Senior Systems Engineer

• Bachelor's degree in Information Technology, Computer Science, Management Information Systems, or a related field, or equivalent experience.
• 7+ years of IT experience, with at least 4 years in a systems administration role in a multi-site environment.
• Hands-on administration of Microsoft 365, Exchange Online, and Entra ID (including Conditional Access).
• Hands-on experience administering Microsoft Azure (Compute, Storage, Databases).
• Experience with MDM and RMM platforms, including policy and application deployment for Windows and macOS.
• Working knowledge of enterprise networking: firewalls, VLANs, switching, wireless, VPN, DNS/DHCP, and routing basics.
• Experience administering backup and recovery solutions, including restore testing.
• PowerShell scripting for administration and automation.
• Strong documentation habits and clear communication with technical and non-technical staff.
• Sound judgment handling confidential client and firm information.
• Ability to work on-site in our Seattle office with one remote working day every other Friday, with travel to other offices as needed.
• Availability for scheduled after-hours maintenance windows and occasional off-hours response to urgent outages.
• Must be physically able to lift and carry equipment of up to 50 lbs.

• Experience in financial services or another regulated industry, including supporting audits or regulatory exams.
• Experience with Meraki or comparable cloud-managed networking.
• Experience with Microsoft Intune, Microsoft Purview, Jamf, NinjaOne, and Microsoft Defender for Endpoint and Office 365.
• Familiarity with SaaS identity integrations (SAML, SCIM).
• Certifications such as Microsoft 365 Administrator Expert, Azure Administrator, Network+, CCNA/CCNP, or Jamf Certified Admin.
• Exposure to SharePoint development, Power Platform, or SQL queries.

Why Join Us?

• The expected base salary for this position is $115,000 - $160,000 depending on experience and skill set. In addition, the position is eligible for a discretionary bonus based on company and individual performance.
• Comprehensive benefits, including medical, dental, vision, and prescription coverage, 401(k) matching, life and disability insurance, parental leave, and flex spending.
• Generous paid time off—17 days of vacation, plus 10 paid holidays and Summer Fridays.
• Meal perks, company events, team celebrations, and more.
• A collaborative, fun, and supportive culture where you’re encouraged to innovate and grow.

• Own Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams), including licensing, retention, and email security (mail flow, threat protection, SPF/DKIM/DMARC).
• Manage Azure resources (virtual machines, storage accounts, and Azure SQL) and SaaS integrations, including SSO and provisioning, keeping tenants aligned to the Microsoft roadmap.

• Own firewalls, switching, wireless, VPN, and WAN/ISP connectivity across all offices, including segmentation, redundancy, monitoring, and outage response; manage domains, DNS, and SSL/TLS certificates.
• Plan and carry out network changes and maintenance for office moves, buildouts, and new locations.

• Manage Windows and macOS devices through MDM and RMM platforms: configuration and compliance policies, patching, application deployment, zero-touch provisioning, and EDR/antivirus.
• Own Entra ID users, groups, roles, and Conditional Access, enforcing MFA and least-privilege access across systems.

• Administer backups for Microsoft 365, SaaS, and critical systems; test restores regularly and support disaster recovery and business continuity planning.

• Serve as the escalation point for help desk tickets and mentor junior teammates.
• Own security baselines and lead incident response; serve as the primary IT partner to Compliance for audits, due diligence, regulatory exams, and tabletop exercises.
• Review security alerts and track remediation.
• Maintain documentation, network diagrams, and SOPs.
• Evaluate tools and make recommendations on vendors and renewals.
• Lead infrastructure projects and automate processes (e.g., PowerShell, Microsoft Graph).

• Commitment: Passion, integrity, and energy in every action.
• Collaboration: Together, we are stronger, smarter, and more innovative.
• Continuous Improvement: Dedicated to growth—for clients and ourselves.

We are not accepting unsolicited resumes from agencies and/or search firms for this job posting.

For information about our privacy practices, including disclosures for California residents, please see our Privacy Notices.

At Freestone, we believe in making a meaningful difference by focusing on what truly matters to our clients. With a 27-year history of consistent growth and success, we are an independent wealth and asset management firm with over $15 billion in assets under management. Headquartered in Washington, with a team of over 130 professionals, we are dedicated to delivering a highly personalized experience that combines intelligent, thoughtful advice with unique investment strategies and comprehensive financial planning.

Our Technology team is collaborative and hands-on. Each person owns systems end to end, and technology is central to how we deliver advice to our clients.

Position Summary

We are seeking a Senior Systems Engineer to own the infrastructure that keeps our multi-office firm of over 130 people secure, connected, and productive. This person will be the technical owner of our cloud tenants, Microsoft 365, identity and access, backups, and network (firewalls, switching, wireless, VPN, and WAN), as well as endpoint management through our MDM/RMM platforms.

The Senior Systems Engineer will set the infrastructure roadmap and technical standards, serve as the escalation point for help desk tickets, and mentor junior teammates, while staying hands-on in day-to-day operations.

As a Registered Investment Adviser, Freestone handles sensitive client data and operates under SEC oversight. The right candidate builds security, documentation, and audit-readiness into everyday work.

This role is based in our Seattle office and supports all Freestone locations, with travel to other offices as necessary.