# Senior Systems Engineer > One Park Financial · Santo Domingo, Dominican Republic · Full-time · Posted 2026-07-17 **Workplace:** on_site **Department:** IT Infrastructure ## Description **Description:** ### **Company Overview:** One Park Financial (OPF) is a leading Financial Technology company dedicated to empowering small businesses by connecting them with flexible financing and funding options. Our mission is to provide entrepreneurs with the working capital they need to elevate their businesses. At OPF, we believe in working with high-performing individuals who are ready to play an integral part in our company's expansion — because our success hinges on our people. **Why Join Us?** At OPF, we foster a dynamic and inclusive company culture that emphasizes collaboration, innovation, and personal growth. Our team is composed of passionate, driven individuals who are committed to making a difference. Here’s what you can expect when you join our team: - **Innovative Environment:** Work with cutting-edge technology and be part of a team that is constantly pushing the boundaries of fintech. - **Professional Growth:** We invest in our employees’ growth with continuous learning opportunities, training programs, and career advancement paths. - **Supportive Culture:** Enjoy a supportive and inclusive work environment where your ideas are valued, and your contributions make a real impact. - **Community Focus:** Be part of a company that understands the importance of small and mid-sized businesses to their communities and the nation’s financial health. - **High-Performing Team:** Join a team of badasses who are committed to excellence and are integral to our company's expansion and success. ### **About the Role** The **Senior Systems Engineer – Infrastructure & Cybersecurity** is responsible for maintaining, securing, and improving One Park Financial’s enterprise systems and infrastructure. This role combines advanced systems administration with hands-on cybersecurity responsibilities across Windows Server, Active Directory, Microsoft 365, Okta, endpoint management, patching, security monitoring, and AWS. The ideal candidate is a strong systems engineer with practical security experience who can resolve complex technical issues, automate repetitive tasks, investigate security alerts, and improve the reliability and security of the organization’s technology environment. ### **Key Responsibilities** **1\. Systems Administration** - Administer and secure Windows Server, Active Directory, Group Policy, DNS, DHCP, file services, certificates, Microsoft 365, and related enterprise systems. - Perform server provisioning, upgrades, patching, performance optimization, backup validation, and lifecycle management. **2\. Identity and Access Management** - Support identity and access management across Okta, Active Directory, Microsoft 365, and integrated applications. - Manage SSO, MFA, user lifecycle processes, access reviews, privileged accounts, group policies, and SCIM provisioning while enforcing least-privilege access. **3\. Endpoint Security and Management** - Administer endpoint management, configuration, patching, and endpoint detection and response platforms across workstations and servers. - Investigate endpoint alerts, verify device coverage, coordinate remediation, and maintain compliance with company security standards. **4\. Patching and Vulnerability Management** - Lead recurring patching and maintenance cycles for endpoints, servers, applications, firmware, and supporting infrastructure. - Review vulnerability findings, prioritize remediation, validate corrective actions, and document changes for operational and audit purposes. **5\. Security Monitoring and Incident Response** - Monitor SIEM, EDR, identity, email-security, and infrastructure alerts. - Perform initial incident investigation and triage, collect evidence, document findings, and coordinate containment and remediation with Cybersecurity, Network, DevOps, and IT Support teams. - Maintain security dashboards, detection rules, investigation procedures, and response playbooks. **6\. Microsoft 365 and Email Security** - Administer and secure Microsoft 365 services, including Exchange Online, Teams, SharePoint, authentication controls, and related integrations. - Support email-security gateways, anti-phishing controls, impersonation protection, mail-flow troubleshooting, and phishing-awareness initiatives. **7\. Infrastructure and Cloud Security** - Implement secure configuration standards across servers, endpoints, identity platforms, and applications. - Support Active Directory and Group Policy reviews, privileged-access audits, system hardening, and remediation aligned with CIS, NIST, and company standards. - Assist DevOps with AWS IAM, Security Hub, GuardDuty, CloudTrail, logging, vulnerability findings, and other cloud-security improvements. **8\. Advanced Troubleshooting and Automation** - Serve as a senior escalation point for complex issues involving servers, identity, Microsoft 365, endpoint systems, networking, cloud services, and security platforms. - Perform root-cause analysis and develop permanent corrective actions for recurring incidents. - Automate administrative, provisioning, compliance, patching, and reporting activities using PowerShell, Python, APIs, or workflow platforms. **9\. Documentation, Audits, and Team Support** - Maintain system documentation, diagrams, inventories, runbooks, standard operating procedures, and incident records. - Support audits by gathering evidence, documenting controls, and tracking remediation items. - Mentor junior team members and collaborate with Cybersecurity, Network Engineering, DevOps, Telecom, and IT Support teams. ## Requirements - 5+ years of experience in systems engineering, infrastructure administration, or a similar senior technical role. - Strong experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, and Microsoft 365. - Practical cybersecurity experience in identity security, endpoint protection, vulnerability management, security monitoring, or incident response. - Experience with Okta, Active Directory, Entra ID, SSO, MFA, and user lifecycle management. - Experience with endpoint-management, patch-management, and EDR platforms. - Familiarity with SIEM platforms such as Wazuh, Graylog, Microsoft Sentinel, Splunk, or similar. - Working knowledge of email security, phishing protection, and Microsoft 365 security controls. - Strong PowerShell skills; Python and API-integration experience are preferred. - Understanding of networking fundamentals, including DNS, DHCP, VLANs, VPNs, firewalls, routing, and certificates. - Familiarity with AWS IAM, Security Hub, GuardDuty, CloudTrail, or similar services. - Experience with ITSM and change-management platforms such as Freshservice or ServiceNow. - Strong troubleshooting, documentation, communication, and root-cause-analysis skills. - Availability to support scheduled maintenance and security incidents when required. **Preferred Certifications** Microsoft, Okta, AWS, CompTIA Security+, CySA+, CISSP, CISM, or comparable systems and security certifications are preferred. ## Benefits - Competitive salary - Health insurance - Growth and development opportunities - Dynamic and collaborative work environment - Company events and team-building activities ## Apply [Apply at One Park Financial](https://apply.workable.com/one-park-financial/j/44F2F7FCC8/apply) --- Powered by [Workable](https://www.workable.com)