System Engineer - Infrastructure

We’re looking for a hands-on System Engineer who can build, secure, and run hybrid infrastructure across on-prem and cloud environments. This is a mid-level role for someone who is comfortable owning core IT systems, standardizing endpoints, and keeping networks secure — while working in a fast-moving startup setup. You’ll be close to the infrastructure, security, and engineering teams, and you’ll have real ownership over how systems are designed and operated. What You’ll Do Build & Run Hybrid Infrastructure Set up and manage site-to-site VPNs connecting on-prem networks with cloud environments . Design and configure VLANs for secure network segmentation. Configure and manage firewalls across on-prem and cloud setups. Support hybrid connectivity, routing, and access control between environments. Own Security & Access Configure and enforce Group Policies (GPOs) and endpoint security policies. Implement practical security controls aligned with organizational standards. Standardize & Manage Endpoints Provision desktops and laptops using golden images . Maintain base images with OS updates, drivers, tools, and security controls. Manage OS and application patching across the endpoint fleet. Ensure endpoints remain compliant with defined security baselines. Operate, Improve, Automate Troubleshoot network, system, and access issues across hybrid environments. Document configurations, processes, and standard operating procedures. Continuously look for opportunities to improve reliability, security, and automation. What We’re Looking For (Must-Have) 6+ years of hands-on experience as a System / Infrastructure Engineer . Proven experience with cloud and hybrid environments (on-prem + cloud connectivity). Strong networking fundamentals: VPNs, VLANs, routing basics . Hands-on experience configuring and managing firewalls . Solid experience with Windows environments , Active Directory, and Group Policies . Experience provisioning endpoints using golden images (MDT, SCCM, Intune, or similar). Experience managing patching and endpoint lifecycle . Strong troubleshooting skills and a bias toward clean documentation. Good to Have Experience with cloud networking and security constructs. Basic scripting or automation skills (PowerShell preferred). Exposure to security-focused or regulated environments.