Senior IT Systems Engineer

Senior IT Systems Engineer

JK Enterprise Group

Salary

$125,000–$165,000 per year DOE

Job Type

Full-time, Exempt

Work Location

Remote within the Idaho/Utah corridor, with onsite work in Rupert, Idaho

Job Overview

JK Enterprise Group is hiring its first internal IT engineer to take ownership of the systems and technology infrastructure employees use every day.

Our technology environment is currently supported by an external IT provider, which will continue as a partner, along with an in-house software development team that builds the applications our operations rely on. This role will establish internal ownership of IT infrastructure, endpoint management, identity and access, monitoring, documentation, automation, and systems administration.

Reporting to the VP of Technology, the Senior IT Systems Engineer will work project by project alongside our external IT provider and internal software development team. You will help build a more predictable, proactive, and scalable IT environment while having meaningful input into what gets built and how priorities are sequenced.

Our Technology EnvironmentWhat We Run

• Approximately 200 Windows PCs and laptops across Idaho, Utah, Colorado, and Oregon
• On-premises server hardware with virtualization using Proxmox/Ceph
• Microsoft 365 tenant
• Odoo ERP
• Custom internal business applications
• Comprehensive backup systems
• Printers, networking infrastructure, and related peripherals

Who Supports It Today

• External IT Provider: Day-to-day help desk, endpoint management, monitoring, documentation, and infrastructure support
• In-House Software Development Team: Builds and maintains custom internal applications
• Internal IT: Rebuilding endpoint management, monitoring, and documentation is the first order of business

Key Responsibilities

The Senior IT Systems Engineer will focus on projects that reduce ticket volume and improve system reliability by addressing root causes rather than simply responding to issues.

Current projects include

Endpoint Management & Device Provisioning

• Implement zero-touch device provisioning using Microsoft Intune and Autopilot
• Establish standardized Windows device configuration, deployment, patching, and lifecycle management
• Build internal endpoint monitoring and EDR capabilities
• Improve visibility into fleet health, security, and performance

Identity & Access Management

• Develop and document a role-based access control model
• Manage access across Microsoft 365, file storage, and internal applications
• Implement and improve hybrid identity
• Configure and maintain Conditional Access and MFA
• Establish consistent processes for onboarding, offboarding, and permission management

Infrastructure & Systems Administration

• Support Windows server infrastructure, including directory services, DNS, DHCP, and Group Policy
• Work with networking infrastructure, including VLANs, routing, firewall policies, wireless networks, and site-to-site VPNs
• Improve print and peripheral infrastructure to reduce recurring support issues
• Support server, virtualization, and network projects alongside the external IT provider

Documentation & IT Operations

• Build and maintain system documentation, runbooks, procedures, and credential custody processes
• Establish repeatable IT processes and standards
• Improve monitoring, alerting, and proactive support capabilities
• Coordinate with the external IT provider on day-to-day support and establish measurable service expectations

Automation & Collaboration

• Use scripting and automation to eliminate repetitive IT tasks
• Work closely with software engineers on identity, environments, databases, deployments, and internal applications
• Evaluate technology decisions based on business needs, including what to build, buy, outsource, or prioritize
• Take ownership of projects and outcomes without requiring detailed direction

Projects will be prioritized and re-prioritized as business needs change. The Senior IT Systems Engineer will have meaningful input into project sequencing and priorities.

Growth Opportunities

This position offers opportunities to expand into

• Server, virtualization, and network infrastructure
• Disaster recovery and business continuity
• Platform, environment, and deployment engineering
• Collaboration with the software development team
• Building and eventually leading a growing internal IT team
• Agricultural technology projects, including IoT, GPS, RFID, pivot telemetry, and remote cellular coverage

There are currently no direct reports, but leading a growing internal IT team is a realistic future opportunity.

Required Qualifications

• 7+ years of experience in IT infrastructure, with at least 3 years in a senior, lead, or principal-level role
• Experience with modern device management at fleet scale, including provisioning, patching, configuration, and device lifecycle management
• Experience with endpoint monitoring and security tools
• Strong knowledge of identity and access management, including cloud and hybrid directories, Conditional Access, and MFA
• Experience with Windows Server infrastructure, including directory services, DNS, DHCP, and Group Policy
• Practical networking experience with:
• VLANs
• Routing
• Firewall policies
• Wireless networks
• Site-to-site VPNs
• Experience with scripting and IT automation
• Strong documentation skills and a disciplined approach to maintaining technical documentation
• Excellent written and verbal communication skills
• Ability to communicate effectively with technical and non-technical employees, including growers, drivers, mechanics, sales teams, and office staff
• Ability to work at a peer level with software engineers on identity, environments, databases, and deployment
• Comfortable building and improving systems rather than simply maintaining existing environments
• Ability to independently own projects and outcomes
• Strong judgment when determining what to build, what to buy, what to leave with the IT provider, and what should be prioritized
• Ability to learn unfamiliar technologies independently and quickly
• Must live within comfortable driving distance of Rupert, Idaho, close enough to make a day trip for onsite work approximately 1–2 days per month

Preferred Qualifications

Experience with the following is helpful

• Microsoft Intune and Autopilot, preferably experience implementing them from the ground up
• Microsoft 365 and Microsoft Entra ID
• Active Directory and Group Policy
• PowerShell and Microsoft Graph
• RMM or endpoint security tools that you have selected and deployed, rather than only administered
• Experience working with an external IT provider or managed service provider (MSP)
• Proxmox VE, Ceph, or VMware
• Microsoft SQL Server maintenance
• IT experience within agriculture, manufacturing, construction, or distribution environments
• Odoo or comparable ERP systems
• Operational or industrial technology alongside corporate IT
• Relevant IT or infrastructure certifications

Work Schedule & Location

• Full-time, exempt
• Reports to the VP of Technology
• Remote position within the Idaho/Utah corridor

Candidates may be located in and around

• Magic Valley
• Boise
• Pocatello
• Idaho Falls
• Logan
• Ogden
• Salt Lake City
• Onsite in Rupert, Idaho approximately 1–2 days per month, generally as day trips
• Occasional travel to other company sites
• Shared on-call rotation with the external IT provider and software development team; frequency to be determined

Compensation

$125,000–$165,000 per year DOE (Depending on Experience)

Benefits

• 401(k)
• 401(k) matching
• Health insurance
• Dental insurance
• Vision insurance
• Healthshare
• Health Savings Account (HSA)

Paid time off

Pay: $125,000.00 - $165,000.00 per year

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Health savings account
• Paid time off
• Vision insurance

Application Question(s)

* Which of the following technologies have you had hands-on experience managing in a production environment?

Select all that apply. - Microsoft Intune / Autopilot - Microsoft Entra ID / Azure AD - Active Directory / Group Policy - Microsoft 365 - Windows Server (DNS, DHCP, directory services) - VLANs / Routing / Firewalls / VPNs - None of the above

* Are you located within comfortable driving distance of Rupert, Idaho, and able to travel to Rupert approximately 1–2 days per month for onsite work, generally as a day trip?

Experience

• professional IT infrastructure: 6 years (Required)
• senior, lead, or equivalent IT infrastructure role: 3 years (Required)

Work Location: Hybrid remote in Rupert, ID 83343