Baker Tilly US

Baker Tilly US

6 open positions available

2 locations
1 employment type
Actively hiring
Full-time

Latest Positions

Showing 6 most recent jobs
BT

Sr. Systems Engineer – AI Platforms

Baker Tilly USAnywhereFull-time
View Job
Compensation$74K - 148K a year

Serve as technical architecture authority for AI platform infrastructure, manage server administration, design integrations, automate workflows, and provide technical support and mentorship. | Requires 3+ years in systems/platform engineering with expertise in Windows/Linux server admin, cloud infrastructure, identity and access management, automation with Python/PowerShell, and experience with AI/LLM platforms preferred. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Job Description The Senior Systems Engineer serves as the technical architecture authority for the platforms team, owning integration design, security standards, platform governance, and server administration across the Alteryx, KNIME, and cloud infrastructure estate. This hands-on senior engineering role defines platform standards and reference architectures, engineers and administers on-premises and cloud platform infrastructure, and builds production automation in Python and PowerShell. The role also owns developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms, provides Tier 2 technical support during U.S. hours for escalated configuration, identity, and integration issues, and serves as the dedicated technical counterpart to the identity, security, networking, and infrastructure teams and to peer engineering teams on shared technical concerns. The role is expected to flex into adjacent areas of the department as priorities evolve, learn new platforms and technologies quickly, and cross-skill and mentor other associates. Responsibilities • • (25%) Technical Architecture Authority and Platform Standards: Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning. • (20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration: Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization. • (15%) Integration Design, Identity, and Security Engineering: Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams. • (15%) Automation, Scripting, and Internal Tooling: Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped. • (15%) Developer Experience and LLM Tooling Onboarding: Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network. • (10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership: Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates. • Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned. Qualifications • Bachelor’s degree in computer science, computer engineering, information systems, or a related technical field required • Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred. • 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations. • Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required. • Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred. • Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms. • Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling. • Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management. • Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting. • Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis. • Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce. • Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders. • Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365. • Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work. • Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change. • Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory. • Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team. • Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users. • Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones. • English proficiency required. The pay rate range for this job position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $74,200 to $148,230

Active Directory
Windows Server Administration
PowerShell Scripting
Kaseya Scripting
Cloud Infrastructure
Automation
Verified Source
Posted 29 days ago
Baker Tilly US

Sr. Systems Engineer – AI Platforms

Baker Tilly USAnywhereFull-time
View Job
Compensation$74K - 148K a year

Lead technical architecture, platform administration, integration design, automation, and developer onboarding for AI and analytics platforms. | Requires 3+ years in systems/platform engineering with expertise in Alteryx, KNIME, cloud infrastructure, identity and security engineering, advanced scripting, and AI platform support. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Job Description The Senior Systems Engineer serves as the technical architecture authority for the platforms team, owning integration design, security standards, platform governance, and server administration across the Alteryx, KNIME, and cloud infrastructure estate. This hands-on senior engineering role defines platform standards and reference architectures, engineers and administers on-premises and cloud platform infrastructure, and builds production automation in Python and PowerShell. The role also owns developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms, provides Tier 2 technical support during U.S. hours for escalated configuration, identity, and integration issues, and serves as the dedicated technical counterpart to the identity, security, networking, and infrastructure teams and to peer engineering teams on shared technical concerns. The role is expected to flex into adjacent areas of the department as priorities evolve, learn new platforms and technologies quickly, and cross-skill and mentor other associates. Responsibilities • • (25%) Technical Architecture Authority and Platform Standards: Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning. • (20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration: Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization. • (15%) Integration Design, Identity, and Security Engineering: Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams. • (15%) Automation, Scripting, and Internal Tooling: Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped. • (15%) Developer Experience and LLM Tooling Onboarding: Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network. • (10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership: Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates. • Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned. Qualifications • Bachelor’s degree in computer science, computer engineering, information systems, or a related technical field required • Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred. • 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations. • Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required. • Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred. • Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms. • Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling. • Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management. • Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting. • Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis. • Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce. • Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders. • Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365. • Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work. • Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change. • Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory. • Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team. • Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users. • Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones. • English proficiency required. The pay rate range for this job position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $74,200 to $148,230

API Design
System Architecture
JavaScript
TypeScript
Terraform
Python
PowerShell
Verified Source
Posted 29 days ago
BT

Sr. Systems Engineer – AI Platforms

Baker Tilly USAnywhereFull-time
View Job
Compensation$74K - 148K a year

Serve as technical architecture authority for AI platform infrastructure, including server administration, automation, integration design, and developer onboarding. | Requires 3+ years in systems/platform engineering with expertise in Windows/Linux administration, cloud infrastructure, identity and access management, scripting in Python and PowerShell, and experience with enterprise AI platforms and APIs. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Job Description The Senior Systems Engineer serves as the technical architecture authority for the platforms team, owning integration design, security standards, platform governance, and server administration across the Alteryx, KNIME, and cloud infrastructure estate. This hands-on senior engineering role defines platform standards and reference architectures, engineers and administers on-premises and cloud platform infrastructure, and builds production automation in Python and PowerShell. The role also owns developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms, provides Tier 2 technical support during U.S. hours for escalated configuration, identity, and integration issues, and serves as the dedicated technical counterpart to the identity, security, networking, and infrastructure teams and to peer engineering teams on shared technical concerns. The role is expected to flex into adjacent areas of the department as priorities evolve, learn new platforms and technologies quickly, and cross-skill and mentor other associates. Responsibilities • • (25%) Technical Architecture Authority and Platform Standards: Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning. • (20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration: Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization. • (15%) Integration Design, Identity, and Security Engineering: Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams. • (15%) Automation, Scripting, and Internal Tooling: Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped. • (15%) Developer Experience and LLM Tooling Onboarding: Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network. • (10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership: Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates. • Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned. Qualifications • Bachelor’s degree in computer science, computer engineering, information systems, or a related technical field required • Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred. • 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations. • Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required. • Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred. • Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms. • Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling. • Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management. • Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting. • Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis. • Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce. • Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders. • Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365. • Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work. • Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change. • Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory. • Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team. • Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users. • Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones. • English proficiency required. The pay rate range for this job position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $74,200 to $148,230

Active Directory
Windows Servers
PowerShell
Kaseya Scripting
RMM Tools
Verified Source
Posted 29 days ago
BT

Sr. Systems Engineer – AI Platforms

Baker Tilly USAnywhereFull-time
View Job
Compensation$74K - 148K a year

Serve as technical architecture authority and hands-on engineer for AI platform infrastructure, automation, and integration. | Requires 3+ years in systems/platform engineering with expertise in AI platforms, cloud infrastructure, identity and access management, and advanced scripting in Python and PowerShell. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Job Description The Senior Systems Engineer serves as the technical architecture authority for the platforms team, owning integration design, security standards, platform governance, and server administration across the Alteryx, KNIME, and cloud infrastructure estate. This hands-on senior engineering role defines platform standards and reference architectures, engineers and administers on-premises and cloud platform infrastructure, and builds production automation in Python and PowerShell. The role also owns developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms, provides Tier 2 technical support during U.S. hours for escalated configuration, identity, and integration issues, and serves as the dedicated technical counterpart to the identity, security, networking, and infrastructure teams and to peer engineering teams on shared technical concerns. The role is expected to flex into adjacent areas of the department as priorities evolve, learn new platforms and technologies quickly, and cross-skill and mentor other associates. Responsibilities • • (25%) Technical Architecture Authority and Platform Standards: Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning. • (20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration: Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization. • (15%) Integration Design, Identity, and Security Engineering: Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams. • (15%) Automation, Scripting, and Internal Tooling: Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped. • (15%) Developer Experience and LLM Tooling Onboarding: Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network. • (10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership: Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates. • Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned. Qualifications • Bachelor’s degree in computer science, computer engineering, information systems, or a related technical field required • Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred. • 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations. • Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required. • Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred. • Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms. • Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling. • Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management. • Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting. • Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis. • Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce. • Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders. • Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365. • Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work. • Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change. • Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory. • Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team. • Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users. • Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones. • English proficiency required. The pay rate range for this job position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $74,200 to $148,230

Active Directory
Windows Servers
PowerShell
Kaseya
NinjaOne
RMM Tools
Verified Source
Posted 29 days ago
BT

Sr. Systems Engineer – AI Platforms

Baker Tilly USAnywhereFull-time
View Job
Compensation$74K - 148K a year

Lead platform architecture, administration, automation, and support for AI and analytics platforms including cloud and on-premises environments. | Requires 3+ years in systems/platform engineering with expertise in Windows/Linux server administration, cloud infrastructure, identity and access management, automation with Python and PowerShell, and experience with AI/LLM platforms. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Job Description The Senior Systems Engineer serves as the technical architecture authority for the platforms team, owning integration design, security standards, platform governance, and server administration across the Alteryx, KNIME, and cloud infrastructure estate. This hands-on senior engineering role defines platform standards and reference architectures, engineers and administers on-premises and cloud platform infrastructure, and builds production automation in Python and PowerShell. The role also owns developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms, provides Tier 2 technical support during U.S. hours for escalated configuration, identity, and integration issues, and serves as the dedicated technical counterpart to the identity, security, networking, and infrastructure teams and to peer engineering teams on shared technical concerns. The role is expected to flex into adjacent areas of the department as priorities evolve, learn new platforms and technologies quickly, and cross-skill and mentor other associates. Responsibilities • • (25%) Technical Architecture Authority and Platform Standards: Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning. • (20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration: Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization. • (15%) Integration Design, Identity, and Security Engineering: Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams. • (15%) Automation, Scripting, and Internal Tooling: Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped. • (15%) Developer Experience and LLM Tooling Onboarding: Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network. • (10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership: Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates. • Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned. Qualifications • Bachelor’s degree in computer science, computer engineering, information systems, or a related technical field required • Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred. • 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations. • Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required. • Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred. • Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms. • Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling. • Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management. • Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting. • Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis. • Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce. • Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders. • Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365. • Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work. • Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change. • Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory. • Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team. • Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users. • Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones. • English proficiency required. The pay rate range for this job position are listed below. Actual compensation is influenced by a variety of relevant factors including but not limited to applicant’s skills, prior experience, qualifications, degrees, professional certifications, work arrangements and geographic location. Baker Tilly offers a comprehensive compensation and benefits package to eligible employees. The national pay rate range is $74,200 to $148,230

Active Directory
Windows Server Administration
PowerShell Scripting
Kaseya Scripting
Cloud Infrastructure
Verified Source
Posted 29 days ago
Baker Tilly US

IT Audit, Cybersecurity & Risk Manager (HITRUST)

Baker Tilly USFrisco, TXFull-time
View Job
Compensation$124K - 235K a year

Lead IT audit, cybersecurity, and risk advisory engagements focusing on compliance, governance, and controls. | Requires 5+ years in risk advisory or IT audit, relevant certifications (CISSP, CISA, CPA), and experience with HITRUST and cybersecurity frameworks. | Overview Baker Tilly is a leading advisory, tax and assurance firm, providing clients with a genuine coast-to-coast and global advantage in major regions of the U.S. and in many of the world’s leading financial centers – New York, London, San Francisco, Los Angeles, Chicago and Boston. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP (Baker Tilly) provide professional services through an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable laws, regulations and professional standards. Baker Tilly US, LLP is a licensed independent CPA firm that provides attest services to its clients. Baker Tilly Advisory Group, LP and its subsidiary entities provide tax and business advisory services to their clients. Baker Tilly Advisory Group, LP and its subsidiary entities are not licensed CPA firms. Baker Tilly Advisory Group, LP and Baker Tilly US, LLP, trading as Baker Tilly, are independent members of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion. Visit bakertilly.com or join the conversation on LinkedIn, Facebook and Instagram. Please discuss the work location status with your Baker Tilly talent acquisition professional to understand the requirements for an opportunity you are exploring. Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law. Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system. Responsibilities Job Description: Are you interested in joining one of the fastest growing consulting and accounting firms in the country? Would you like the ability to join a highly dynamic team focused on providing exceptional client service in the areas of risk and advisory? If yes, consider joining Baker Tilly (BT) as an IT Audit, Cybersecurity & Risk Manager (HITRUST)! Our Risk Advisory practice provides a full spectrum of services to help our clients assess their risks, develop strategies to compete in an ever-changing business environment, and achieve their goals and objectives. All of this is accomplished through deep industry knowledge of risk, governance, internal audit, compliance, IT, and cybersecurity best practices. As one of the fastest growing firms in the nation, BT has the ability to offer you upward career trajectory, flexibility in how and where you get your work done and meaningful relationships with clients, teammates and leadership who truly care about you and your development. Does this describe you? • You want to continue to expand your work experiences and hone your skills as a comprehensive risk professional in the areas of compliance, enterprise risk management, governance, internal controls, and data analytics • You crave the opportunity to be part of a fast growing, entrepreneurial risk consulting practice where your hard work and creativity will be rewarded • You do your best work when you are part of a talented, down-to-earth team that thrives in collaboration and truly enjoys working together • You feel valued when you are provided the resources and support to continually sharpen your technical skills and build your career now, for tomorrow What You Will Do • Work closely with client executives and management teams to understand their businesses and assist in identifying and managing financial and operational risks within their business processes and systems • Develop in-depth knowledge of clients’ businesses and industries by having direct client interaction while working on multiple aspects of an engagement • Think independently and strategically about your clients’ business, systems and risks providing recommendations for business and process improvements based upon knowledge gained relative to the client’s operations, processes and business objectives • Provide strategic business advice to clients by assisting in the implementation of new processes and controls that address key risks • Assess, manage and optimize information technology risk across a wide range of areas, including cybersecurity, IT strategy and governance, IT regulatory and compliance requirements, and business continuity and disaster recovery. • Review clients' processes and controls against industry frameworks, identifying gaps in design and execution, and communicating issues and recommendations to clients • Draft comprehensive executive summaries and final reports for delivery to the client, documenting and reviewing engagement work papers in accordance with industry-accepted internal audit methodologies • Act as a valued business advisor, build relationships and communicate effectively with the client to provide superior client service • Facilitate professional and effective presentations to internal and external audiences • Continue to develop your knowledge and experience working with a variety of technology environments, platforms, applications and tools/utilities • Assist with managing client engagement staffing, billings/collections, and ensure client profitability targets are met • Utilize your entrepreneurial skills to network and build strong relationships internally and externally with clients and the community • Invest in your professional development individually and through participation in firm wide learning and development programs • Support the growth and development of team members through the Baker Tilly Care and Teach philosophy, helping associates meet their professional goals • Enjoy friendships, social activities and team outings that encourage a work-life balance Qualifications • Bachelor’s degree in accounting, finance, or a related program • CPA, CISA, CCSFP or CISSP designation(s) required • 5+ year(s) experience with risk advisory, internal/external audit, business process reengineering, and/or internal controls with focus on IT related subject matter (e.g., SOC 1/2 Exams, HITRUST, HIPAA, NIST CSF, NIST 800-53) • Experience performing HITRUST engagements preferred. Open to candidates willing to obtain HITRUST Certification in the future • Experience with Security+ is preferred • Experience with Cloud audit experience and certifications is preferred • Experience as a client serving professional for a consulting firm desired • Excellent analytical, technical, and problem-solving skills, with strong attention to detail • Exceptional verbal and written communication, collaboration, and time management skills The compensation range for this role is $123,840 to $234,770. Actual compensation is influenced by a variety of factors including but not limited to skills, experience, qualifications, and geographic location.

SIEM/SOAR Engineering
MDR Delivery Leadership
MITRE ATT&CK Detection
SOC Operations
Cybersecurity Risk Management
Verified Source
Posted 3 months ago

Ready to join Baker Tilly US?

Create tailored applications specifically for Baker Tilly US with our AI-powered resume builder

Get Started for Free

Ready to have AI work for you in your job search?

Sign-up for free and start using JobLogr today!

Get Started »
JobLogr badgeTinyLaunch BadgeJobLogr - AI Job Search Tools to Land Your Next Job Faster than Ever | Product Hunt