Job Description
Aircraft Performance Group, LLC
\n
IT Systems Engineer
\n
Argyle, TX · 100% On-Site · Full-Time · Internal IT Team · Reports to the IT Director
The Opportunity\n
Aircraft Performance Group (APG) is looking for a skilled and self-driven IT Systems Engineer to join our internal IT team in Argyle, Texas. This is a hands-on, high-ownership role supporting roughly 150 employees across offices in Argyle, TX; Lone Tree, CO; and Lviv, Ukraine, plus remote staff. You will take end-to-end ownership of the SaaS platforms and IT processes that keep the company productive and secure — not just administering them, but continuously improving them.
\n
You will report to the IT Director and work alongside a six-person IT organization: three engineers focused on internal IT and three site reliability engineers supporting our customer-facing platforms. APG is headquartered in Lone Tree, Colorado; this position is based in our Argyle, Texas office, and your manager and teammates are distributed across both locations. This role has no direct reports.
\n
The ideal candidate shows strong initiative — you see what needs to be done and do it without waiting to be asked — and you are fanatical about the accuracy of data details across multiple platforms. User identities, group memberships, licenses, device inventories, and configuration records must match reality in every system, every day, and you treat drift between platforms as a defect to be fixed at the source.
\n
Security is a shared responsibility across the IT team, and this role carries meaningful day-to-day security duties alongside systems engineering work. You will work in an AI-forward environment where modern AI assistants and agentic workflows are part of how we operate and automate.
Why This Role\n
· Real ownership. You will be the accountable owner of the systems that keep the company running, with the latitude to redesign them rather than only keep them alive.
\n
· A short path to decisions. Small team, direct access to the IT Director and CTO, and fewer layers of approval between a good idea and shipping it.
\n
· AI with real latitude. We actively encourage building automation, skills, and agents against our own tooling. This is how we already work, not a pilot program.
\n
· Visible impact. At 150 employees, the improvements you make are noticed across the whole company within days, not quarters.
\n
Office Hours and Location\n
• Full-time, Monday to Friday
\n
• Location: Argyle, TX – 100% on-site
\n
• Occasional after-hours and weekend support for maintenance windows, urgent issues, and time-zone coverage
\n
\n
\n
Primary Responsibilities\n
These are the areas you own outright. The Supporting Responsibilities and Cybersecurity sections below describe work that is shared across the internal IT team, where you contribute rather than carry the entire load.
\n
· System Design and Architecture: Own the design, configuration, and lifecycle of APG's IT infrastructure, SaaS platforms, and IT processes — integrations, license management, vendor relationships, and documentation.
\n
· Microsoft 365 Administration: Administer Entra ID, Exchange Online, SharePoint, Teams, and Intune device management for Windows and macOS endpoints.
\n
· Network Administration: Design, maintain, and troubleshoot office networks built on UniFi — VLANs, firewall rules, VPN and site-to-site connectivity, Wi-Fi performance, and DNS/DHCP.
\n
· Documentation: Create and maintain runbooks, standards, and process documentation so systems are supportable by the whole team.
\n
· Automation and Scripting: Automate repetitive IT processes, consolidate tooling, and reduce cost, time, and manual steps wherever possible.
\n
· Data Quality: Maintain rigorous data accuracy across all platforms: keep user, device, license, and configuration records consistent and correct everywhere, and identify and eliminate the root causes of data drift.
\n
Supporting Responsibilities\n
· Technical Support: Provide escalated Tier 2 and Tier 3 support to employees across all offices and remote locations, working alongside the rest of the internal IT team, but primarily in the Argyle office.
\n
· Employee Lifecycle: Run new hire, offboarding, and role change processes, including hardware setup and inventory, ensuring access is provisioned and revoked accurately and on time.
\n
· Physical Security Systems: Maintain security cameras, door access controls, and smart locks.
\n
Cybersecurity Responsibilities (Shared)\n
Every member of the internal IT team — including this role — shares direct responsibility for the company’s security posture:
\n
· Manage Security Tools: Email protection, endpoint protection, device management, vulnerability management, and Zero Trust Network Access. Triage findings and drive remediation to closure, and evaluate policies for secure access across offices and remote users.
\n
· Enforce Identity Security: MFA, conditional access, least-privilege permissions, and periodic access reviews.
\n
· Investigation and Response: Investigate security alerts, phishing reports, and suspected incidents, and participate in incident response and after-action reviews.
\n
· Vulnerability Management: Apply security updates to laptops and network equipment on a disciplined cadence.
\n
· AI Governance: Secure and optimize AI tool usage across the company.
\n
· Compliance: Contribute to aligning the company with cybersecurity compliance frameworks.
\n
Required Qualifications\n
· 5+ years of professional experience in systems engineering, systems administration, or a closely related role.
\n
· Network experience is required: routing, switching, VLANs, Wi-Fi, firewalls, VPN, and DNS/DHCP.
\n
· Strong Microsoft 365 and Intune administration experience (Entra ID, Exchange Online, conditional access, device compliance).
\n
· Demonstrated ownership of SaaS platforms and business processes — you have been the accountable owner, not just an operator.
\n
· Exceptional attention to detail and a track record of keeping data accurate and synchronized across multiple systems.
\n
· Strong initiative and self-direction; comfortable identifying, scoping, and finishing work independently.
\n
· Proficiency with PowerShell for automation and reporting; working familiarity with Python or Bash.
\n
· Clear written and verbal communication with technical and non-technical colleagues.
\n
· Ability to work 100% on-site in Argyle, TX, with occasional after-hours availability.
\n
Preferred Qualifications\n
• Ability to leverage AI tools (e.g., Claude, ChatGPT) to create skills and agents that automate common IT tasks.
\n
• Experience with compliance frameworks such as SOC 2, ISO 27001, and/or GDPR.
\n
• Experience with the ITIL framework (certification a plus).
\n
• Familiarity with the aviation industry is a plus.
\n
• Experience administering AWS is a plus.
\n
• Relevant certifications such as CompTIA Network+/Security+, or Microsoft.
\n
Physical Requirements and Work Environment\n
· This position is performed on-site in Argyle, TX, in an office and server room environment.
\n
· Occasionally lift and move equipment weighing up to 50 pounds and work from a ladder to install network, endpoint, and security hardware, with or without reasonable accommodation.
\n
· Duties may be adjusted and other responsibilities assigned as business needs change.
\n
\n
\n
Aircraft Performance Group (APG)\n
Aircraft Performance Group, LLC (APG) is a flight operations performance engineering firm, established in 1999, that specializes in Runway Analysis, Weight and Balance, and Flight Planning solutions for the airline and corporate flight operations industry. We maintain a current worldwide database of airport information and provide data based on FAR, EASA, and CASA requirements. APG is headquartered in Lone Tree, Colorado. Learn more at flyapg.com.
\n
Aircraft Performance Group, LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law. Employment with APG is at-will.
\n