Share this Job
Job Req ID:  100164

Sr. Systems Engineer

IT@JH Enterprise Directory and Infrastructure Services is seeking a Sr. Systems Engineer who is responsible for managing servers, appliances and applications supported by the Enterprise Directory and Infrastructure Services (EDIS) team. Some infrastructure supported by the team includes the Efficient IP DHCP, and DNS appliances, Ivanti (formerly Pulse Secure) VPN appliances and the Microsoft Enterprise PKI environment comprising of PKI CAs, OCSP, CRL NDES and FAS servers. This position will be responsible for providing architect engineering design, implementation, governance, testing, support, and compliance with Johns Hopkins policies for infrastructure services supported by the EDIS team. The position will be responsible for the daily operation of the services and understanding the complexity of a large environment with multiple infrastructure requirements. Must be able to work independently but also the ability to be collaborative.

Specific Duties & Responsibilities

  • Interact with customers daily.
  • Work closely with customers and vendors to understand and translate their functional needs into technical requirements.
  • Understand business critical application support of network connectivity.
  • Function as a knowledgeable liaison between the functional and technical communities.
  • Develop an understanding of the general business requirements needed to support services supported by the EDIS team.
  • Configure systems to meet client needs and quickly grasp client-specific solutions for PKI, VPN, certificate services and DDI.
  • Provide support for the configuration, deployment, and management of EDIS systems and solutions.
  • Testing, configuration, design, and troubleshooting highly complex server hardware and operating systems.
  • Meet with customers to share methods and procedures that help customers understand services supported by EDIS.
  • Provide advice to customers and following up with customer to ensure complete satisfaction.
  • Build and maintain strong, trusted customer and vendor relationships. 
  • Present to executives, end-users as the subject-matter expert.
  • Work on a team responsible for supporting EDIS systems and appliances.
  • Work independently testing and troubleshooting any issues.
  • Work independently in an Enterprise environment and maintain 100% uptime of systems and appliances.
  • Possess strong technical skills and independently stay current with a constantly changing technology and vendor landscape.
  • Lead projects and manage supporting staff as assigned to complete the project.
  • Work with management on setting timelines and priorities and work independently to achieve project goals.

Scale/Size Of Area, Project And/ Or System Supported

  • DNS, DHCP, PKI, and VPN services are used across the university, hospitals, and medical institutions for business-critical processes. It is used by applications, systems and network attached devices (Wired and Wireless).

Special Knowledge, Skills & Abilities

  • Knowledge of Certificate Authority (CA), Certification Revocation List (CRL), x.509.
  • NDES/SCEP or Active Directory Certificate Services (ADCS) experience.
  • Knowledge of PKI administration internal and public.
  • Ability to create and install PKI certs on servers and various hardware devices.
  • Knowledge of Hardware Security Modules (HSM) administration.
  • Ability to build and maintain Windows servers.
  • Implement, troubleshoot, and maintain different protocols including but not limited to DNS, DHCP, IPAM, LDAP/LDAPS, RADIUS.
  • Ability to build and manage VMware guest servers.
  • Ability to design and implement solutions to support server requirements for High Availability (load-balancing, data replication, failover, clustering).
  • Knowledge of Scripting (PowerShell, Python).
  • Knowledge of VPN.
  • Must demonstrate strong critical thinking and analytical reasoning skills.
  • Ability to work on multiple priorities effectively.
  • Ability to prioritize conflicting demands.
  • Ability to execute assigned project tasks within established schedule.
  • Ability to work collaboratively in a team environment.
  • Ability to communicate effectively in the service of users and colleagues.
  • Writes and communicates clearly and concisely.
  • Possesses sound documentation skills.
  • Ability to maintain confidentiality.
  • Must demonstrate exemplary customer service skills.
  • Strong PKI and VPN experience are essential. PKI and certificate services are used throughout Hopkins for and with integrations with various applications. Our environment must be highly available and secure to successfully support both the Hospital and the University missions.
  • The technologies involved in designing, deploying, and managing EDIS supported services include a knowledge of DNS protocol, DHCP protocol, PowerShell scripting, Networking, IP Subnetting, AD, PKI/Certificate services, VPN, server and appliances support. Implementation involved strong technical and implementation knowledge of implementing systems in the public cloud (Azure and AWS).

On-call requirement Yes

Minimum Qualifications
  • Bachelor's Degree.
  • Five years related experience (Direct programming experience while pursuing education may count towards related experience. Significant undergraduate programming coursework or independent project can be considered as related experience.)
  • Additional education may substitute for required experience and additional related experience may substitute for required education, to the extent permitted by the JHU equivalency formula.

Preferred Qualifications
  • Knowledge of VPN.
  • Knowledge of PKI and certificate services.
  • Knowledge of Scripting (PowerShell).
  • Knowledge of DDI (DNS, DHCP, IPAM).
  • Knowledge of Windows Servers and Operating Systems.
  • Knowledge of AD.


Classified Title: Sr. Systems Engineer 
Role/Level/Range: ATP/04/PF  
Starting Salary Range: $83,100 - $114,230 (Commensurate with experience)
Employee group: Full Time 
Schedule: Mon-Friday 8:30am-5:00pm 
Exempt Status: Exempt 
Location: Hybrid/Mount Washington Campus / Remote
Department name: IT@JH Enterprise Directory and Messaging 
Personnel area: University Administration 


Please refer to the job description above to see which forms of equivalency are permitted for this position. If permitted, equivalencies will follow these guidelines:

30 undergraduate degree credits (semester hours) or 18 graduate degree credits may substitute for one year of experience. Additional related experience may substitute for required education on the same basis. For jobs where equivalency is permitted, up to two years of non-related college course work may be applied towards the total minimum education/experience required for the respective job.


The successful candidate(s) for this position will be subject to a pre-employment background check.


The Johns Hopkins University values diversity, equity and inclusion and advances these through our key strategic framework, the JHU Roadmap on Diversity and Inclusion.


Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.


EEO is the Law
Learn more:


Accommodation Information

If you are interested in applying for employment with The Johns Hopkins University and require special assistance or accommodation during any part of the pre-employment process, please contact the Talent Acquisition Office at For TTY users, call via Maryland Relay or dial 711. For more information about workplace accommodations or accessibility at Johns Hopkins University, please visit


Johns Hopkins has mandated COVID-19 and influenza vaccines, as applicable. Exceptions to the COVID and flu vaccine requirements may be provided to individuals for religious beliefs or medical reasons. Requests for an exception must be submitted to the JHU vaccination registry. For additional information, applicants for SOM positions should visit and all other JHU applicants should visit


The following additional provisions may apply, depending on campus. Your recruiter will advise accordingly.

The pre-employment physical for positions in clinical areas, laboratories, working with research subjects, or involving community contact requires documentation of immune status against Rubella (German measles), Rubeola (Measles), Mumps, Varicella (chickenpox), Hepatitis B and documentation of having received the Tdap (Tetanus, diphtheria, pertussis) vaccination. This may include documentation of having two (2) MMR vaccines; two (2) Varicella vaccines; or antibody status to these diseases from laboratory testing. Blood tests for immunities to these diseases are ordinarily included in the pre-employment physical exam except for those employees who provide results of blood tests or immunization documentation from their own health care providers. Any vaccinations required for these diseases will be given at no cost in our Occupational Health office.


Note: Job Postings are updated daily and remain online until filled.

Mount Washington Campus