Back to jobs
New

Systems Engineer

San Francisco, California, United States

OUR COMPANY:

EOS IT Solutions is a Global Technology and Logistics company, providing Collaboration and Business IT Support services to some of the world’s largest industry leaders, delivering forward-thinking solutions based on multi-domain architecture. Customer satisfaction and commitment to superior quality of service are our top business priorities, along with investing in and supporting our partners and employees.

We are a true International IT provider and are proud to deliver our services through global simplicity with trusted transparency.

WHAT YOU WILL DO:

This role will help establish a secure, well-governed and supportable identity and collaboration environment. The successful contractor will work across Operations, Engineering, IT and Security to turn an organically grown Microsoft Entra environment into an enterprise-ready platform

KEY RESPONSIBILITIES:

  • Review the current tenant configuration, administrative model, licensing position, integrations, service usage and historical requests 
  • Discover any existing appropriate ownership and guardrails, and ensure that low current utilization does not develop in to further unmanaged adoption 
  • Define a prioritized remediation plan based on security risk, operational impact and business value
  • implement approved changes, validate outcomes and communication risks, dependencies and decisions clearly.
  • Work closely with Security on SIEM visibility, logging and detections and alerting
  • Document the target state and train Operations and Engineering teams to maintain it.

ESSENTIAL CRITERIA:

  • Expert-level experience managing Microsoft Entra ID in complex or enterprise environments, including tenants that require governance uplift.
  • Strong understanding of Microsoft 365 licensing, entitlement management, administrative roles, conditional access, and least-privilege principles.
  • Proven ability to design and implement privileged access controls, including Privileged Identity Management (PIM), role activation, approval workflows, and access reviews.
  • Hands-on experience integrating identity providers such as Okta with Microsoft Entra, including SCIM provisioning, lifecycle management, and troubleshooting.
  • Strong scripting and automation capability using tools such as PowerShell, Microsoft Graph API, or equivalent automation platforms.
  • Practical experience securing and governing Microsoft Teams, SharePoint, OneDrive, and other Microsoft 365 workloads.
  • Experience reviewing audit and security logs, integrating Microsoft cloud telemetry with SIEM platforms, and improving detections and operational visibility.
  • Working knowledge of Azure cloud management, with the ability to:
    • Discover existing usage
    • Assess governance and security posture
    • Prevent further unmanaged adoption
    • Provide oversight and control rather than large-scale cloud operations support
  • Ability to produce clear technical documentation, operating procedures, control descriptions, and training materials.
  • Comfortable working independently in a short, outcome-focused, fixed-term engagement.

DESIRABLE CRITERIA:

  •  Experience leading Microsoft Entra or Microsoft 365 governance remediation from discovery through implementation and handover.
  • Demonstrated success reducing unnecessary licensing, improving license assignment accuracy, and introducing automated joiner, mover, and leaver processes.
  • Experience rationalizing low-use or poorly governed services and reducing unmanaged OneDrive usage through clear policy, migration, and decommissioning plans.
  • Knowledge of Microsoft Defender, Microsoft Purview, Azure Monitor, Microsoft Sentinel, or comparable security and compliance tooling.
  • Experience translating historic ad hoc IT requests into approved patterns, service catalogs, standards, and change processes.
  • Relevant Microsoft, identity, security, or cloud certifications.

The EOS pay range for this job is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, experience, education, knowledge, skills, and abilities, as well as internal equity, market data, or other laws. 

EOS is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at EOS regardless of your gender; gender identity; gender reassignment; age; religious or similar philosophical belief; race; national origin; political opinion; sexual orientation; disability; marital or civil partnership status or other non-merit factor. 

Pay Range

$120,000 - $145,000 USD

Create a Job Alert

Interested in building your career at EOS? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...
Select...
Select...

You can always reply STOP to opt-out

Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in EOS’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...