Senior Application Systems Engineer

Job Overview

This role serves as the senior application systems engineer and primary owner of the organization's IT Service Management (Freshservice) and Identity and Access Management systems, with end-to-end responsibility for their health, configuration, integrations, and automation. On the ITSM side, the engineer configures and improves workflows, the service catalog, asset management, and integrations with other enterprise systems.

On the IAM side, the engineer maintains and enhances the processes that drive account provisioning, changes, and deprovisioning across systems, and ensures access follows least-privilege principles.

Beyond the core platforms, the role is responsible for an array of business applications in the team's portfolio. For on-premises applications, the engineer manages the underlying server, web, and database platforms, including patching, certificate management, and vulnerability remediation. The engineer also implements SSO (SAML/OAuth) and REST API integrations and automates recurring work with PowerShell and related tooling.

Upgrades, implementations, and vendor-driven changes are led by this role and carried through the organization's change management process.

As a senior member of the Business Applications team, the engineer serves as the technical escalation point and primary vendor contact for owned systems and participates in after-hours and on-call support. The role keeps documentation and runbooks current, mentors other team members and contributes to the technical direction of the portfolio.

Because the role works with a wide range of departments and individuals, strong communication skills are central to its success. That includes gathering requirements, explaining technical issues to non-technical audiences, and keeping stakeholders informed through changes and outages.

Additional Information

Job Status

: 40 hours per week, eligible for benefits

Shift:

Monday - Friday, 8am-5pm. Work hours may vary based on the needs of the department. This role participates in an off hours/on-call rotation.

• This position has potential to be fully remote if applicant is located within CHCO hiring region.

Duties & Responsibilities

• Leads the day-to-day operational support and data integrity for computer operating systems, server environments (both private and public cloud), data storage systems, enterprise imaging, email system, enterprise development platforms, data integration, data backup and recovery systems, application/desktop delivery, directory services and data access security.
• Designs, installs, configures, administers and maintains operating systems, client systems, servers, and storage environments.
• Oversees and participates in the testing, implementation, maintenance, documentation, and development of operations and maintenance procedures.
• Executes complex enterprise system functional and technical designs, capacity planning, and implementation.
• Designs, develops, and maintains data interfaces and the interface engine that manipulates the interface messages in production and non-production environments.
• Plans and performs complex software installations/deployments and upgrades to operating systems and multi-tiered software packages. Schedules installations and upgrades.
• Monitors and tunes systems to achieve optimum performance, availability, and capacity levels. Implements and manages software and hardware solutions to ensure client systems and server data integrity and security. Participates in capacity planning.
• Schedules and implements system backups, restores, and database archive operations. Ensures data and media recoverability. Supports media management through internal methods and procedures or through offsite storage and retrieval services.
• Actively collaborates with information technology staff, project managers and end users to gather, develop and implement customer requirements.
• Creates and maintains processes, policies and procedures in accordance with established IT policies and procedures. Develops and maintains a comprehensive operating system hardware and software configuration database library of all supporting documentation. Develops training and documentation for Tier 1 support staff.
• Conducts routine hardware and software audits of client systems and servers to ensure compliance with established standards, policies, and configuration guidelines.
• Supports and collaborates in the development of ITIL processes including change, incident, and problem management. Conducts RCAs following significant service incidents.
• Troubleshoots system failures and problems and provides technical support. Engages customers and vendors to ensure problem resolution.
• Participates in vendor and technology selection. Collaborates with other teams to develop plans and budgets for future upgrades.
• Operationally manages infrastructure projects
• Participates in on-call responsibilities.
• Expands technology knowledge through personal learning and growth. May share new knowledge through on-site presentations and “lunch-and-learn” sessions.

Minimum Qualifications

• EDUCATION – Bachelor'sdegree is required.
• EXPERIENCE – Minimum of five (5) years of related experience is required.
• EQUIVALENCY – Combination of post-high school education, job related certification, and/or related experience equivalent to nine (9) years may be considered in lieu of minimum requirements.

Preferred Experience And Qualifications

• 7+ years of experience administering and engineering enterprise applications.
• Strong hands-on experience with Windows Server, IIS, and SQL Server, including T-SQL.
• Advanced PowerShell scripting and automation skills.
• Experience implementing and troubleshooting SSO using SAML and OAuth/OpenID Connect.
• Experience building and supporting REST API integrations.
• Experience administering an enterprise ITSM platform. Freshservice experience is a plus.
• Working knowledge of identity and access management concepts, including provisioning, deprovisioning, and access reviews.
• Experience managing SaaS and cloud-hosted applications and working directly with vendors.
• Familiarity with ITIL practices and change management.
• Experience with source control (Git) and automation or CI/CD tools such as Jenkins or n8n is a plus.
• Excellent written and verbal communication skills, with the ability to work effectively with technical and non-technical groups.

Salary Information

Pay is dependent on applicant's relevant experience.

Annual Salary Range (Based on 40 hours worked per week): $112,925.52 to $169,388.27

Benefits Information

Here, you matter.

As a Children’s Hospital Colorado team member, you will receive a competitive pay and benefits package designed to take care of your needs that includes base pay, incentives, paid time off, medical/dental/vision insurance, company provided life and disability insurance, paid parental leave, 403b employer match (retirement savings), a robust wellness program, and access to professional development tools, including an education benefit to help you advance your career.

As part of our Total Rewards package, Children's Colorado offers an annual employee bonus program that rewards eligible team members based on organizational performance. If organizational goals are met for the year, the bonus is paid out the following April.

Children’s Colorado delivers annual base pay increases to eligible team members based on their performance over the previous year.

EEO Statement

It is our intention that all qualified applicants be given equal opportunity and that selection decisions be based on job-related factors. We do not discriminate on the basis of race, color, religion, national origin, sex, age, disability, or any other status protected by law or regulation. Be aware that none of the questions are intended to imply illegal preferences or discrimination based on non-job-related information.

The position is expected to stay open until the posted close date. Please submit your application as soon as possible as the posting is subject to close at any time once a sufficient pool of qualified applicants is obtained.

Colorado Residents

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of attendance at or graduation from an educational institution. You will not be penalized for redacting or removing this information.