Senior IT Systems Engineer

About this role

<div class="content-intro"><h2 style="text-align: justify;"><strong>About Tekion:</strong></h2> <p style="text-align: justify;">Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.</p></div><p><b>Job Title: Systems Engineer</b></p><p><b>Summary</b> The Systems Engineer is a technical leader responsible for designing, implementing, and supporting Tekion's enterprise IT systems with a strong emphasis on endpoint management and device compliance. This role drives system scalability, security, and reliability through complex project ownership, cross-functional partnership, and continuous platform improvement across macOS and Windows environments.</p><p><b>Duties &amp; Responsibilities</b></p><ul><li>Lead implementation, maintenance, and optimization of enterprise platforms including Entra ID (Azure AD), Microsoft 365, SSO/IAM solutions, and MDM/endpoint management tooling (Jamf, Intune, or equivalent).</li><li>Own the design, configuration, and enforcement of device management policies across macOS and Windows fleets — including enrollment workflows, compliance baselines, configuration profiles, and patch management.</li><li>Design and automate workflows for system provisioning, access lifecycle management, and endpoint configuration standardization across the environment.</li><li>Own root cause analysis on high-complexity system and endpoint issues, driving durable resolutions that improve long-term platform stability.</li><li>Collaborate with cybersecurity, infrastructure, and application teams to deliver secure, well-integrated system and endpoint architecture.</li><li>Lead platform upgrades, integrations, and migrations — including MDM consolidations or transitions — with a focus on business continuity and minimal operational disruption.</li><li>Maintain architectural documentation, system configurations, device management policies, and change procedures to support knowledge transfer and audit readiness.</li><li>Mentor junior engineers and contribute to team capability through training, process improvement, and best practices adoption.</li></ul><p><b>Job Complexity</b> Leads technically complex systems engineering projects across multiple platforms, critical systems, and large-scale endpoint environments. Serves as a subject matter expert and trusted advisor on systems reliability, device compliance, security, and scalability.</p><p><b>Required Supervision</b> Operates independently. Drives technical initiatives and provides cross-team guidance with minimal direction.</p><p><b>Qualifications</b></p><ul><li>5–7 years of experience in IT systems engineering or enterprise platform administration</li><li>Bachelor's or Master's degree in Information Technology, Computer Science, or related field</li><li>Hands-on expertise with MDM platforms for macOS and Windows — Jamf and/or Microsoft Intune strongly preferred; equivalent experience with Workspace ONE, Kandji, or similar platforms considered</li><li>Expert-level proficiency in Microsoft 365, Entra ID, SSO/IAM platforms, and SaaS administration</li><li>Deep familiarity with macOS and Windows device management — enrollment, compliance policies, configuration profiles, app deployment, and patch workflows</li><li>Strong scripting and automation skills across PowerShell, Python, and/or Bash — including MDM-adjacent automation (e.g., Jamf API, Graph API)</li><li>Demonstrated experience with security hardening, compliance readiness, and endpoint monitoring</li><li>Strong documentation, collaboration, and cross-functional communication skills</li><li>Mentorship experience and a track record of elevating team capabilities</li><li>Relevant certifications preferred: Jamf Certified Admin (JCPA), Microsoft Certified: Endpoint Administrator, Microsoft Certified: Enterprise Administrator Expert, CISSP</li></ul><h3>Changes Made</h3><ul><li><b>Summary updated</b> to call out endpoint management and macOS/Windows scope — signals clearly to candidates what the core environment looks like.</li><li><b>New dedicated duty added</b> for MDM policy ownership — enrollment, compliance baselines, config profiles, patch management. This is distinct enough from general provisioning to warrant its own line.</li><li><b>First duty updated</b> to include "Jamf, Intune, or equivalent" so the expectation is clear without being exclusionary.</li><li><b>Migration duty expanded</b> to explicitly mention MDM consolidations — relevant given Tekion runs both Jamf and Intune.</li><li><b>Qualifications reordered</b> — MDM expertise moved to the top of the list since it's the primary targeting criteria.</li><li><b>MDM-adjacent automation added</b> to the scripting bullet — Jamf API and Graph API are practical differentiators worth calling out.</li><li><b>Certifications updated</b> — added Jamf Certified Admin and Microsoft Certified: Endpoint Administrator as the most directly relevant; kept the broader ones as supporting credentials.</li></ul><div class="content-conclusion"><p>&nbsp;</p> <hr> <p><span data-contrast="auto">Tekion is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, na