Job description

Are you ready to own and grow a cloud-first infrastructure for a hybrid workforce in 30 locations across the US? If so, you might be a perfect fit as a Sr. Systems Engineer at Brighton Jones. We are looking for someone with 8+ years of experience to own and evolve the core technology platforms that power Brighton Jones’ hybrid, cloud-forward operating model. This role is responsible for reliability, automation, lifecycle management, and governance across Microsoft 365, Azure/AWS, identity, endpoint management, and Windows infrastructure. You’ll work closely with other technology teams to deliver scalable, secure, and resilient services. At Brighton Jones, we’re a purpose-driven, client-focused team committed to helping individuals live richer lives. As one of the largest RIAs in the nation, we’ve built a culture of continuous growth, collaboration, and community—recognized with 15 consecutive “Best Places to Work” awards including Inc.com’s 2025 list, as well as national honors for community impact. We lead the industry in aligning wealth, passion, and purpose to help our clients thrive. With over $30 billion in assets under advisement, 300+ teammates nationwide, and a dynamic, team-based approach, we’re growing fast—and we’re looking for driven, curious individuals to join our #OneTeam. The Senior Systems Engineer will help shape a modern infrastructure foundation that supports our growing firm. This role owns core systems platforms across on-premises and cloud environments, with emphasis on automation, observability, identity, endpoint management, and operational excellence. The ideal candidate is technically strong, makes practical decisions, documents their work, automates where it makes sense, and looks for ways to simplify systems without reducing reliability or security. Required for application: take our Values in Action Self-Assessment to see how our values align! Your Role: Manage and Improve Core Technology Platforms Support and improve infrastructure across on-premises, Azure, AWS, and Microsoft 365. Architect, deploy, and maintain Microsoft 365 services including Exchange Online, SharePoint, Teams, OneDrive, Copilot, Intune, Entra ID, Purview, and related governance capabilities. Manage Windows Server and platform services including Active Directory, Group Policy, DNS, DHCP, certificate services, and related infrastructure components. Manage identity and access systems, including modern authentication, MFA, conditional access, role-based access, and privileged access practices. Oversee endpoint and device management platforms for Windows endpoints and BYOD mobile devices, partnering with support teams on escalations and standards. Partner with networking providers and internal stakeholders to ensure reliable connectivity across cloud, office, and remote environments. Drive Automation, Reliability, and Operational Excellence Build and maintain automation using PowerShell, Azure Automation, Logic Apps, infrastructure as code, and modern administrative tooling where possible. Improve reliability through monitoring, troubleshooting, documentation, and follow-up fixes. Lead lifecycle management for infrastructure components, including patching, upgrades, replacements, configuration standards, and technical debt reduction. Design and maintain systems that meet security, compliance, and risk requirements. Evaluate emerging technologies, cloud services, and AI-enabled workplace capabilities could make our systems easier to manage, more secure, or more useful to teammates Qualifications: 8+ years of experience in systems engineering, cloud operations, or infrastructure roles. Strong hands-on experience with Microsoft 365, Azure, Windows Server, Active Directory, Entra ID, Intune, and related platforms. Experience supporting hybrid environments across on-premises infrastructure, networking, and cloud services such as Azure and AWS. Comfortable using PowerShell and automation to reduce manual work and improve consistency. Strong understanding of identity and access management, including conditional access, MFA, modern authentication, least privilege, and privileged access. Working knowledge of security and compliance standards such as NIST, CIS, zero trust, and data governance. Able to troubleshoot complex issues, make sound technical decisions, and work independently when requirements are not fully defined. Clear communicator who can work well with technical teams, business partners, and end users. This role is an in-office, full-time, and exempt position. We are a work from office culture with a lot of flexibility. Compensation: Targeted base salary range is $130,000 - $160,000 per year. Ownership & Financial Wellbeing Fully paid medical, dental, and vision coverage for employees 401(k) with 100% match up to 3% of annual compensation Equity ownership opportunities for every employee New Business Incentive Program Generous employee referral bonus Cell phone data reimbursement Financial planning services discount for employees and immediate family members Time & Flexibility Minimum 3 weeks PTO starting Day 1 Winter Break, Summer Friday flex-days, and 10 paid holidays Unlimited Volunteer Time Off plus company grant matching Heavily subsidized transit Growth & Development 100% reimbursement for required training, certifications, licensing, and dues Personal career development plans Richer Life Business Partner (coaching for all employees) Mindful Emotional & Social Intelligence training Annual professional & personal wellbeing stipend Connection & Community Quarterly team-building events Regular social events Employee-led book clubs, committees, and affinity groups Family & Milestones Paid Parental leave (13 weeks for birthing parent and 6 weeks for non-birthing parent) Adoption benefits Anniversary milestone celebrations, including a 3-month paid sabbatical at 10 years Visa Sponsorship: Please note, we are unable to provide visa sponsorship for the position offered. Accordingly, we are unable to hire individuals who require, or will require, employment visa sponsorship either now or in the future. We are committed to building a business where all of our team members genuinely love where they work and are empowered to reach their full potential. We do this by building authentic relationships with one another, learning and growing continuously together, working hard while having lots of fun, and giving back to our community. Brighton Jones is a team founded on equity and respect, and we’re on a mission to help each other, our clients, and global community thrive. We actively foster a compassionate and inclusive culture and are committed to creating a diverse #OneTeam where teammates can show up authentically. To the right individual, we offer very competitive compensation, a robust benefits package, an award-winning culture, and rewarding career growth. Brighton Jones provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, veteran status, or caste. In addition to federal law requirements, Brighton Jones complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has offices. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Requirements

Must-haves

Are you ready to own and grow a cloud-first infrastructure for a hybrid workforce in 30 locations across the US? If so, you might be a perfect fit as a Sr. Systems Engineer at Brighton Jones.
Required for application: take our Values in Action Self-Assessment to see how our values align!
Manage and Improve Core Technology Platforms
Support and improve infrastructure across on-premises, Azure, AWS, and Microsoft 365.
Architect, deploy, and maintain Microsoft 365 services including Exchange Online, SharePoint, Teams, OneDrive, Copilot, Intune, Entra ID, Purview, and related governance capabilities.
Manage Windows Server and platform services including Active Directory, Group Policy, DNS, DHCP, certificate services, and related infrastructure components.
Manage identity and access systems, including modern authentication, MFA, conditional access, role-based access, and privileged access practices.
Oversee endpoint and device management platforms for Windows endpoints and BYOD mobile devices, partnering with support teams on escalations and standards.
Partner with networking providers and internal stakeholders to ensure reliable connectivity across cloud, office, and remote environments.
Drive Automation, Reliability, and Operational Excellence
Build and maintain automation using PowerShell, Azure Automation, Logic Apps, infrastructure as code, and modern administrative tooling where possible.
Improve reliability through monitoring, troubleshooting, documentation, and follow-up fixes.
Lead lifecycle management for infrastructure components, including patching, upgrades, replacements, configuration standards, and technical debt reduction.
Design and maintain systems that meet security, compliance, and risk requirements.
Evaluate emerging technologies, cloud services, and AI-enabled workplace capabilities could make our systems easier to manage, more secure, or more useful to teammates
8+ years of experience in systems engineering, cloud operations, or infrastructure roles.
Strong hands-on experience with Microsoft 365, Azure, Windows Server, Active Directory, Entra ID, Intune, and related platforms.
Experience supporting hybrid environments across on-premises infrastructure, networking, and cloud services such as Azure and AWS.
Comfortable using PowerShell and automation to reduce manual work and improve consistency.
Strong understanding of identity and access management, including conditional access, MFA, modern authentication, least privilege, and privileged access.
Working knowledge of security and compliance standards such as NIST, CIS, zero trust, and data governance.
Able to troubleshoot complex issues, make sound technical decisions, and work independently when requirements are not fully defined.
Clear communicator who can work well with technical teams, business partners, and end users.
This role is an in-office, full-time, and exempt position. We are a work from office culture with a lot of flexibility.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsai

Platform: lever
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave