internal networking infrastructure, including firewalls, switches, VPNs, and WiFi. Maintain asset management system tracking employee hardware, software licenses, and IT inventory. Automate and standardize IT processes, particularly onboarding and offboarding workflows. End-User Support Leadership: Act as the lead escalation point for IT support tickets and complex issues. Develop internal documentation, FAQs, and knowledge bases to empower self-service and streamline support. Provide guidance to any IT support staff or contractors. Security & Compliance Alignment: Implement and enforce IT security controls such as MFA, device encryption, patching protocols, and access control reviews. Coordinate periodic audits of corporate IT systems and remediate vulnerabilities. Collaborate with InfoSec, compliance, and leadership teams to align IT practices with company policies and compliance frameworks. Strategic IT Planning: Evaluate and recommend new IT tools, vendors, and technologies to improve the employee technology experience. Develop IT operational roadmaps, lifecycle management plans, and budget recommendations. Manage vendor relationships and contracts for IT services, hardware, and SaaS platforms. White-glove remote and on-premises user support, able to communicate clearly and concisely with C-suite level executives and other staff to quickly resolve incidents. Role Requirements: Minimum of 7 years of experience in IT systems engineering, systems administration, or IT support, with at least 2 years in a managerial or senior role. Bachelor's degree in Information Technology, Computer Science or a related field. Strong experience in IT infrastructure, systems integration, cloud technologies, & cybersecurity. Expertise managing Google Workspace and Slack environments and associated identity management configurations (SSO, MFA, Groups, etc.). Strong experience managing Windows endpoints. Proficient in networking fundamentals (firewalls, VPNs, VLANs, WiFi troubleshooting). Familiarity with SaaS application administration and user lifecycle management. Deep understanding of IT security best practices, including endpoint protection, patching, access controls, and audits. Strong troubleshooting and communication skills with a focus on customer service. Ability to regularly lift and carry up to 50 lbs. Ability to perform physical tasks, including bending, lifting, and carrying, as necessary for the job (such as delivering computers, unpacking and rack-mounting equipment, etc.) Preferred Skills: Relevant certifications (e.g., CompTIA Security+, Google Certified Administrator). Experience with scripting and automation tools (PowerShell, Bash, Python). Familiarity with compliance frameworks (SOC 2, ISO 27001) and their application in corporate IT environments. Experience building high performance graphic workstations. Compensation: $140,000-$160,000 annually For roles based in the United States, nTop can only hire US employees who reside in the following states at this time:California, Connecticut, Colorado, Florida, Georgia, Illinois, Massachusetts, Maryland, Michigan, Minnesota, Nevada, New Hampshire, New Jersey, New York, North Carolina, Ohio, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Washington For roles based in EMEA, nTop can only hire employees who reside in the following countries at this time: France, Germany, and the United Kingdom. nTop is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. nTop is committed to working with and providing reasonable accommodations to applicants with physical and mental disabilities. For more information on how we handle and store data, please view ourPrivacy Policy.