Hybrid System Engineer -2 bei Lancer Worldwide

Our Company
Lancer Worldwide, a Hoshizaki Company, is an award-winning global leader in beverage dispensing. Through innovation and a commitment to dedication in action, we create products that benefit our customers worldwide, and give them a distinct advantage in the marketplace. We offer our teammates the opportunity to grow personally and professionally, to contribute to the success of a dynamic organization, and to serve others in a manner that exceeds their expectations. We welcome talented, passionate, and highly motivated individuals to join our team.

Summary/Objective
The Systems Engineer II is responsible for the design, implementation, maintenance, and support of the organization's IT infrastructure, both on-premises and in the cloud, for all Lancer Worldwide sites. This role ensures the security, stability, integrity, and efficient operation of systems that support core organizational functions. The ideal candidate will have a strong background in Microsoft technologies, including Active Directory, Azure, and Entra ID, and will play a key role in securing and optimizing hybrid environments. This position also supports end users, leads IT projects, and contributes to strategic technology planning.

Key Performance Indicators
· System Uptime and Availability: Measure the percentage of time that the on-premise and cloud systems are operational and available to users. This includes physical and virtual machines, as well as supporting architecture across all sites.

· Security Incident Response Time: Track the average time taken to respond to and resolve security incidents, including monitoring and maintaining system security, implementing security controls, and addressing gaps in security tools and policies.

· Project Completion Rate: Monitor the percentage of IT projects completed on time and within budget, ensuring alignment with business goals and timelines.

· User Support Satisfaction: Measure the satisfaction level of end users with the technical support provided, including troubleshooting hardware, software, and cloud service issues, as well as hands-on and remote support.

· System Backup and Recovery Success Rate: Track the success rate of system and data backup and disaster recovery processes, ensuring acceptable RTO/RPO levels and proper maintenance of policies, procedures, and tools.

· IT Process Documentation: Ensure all system activities are standardized and well documented to allow for proper training and pass down of activities and support as well as adherence to all applicable auditing for NIST, JSOX, ISO and others as necessary.

Essential Functions
Infrastructure & Systems Administration

· Directly manage and oversee on-premises and cloud systems and infrastructure, including physical & virtual machines and all supporting architecture, across all Lancer sites.

· Implement and manage database systems, ensuring data integrity, availability, and security.
Administer the Office 365 environment and all associated applications, including Exchange Online, SharePoint, OneDrive, and Teams.

· Oversee system & data backup and disaster recovery capabilities to maintain acceptable RTO/RPO levels. Ensure policies, procedures and tools are maintained and utilized properly.

· Manage and configure the organization’s phone, camera and card access systems.

· Oversee the application, installation, and technical maintenance of LAN hardware/software, including workstations, printers, and peripherals.

Security & Identity Management

· Lead in monitoring and maintaining systems security across all environments.

· Lead in the design, administration, and maintenance of Active Directory and Entra ID (Azure AD), including user/group lifecycle management, conditional access policies, and identity governance.

· Oversee hybrid identity solutions, including Azure AD Connect and seamless single sign-on (SSO).

· Implement and maintain security controls such as role-based access control (RBAC), privileged access management (PAM), Microsoft Defender, and Azure Security Center recommendations.

· Ensure proper configuration and application of current security tools.

· Monitor and identify gaps in security tools, IT security policies, and procedures; recommend and implement remediations.

· Create and validate documentation of all security systems, applications, policies, and procedures in alignment with NIST standards.

Project Leadership & Collaboration

· Lead and participate in IT projects, ensuring alignment with business goals and timelines.

· Collaborate with IT team members in all IT groups and sites as necessary to complete systems-related initiatives.

· Mentor and cross-train junior IT staff, fostering a collaborative and knowledgeable team environment

Support & Troubleshooting

· Troubleshoot and resolve hardware, software, and cloud service issues.

· Provide hands-on and remote technical support to end users as necessary.

· Assist with the management, procurement, and inventory of IT hardware and software.

Knowledge, Skills & Abilities
Technical Expertise
· Strong knowledge of Windows Server architecture in a multiple server, site, and domain configuration with proven experience designing, architecting and managing Microsoft enterprise environments.

· Proficient in managing on-premises and Azure infrastructure, including virtual machines/storage.

· Experienced with Active Directory, Microsoft Entra ID (Azure AD), including hybrid identity, SSO, and Azure AD Connect.

· Basic experience with LAN/WAN administration, including switches, routers, and Wi-Fi.

· Basic experience in database management, ensuring data integrity, availability, and security.

Cloud & Security Proficiency

· Strong grasp of identity and access management (IAM) tools and concepts, including conditional access, MFA, and PIM/PAM.

· Experience implementing and maintaining security tools such as Microsoft Defender, RBAC, EDR, ZTNA, and SIEM.

· Deep understanding of NIST standards, IT security policies, and compliance frameworks.

· Ability to identify and remediate security gaps, and recommend improvements to mitigate risk.

· Good understanding of Azure services (IaaS, PaaS), Azure Monitor, and Azure Policy.

Automation & Monitoring

· Proficient in PowerShell, Azure CLI, and third-party tools for automating IT tasks and configurations.

· Experience using enterprise monitoring solutions for system performance and diagnostics.

Problem-Solving & Innovation

· Strong analytical and troubleshooting skills with the ability to resolve complex technical issues across hybrid environments.

· Proactive in identifying opportunities for improvement and implementing innovative solutions.

Project & Time Management

· Skilled in managing multiple IT projects with effective task prioritization, while supporting planning, budgeting, and resource allocation to meet deadlines.

Communication & Collaboration

· Excellent verbal and written communication skills; able to explain technical concepts to non-technical users.

· Team-oriented with a collaborative mindset and a commitment to cross-functional knowledge sharing.

· Dedicated to providing high-quality customer service and end-user support.

· Multilingual (Spanish/English)

Education & Experience
· Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent experience.

· Minimum 5 years of experience in IT systems engineering, with a focus on hybrid infrastructure and cloud technologies.

· Certifications: Microsoft Azure Fundamentals, Microsoft Certified Professional (MCP), Security+

Work Environment
While performing the duties of this job, the employee is exposed to typical office environment with some exposure to manufacturing site operations. The noise level in the work environment is usually moderate.

Physical Demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. This includes the requirement to type quickly and write, to talk, and hear, and to listen and process information, then utilize it to provide employees and customers with desired information. The employee is frequently required to sit, walk, stand, and reach.

Other Duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Notice To Third Party Agencies
Please note that LANCER does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Fee Agreement, LANCER will not consider or agree to payment of any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, LANCER explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of LANCER.

EEO Statement
Lancer provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.