Note: The job is a remote job and is open to candidates in USA. Baker Tilly is an advisory, tax, and assurance firm seeking a Senior Systems Engineer to serve as the technical architecture authority for its platforms team. The role owns platform architecture, governance, security, integrations, server administration, and production automation across Alteryx, KNIME, cloud infrastructure, and AI/LLM platforms, while also supporting developers, resolving escalated issues, and mentoring associates.
Responsibilities
- **(25%) Technical Architecture Authority and Platform Standards:** Serve as the technical architecture authority for the platforms team, owning reference architectures, design patterns, environment topology, and platform standards across Alteryx, KNIME, cloud infrastructure, and AI platform services. Review and approve technical designs, integration proposals, and significant configuration changes; evaluate new tools and vendor releases for technical fit, security posture, scalability, and supportability; and maintain architecture decision records. Own platform governance, including environment strategy, naming and tagging standards, technical acceptance criteria, change control, and upgrade, capacity, resiliency, and technical debt planning
- **(20%) Alteryx, KNIME, and Cloud Infrastructure Engineering and Server Administration:** Own hands-on administration and engineering of Alteryx Server and KNIME Server or Business Hub environments, including installation, node and executor configuration, scheduling, workflow deployment pipelines, repository and persistence management, licensing, performance tuning, patching, version upgrades, and platform migrations. Administer the supporting Windows and Linux server estate and cloud infrastructure, covering compute, storage, networking, backup and disaster recovery, monitoring and alerting, certificate management, and capacity and cost optimization
- **(15%) Integration Design, Identity, and Security Engineering:** Design and implement platform integrations, including data source connectivity and driver management, API and service-to-service integrations, service account and secrets management, and orchestration across analytics, data, and AI platforms. Own SSO and access architecture, including SAML and OIDC federation, SCIM provisioning, security group architecture and nesting standards, and role-based access control. Define and maintain platform security standards, including hardening baselines, TLS and certificate lifecycle, least-privilege models, vulnerability remediation, and audit logging, in partnership with the security, compliance, and identity teams
- **(15%) Automation, Scripting, and Internal Tooling:** Design, write, and maintain production-grade automation in Python and PowerShell to eliminate manual platform operations, including provisioning and deprovisioning, bulk configuration changes, deployment pipelines, configuration drift detection, health and reconciliation checks, credential rotation, and operational reporting. Apply infrastructure-as-code and CI/CD practices; manage code in Git with peer review, testing, secrets management, logging, and error handling; and use AI-assisted development tools to accelerate delivery while applying full engineering rigor to everything shipped
- **(15%) Developer Experience and LLM Tooling Onboarding:** Own developer experience and onboarding for LLM tooling, including the OpenAI API and Claude API platforms and approved agentic coding tools. Provision and manage organization and project structure, API keys and scoped credentials, rate limit and quota configuration, spend controls, and model access. Publish golden-path documentation, reference implementations, starter templates, SDK and retry patterns, and environment setup guidance to reduce the time from request to first successful integration, and advise engineering teams on latency, token consumption, and cost implications of technical design choices. Participate in and provide technical leadership in the internal Baker Tilly agentic coding champion network
- **(10%) Escalated Support, Mentorship, and Cross-Team Engineering Partnership:** Provide Tier 2 technical support during U.S. hours as the escalation point for issues that exceed Tier 1 and offshore operations capability, driving complex incidents to root cause through log analysis, API request tracing, network and certificate inspection, and controlled reproduction. Manage vendor technical escalations with Alteryx, KNIME, Microsoft, OpenAI, and Anthropic, and participate in incident, problem, and change management. Interface with peer engineering teams on shared technical concerns, represent platform requirements in architecture and security reviews, and maintain runbooks, troubleshooting guides, network and integration diagrams, and as-built documentation. Cross-skill and mentor associates through pairing, knowledge transfer sessions, and code and design review, and provide hands-on help to teammates, customers, and end users regardless of where an issue originates
- Flex into adjacent technologies and areas of the department as priorities evolve, take on unfamiliar technical challenges, and perform other duties and contribute to related initiatives as assigned
Skills
- Bachelor's degree in computer science, computer engineering, information systems, or a related technical field required
- 3 years of experience required in systems, platform, or infrastructure engineering, including direct server administration of enterprise analytics or data science platforms such as Alteryx Server and KNIME Server or Business Hub, ownership of cloud infrastructure, and enterprise SSO and directory integrations
- Demonstrated experience acting as a technical design authority for a platform estate, and a track record of replacing manual operational work with automation, are required
- Working knowledge of Alteryx Server (Gallery, Designer, scheduler, worker nodes, and persistence layer) and KNIME Server or Business Hub (executors, workflow deployment, and workspace management), or directly comparable enterprise analytics platforms
- Strong knowledge of Windows Server and Linux administration; cloud infrastructure on Microsoft Azure or AWS, covering compute, storage, networking, IAM, and infrastructure-as-code; identity and access engineering including SAML 2.0, OIDC, OAuth 2.0, SCIM provisioning, Microsoft Entra ID or Okta, conditional access, and security group and RBAC design; database connectivity, ODBC and JDBC driver management, service accounts, and secrets management; TLS and certificate lifecycle, hardening baselines, and vulnerability remediation; and REST API operations including authentication schemes, rate limits, quotas, retry and backoff, and structured error handling
- Working knowledge of enterprise AI platforms and LLM APIs, including the OpenAI API, the Claude API, ChatGPT Enterprise, and Claude Enterprise, and of ITIL incident, problem, and change management
- Advanced scripting and automation skills in Python and PowerShell are essential, including building API clients, automating administrative and deployment workflows, parsing and reconciling large data sets, and producing operational reporting
- Proficient with Git and version control workflows, infrastructure-as-code tooling such as Terraform or Bicep, CI/CD pipelines, REST API troubleshooting tools such as Postman and curl, and log and trace analysis
- Strong architecture and technical documentation skills, runbook authoring, and the ability to communicate complex technical detail to non-technical stakeholders
- Familiarity with tools such as Azure DevOps, Confluence, and Microsoft 365
- Able to operate as the recognized technical authority for the platform estate and influence technical direction without formal authority; independently drive ambiguous, complex problems to root cause and permanent resolution; and balance rapid escalation response with longer-horizon architecture and automation work
- Demonstrates strong flexibility and adaptability, including a willingness to work across adjacent areas of the department, take on unfamiliar technologies and challenges, and shift priorities as business needs change
- Learns new platforms and tools quickly and independently, with genuine curiosity about emerging technology and a track record of moving into unfamiliar technical territory
- Committed to cross-skilling and mentoring associates through knowledge sharing, pairing, documentation, and review, and to raising the overall technical capability of the team
- Approachable, collaborative, and service-oriented in supporting teammates, customers, and end users
- Able to partner credibly with identity, security, networking, infrastructure, and peer engineering teams; manage vendor technical escalations; and coordinate with distributed teams across time zones
- English proficiency required
- Certifications such as Alteryx Server administration, KNIME Server or Business Hub administration, Microsoft AZ-104 or AZ-305, AWS Solutions Architect, SC-300 (Identity and Access Administrator), or CompTIA Security+ are preferred
- Experience supporting enterprise AI or LLM platforms and APIs is strongly preferred
- Effective use of AI-assisted development tools such as Claude Code, Codex, or GitHub Copilot to accelerate delivery is valued; candidates who have built working tooling primarily through AI-assisted development are encouraged to apply, provided they can explain, test, secure, and maintain the code they produce
Company Overview
Company H1B Sponsorship