Systems Engineer, Sr

Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through:

Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation

Analytics: deliver analytic applications & services that generate insight on how to measurably improve

Expertise: provide clinical, financial & operational experts who enable & accelerate improvement

Engagement: attract, develop and retain world-class team members by being a best place to work

Senior Systems Engineer / Microsoft Platform & DevOps Administrator

Position Summary

The Systems Engineer, Sr. is responsible for the design, implementation, automation, administration, and support of enterprise Microsoft cloud and on-premises infrastructure. This role serves as a technical lead for Microsoft 365, Entra ID, Intune, Azure, Active Directory, Okta integrations, automation initiatives, security compliance, endpoint management, and DevOps operational processes. The position focuses on improving operational efficiency through automation, strengthening security posture, and ensuring reliable delivery of enterprise technology services.

Core Responsibilities

Microsoft 365 Administration

Administer Microsoft 365 services, including:

Exchange Online

Microsoft Teams

SharePoint Online

OneDrive for Business

Microsoft Graph

Manage provisioning, compliance, retention, and access controls.

Implement and maintain Microsoft security best practices.

Troubleshoot user access, authentication, and collaboration platform issues.

Identity & Access Management

Manage Microsoft Entra ID (Azure AD) and hybrid identity environments.

Administer Active Directory, Group Policy, LDAP, and identity synchronization.

understand and maintain SSO integrations using Okta and SAML.

Implement lifecycle management processes for onboarding, offboarding, and access reviews.

Manage privileged access and role assignments.

Develop automated account cleanup and governance processes.

Endpoint Management

Administer Microsoft Intune and endpoint security policies.

Manage Windows device enrollment, configuration, compliance, and patching.

Lead device migrations and modernization initiatives.

Deploy security baselines and endpoint protection controls.

Maintain Windows Hello for Business and modern management solutions.

Support macOS and Windows endpoint administration.

Azure Infrastructure Administration

Deploy and manage Azure virtual machines and cloud resources.

Maintain Azure storage, networking, Key Vault, and resource groups.

Manage Azure encryption, backup, disaster recovery, and security controls.

Implement infrastructure modernization initiatives.

Monitor cloud utilization and optimize cloud resources.

Security & Compliance

BitLocker and encryption technologies.

Support compliance audits and access certifications.

Perform vulnerability remediation and security monitoring.

Automate security governance and access review processes.

DevOps & Automation

Design and develop automation using:

PowerShell

Python

Microsoft Graph API

Azure Automation

REST APIs

Automate user lifecycle management and identity workflows.

Build automated reporting, monitoring, and operational dashboards.

Implement Infrastructure as Code practices where appropriate.

Systems Administration

Maintain server infrastructure and enterprise applications.

Support in office applications such as badges, video, etc.

Support DNS, DHCP, certificates, networking, and authentication services.

Develop operational standards and documentation.

Project Leadership

Lead infrastructure migration and transformation projects.

Coordinate cross-functional technical initiatives.

Provide technical guidance and mentoring to team members.

Collaborate with vendors and business stakeholders.

Technical Skills

Microsoft Technologies

Microsoft 365 Administration

Exchange Online

Teams Administration

SharePoint Online

OneDrive Administration

Microsoft Intune

Microsoft Entra ID

Azure Active Directory Connect

Azure Virtual Machines

Azure Key Vault

Azure Storage

Azure Networking

Microsoft Defender

Identity Platforms

Okta Administration

SAML Authentication

SCIM Provisioning

MFA Technologies

Privileged Identity Management

Automation & Scripting

PowerShell

Python

Microsoft Graph API

Azure Automation

REST APIs

JSON

Git

Infrastructure

Active Directory

Group Policy

Windows Server

DNS / DHCP

Hybrid Identity

Desktop Virtualization

Endpoint Security

Preferred Qualifications

5+ years of Systems Engineering or Systems Administration experience.

3+ years administering Microsoft 365 and Azure environments.

Experience with Intune, Entra ID, Azure, and Okta.

Strong PowerShell and Python automation experience.

Key Performance Indicators

Platform availability and uptime

Security compliance metrics

Automation coverage and efficiency gains

Endpoint compliance rates

Patch and vulnerability remediation performance

User and device lifecycle accuracy

Project delivery success

Reduction of manual operational effort

The above statements describe the general nature and level of work being performed in this job function. They are not intended to be an exhaustive list of all duties, and indeed additional responsibilities may be assigned by Health Catalyst.

Studies show that candidates from underrepresented groups are less likely to apply for roles if they don’t have 100% of the qualifications shown in the job posting. While each of our roles have core requirements, please thoughtfully consider your skills and experience and decide if you are interested in the position. If you feel you may be a good fit for the role, even if you don’t meet all of the qualifications, we hope you will apply. If you feel you are lacking the core requirements for this position, we encourage you to continue exploring our careers page for other roles for which you may be a better fit.