Senior System Engineer

Capio Group is looking for an experienced Senior System Engineer!
Full-time employee - Sacramento
Salary: $130,000 - $135,000

About Us:

Capio Group is a California-based Information Technology Consulting firm serving the public sector since 2010. We assist the Government in delivering large, complex systems and solutions. Capio Group is a small, but quickly growing firm that mixes good ideas, with great people, to achieve extraordinary results for our clients. We offer the salary and benefits of the bigger companies, with the added bonus of a flexible workplace and a great work-life balance.
Scope of Work:
Capio Group is looking for an experienced Senior System Engineer with in-depth knowledge and hands-on experience in Software as a Service (SaaS) systems. The ideal candidate should be skilled in implementing, enhancing, configuring, customizing, and validating SaaS solutions. The Senior System Engineer shall
maintain good working knowledge of SaaS applications such as ServiceNow, Salesforce, Electronic Content
Management, Jama, and Riskonnect. In addition, responsibilities will include providing technical support, resolving defects, building dashboards, managing vendors, and overseeing contract management. This position is expected to work within the Enterprise IT Solutions & Innovation Division.
The Senior System Engineer support various objectives, which may include, but are not limited to, the following:
1. Initiation and Evaluation Phase: Before the software is procured, the Senior System Engineer ensures it meets technical and organizational standards.​​​​

• Technical Evaluation: Review vendor architecture, Application Programming Interface (API) capabilities, and system compatibility.
• Security & Compliance Auditing: Verify System and Organization Controls 2 (SOC 2) and ISO 27001 compliance status.
• Identity Readiness Planning: Confirm the app supports Single Sign-On (SSO) with Entra ID.
• Service Level Agreements (SLA) Verification: Review vendor SLA for acceptable uptime and support response times.

2. Deployment and Integration Phase: During rollout, the Senior System Engineer builds the infrastructure required for users to access the tool.

• Identity & Access Management (IAM): Integrate the application with the identity provider (e.g., Entra ID).
• Role-Based Access Control (RBAC): Define permissions, user groups, and admin roles.
• Network & Endpoint Security: Configure IP whitelisting, Conditional Access policies, and MobileDevice Management (MDM) profiles.
• Data Integration: Connect APIs and data pipelines to existing internal systems or databases.

3. Operational Management Phase: The Senior System Engineer must manage the daily phase of maintaining availability, security, and user support.

• User Lifecycle Management: Oversee daily onboarding, offboarding, and transfer requests.
• Monitoring & Alerting: Track application uptime, API latency, and vendor status pages.
• Incident Response: Troubleshoot outages, manage vendor support tickets, and communicate downtime to users.

4. Optimization and Governance Phase: The Senior System Engineer must continually refine the footprint to control costs and maintain compliance.

• Software as a Service (SaaS) Spend Optimization: Audit usage metrics to reallocate or cancel inactive, expensive licenses. 
• Feature Lifecycle Management: Test and roll out vendor updates, new features, and major user interface (UI) changes.
• Regular Compliance Audits: Conduct quarterly user access reviews to ensure permissions match current job roles.

5. Decommissioning and Offboarding Phase: When replacing or retiring a SaaS app, the Senior System Engineer securely removes it from the enterprise environment.

• Data Extraction & Archival: Download all enterprise data, audit logs, and configurations in reusable formats.
• Termination of Access: Disable SSO integrations, API keys, and System for Cross-domain Identity
• Management (SCIM) to prevent access leaks.
• Data Destruction Verification: Request a formal certificate of data erasure from the vendor.
• Contract and Domain Name System (DNS) Cleanup: Coordinate contract termination withprocurement and delete related DNS records or subdomains.

6. Transfer of knowledge to appropriate client employees is required, along with any requested
materials and content for transfer of knowledge.

Mandatory Experience:

1. A minimum of seven (7) years of experience in Software-as-a-Service (SaaS) application
   implementation, enhancement, and testing.
2. A minimum of seven (7) years of experience in technical and administrative support of SaaS
   applications, such as researching technical issues, debugging and resolving issues in a timely manner.
3. A minimum of seven (7) years of experience of onboarding SaaS applications including configuring SaaS systems, generating dashboards and working with the third-party vendors and SaaS clients.
4. A minimum of seven (7) years of experience in Software Development Life Cycle (SDLC) such as analyzing, solutioning, detail design, development, testing, automation and deployment.

Desirable Experience:

1. A minimum of five (5) years of hands-on coding experience in algorithm and data structures.
2. Experience with technical integration between SaaS solutions and the ServiceNow “Now Platform” including but not limited to Incident Management, Change Management, Service Level Management, and Service Catalogue.
3. Experience in maintaining and administering ServiceNow Information Technology Service
   Management (ITSM), Information Technology Asset Management (ITAM), and Information
   Technology Operations Management (ITOM).
4. Extensive experience in using, defining, and generating reports (e.g., status, statistics, analysis) from ServiceNow for communication and periodic reporting of SaaS applications and solutions across the enterprise.
5. Experience with AI technologies such as MS Copilot, Claude, etc.
6. Experience in using tools to solve application performance issues.
7. Experience in metrics, analytics and logging.
8. Experience in working in an agile environment and working with cross-functional teams.
9. The proposed project person will be able to adhere to working on-site 5 days a week at the client Headquarters, West Sacramento, CA.

Equal Opportunity Employer: