Controls Engineer Jobs in Keene, NH (NOW HIRING)

The pay for this position is between $75,000 and $95,000 annually.

3 weeks (pro-rated) paid vacation to start & excellent health/dental/vision coverage!

9 paid holidays and 1 week of personal time

Join one of Vermont's Best Places to Work for SIX years in a row!

The Application Systems Engineer is a Microsoft systems administration role with responsibility for the reliable, secure, and supportable operation of HCRS cloud services, Windows infrastructure, managed endpoints, SQL databases, and selected enterprise applications. The position strengthens provisioning and endpoint management, advances a cloud first strategy, automates repeatable administration, and serves as an advanced escalation resource for the IT team. Healthcare application experience is valuable, but Microsoft platform and Windows systems administration are the primary focus.

• $75,000 to $95,000 annually.
• Three weeks of prorated paid vacation to start, plus excellent health, dental, and vision coverage.
• Nine paid holidays and one week of personal time.
• Join an organization recognized as one of Vermont's Best Places to Work for six consecutive years.

• Administer Microsoft 365, Microsoft Entra ID, Exchange Online, Teams, SharePoint, and OneDrive.
• Manage users, groups, licensing, roles, enterprise applications, access controls, and service administration.
• Administer multifactor authentication, Conditional Access, privileged access, and role based access controls.
• Support Windows Server, Active Directory, Group Policy, and hybrid Microsoft environments.
• Support Azure administration, cloud infrastructure, service health, licensing, and the organization's continued transition toward a cloud first environment.

• Administer Windows 10 and Windows 11 enterprise devices through Microsoft Intune.
• Manage Windows Autopilot, enrollment, provisioning, configuration profiles, compliance policies, application deployment, and device lifecycle processes.
• Administer Windows Update policies, update rings, driver and firmware deployment, endpoint patching, restart behavior, and deployment deadlines.
• Troubleshoot enrollment, policy application, application installation, update, and compliance issues, and maintain devices in a deployment ready state.
• Serve as an advanced escalation resource for complex Microsoft service, Windows device, and enterprise application issues.

• Administer Microsoft SQL Server and other databases that support enterprise applications and integrations.
• Manage database and instance configuration, service accounts, roles, permissions, and secure access using least privilege practices.
• Perform and validate backups and restores, maintenance, integrity checks, monitoring, performance troubleshooting, and capacity planning.
• Coordinate database patching, upgrades, recovery planning, vendor requirements, and application dependencies.
• Use SQL for operational troubleshooting and validation while maintaining clear documentation and established administration standards.

• Administer Microsoft Defender security tools, including endpoint and Microsoft 365 protection.
• Manage endpoint security policies, encryption, device security baselines, vulnerability remediation, identity security, endpoint protection, and access management.
• Apply security best practices and support audit requirements, HIPAA safeguards, and remediation activities across the Microsoft environment.

• Develop and maintain PowerShell scripts and automation for repeatable administration, provisioning, onboarding, offboarding, reporting, and remediation.
• Establish governance and lifecycle standards for automated and Microsoft Power Platform solutions, including ownership, security, documentation, supportability, and continuity.
• Design supportable solutions from the outset, with clear ownership, testing, change controls, operational documentation, and handoff requirements.
• Maintain strong technical documentation and participate in testing, change management, implementation, and continuous improvement.

• Support selected enterprise applications and integrations, including vendor relationships, support tickets, upgrades, release testing, and implementation activities.
• Work with APIs, data feeds, flat file integrations, middleware, or ETL processes when required for operational support.
• Collaborate with clinical, quality, finance, human resources, leadership, vendors, and IT colleagues to translate operational needs into secure and supportable solutions.
• Support healthcare systems such as Credible or comparable platforms as a secondary area of responsibility.

• At least three years of progressively responsible experience in Microsoft systems administration, endpoint management, or a closely related role.
• Hands on experience administering Microsoft 365, Microsoft Entra ID, Microsoft Intune, and Windows enterprise devices.
• Experience supporting Windows Server, Active Directory, Group Policy, and hybrid Microsoft environments.
• Working experience with SQL Server or comparable database administration, including access, backup and restore, maintenance, monitoring, and troubleshooting.
• PowerShell scripting or automation experience and the ability to create repeatable operational processes.
• Advanced troubleshooting, escalation, documentation, testing, change management, and implementation skills.
• Working knowledge of identity, endpoint, and data security practices, including role based access and least privilege.
• Ability to communicate clearly and work effectively across technical and nontechnical teams.

• Bachelor's degree in Information Systems, Computer Science, or a related field, or equivalent professional experience.

• Microsoft certifications related to Microsoft 365 administration, endpoint management, Azure, identity, or security.
• SQL or database related certification or advanced SQL Server administration experience.
• Experience with Azure administration, cloud migration, or modernization of hybrid Microsoft environments.
• Experience establishing governance for Microsoft Power Platform or other automated business solutions.
• Healthcare technology experience, including Credible or comparable platforms, and familiarity with HIPAA or healthcare privacy requirements.
• Security or compliance related training.