Senior Infrastructure Engineer (VTS)

MSP4 operates as the embedded IT department for a portfolio of clients spanning professional services, legal, distribution, manufacturing, and government sectors. Environments range from 50 to 1,500 users and carry real compliance weight: CMMC L2, NIST 800-171, and SOC 2 are active requirements in this client base, not aspirational targets., This role owns infrastructure delivery across that portfolio. You will design, implement, and support on-premise and hybrid cloud environments, working across bare metal, virtualization, SAN and HCI storage, backup and recovery, and hardened Windows Server configurations. Cloud work spans AWS, Azure Commercial, and Azure Government. You will work under the direction of our Principal Solutions Architect, who owns design authority. The expectation is clean execution, thorough documentation, and judgment that improves the environment, not the urge to rebuild it from scratch., * Deploy and maintain Windows Server environments on bare metal and virtualized platforms: VMware vSphere, Microsoft Hyper-V, and Proxmox

• Design and implement SAN and HCI solutions (NetApp, Pure Storage, Nutanix, VMware vSAN) and manage Mellanox/RDMA high-speed fabric infrastructure
• Architect and operate hybrid cloud environments across AWS, Azure Commercial, and Azure Government, covering IaaS, identity, and landing zone configurations
• Own Veeam-based backup and disaster recovery implementations: design, deployment, testing, and documentation
• Apply STIG hardening and NIST 800-171 controls across Windows Server environments in support of CMMC L2 and SOC 2 compliance requirements
• Support the infrastructure layer for enterprise business applications across the client base: legal practice management (TR Prolaw), petroleum distribution (iRely), manufacturing ERP platforms (Epicor, Infor SyteLine), and accounting and operations platforms (Sage 100, Sage 300). Windows Server, SQL Server, storage performance, and connectivity are your domain. The application runs on what you build and maintain.
• Own the SQL Server platform layer for client ERP and line-of-business applications: installation, licensing, patching and version upgrades, Always On Availability Groups or failover cluster instances, application-consistent backup coordination with Veeam, storage layout for tempdb, data, and log files, and baseline instance configuration. DBA-level query tuning, indexing strategy, and application-side schema work sit with client DBAs or application vendors. The instance and the infrastructure underneath it are yours.
• Support the infrastructure layer for Citrix Workspaces deployments: VDA compute and storage provisioning, machine catalog management, hypervisor integration, and ADC/NetScaler gateway configuration. Dedicated Citrix specialists on the team own application delivery and session configuration; your ownership is the layer underneath.
• Produce documentation that meets audit standards and enables other engineers to maintain what you build
• Travel to client sites as needed for infrastructure deployments and project-based engagements

• 6 or more years of infrastructure engineering experience in production environments across professional services, manufacturing, distribution, legal, or government sectors
• Deep Windows Server expertise: Active Directory, DNS, DHCP, Group Policy, PKI, and server lifecycle management. Not surface familiarity. Operational depth.
• Operational SQL Server depth: installation, patching, licensing model (core vs. CAL), Always On Availability Groups or Failover Cluster Instances, application-consistent backup coordination with Veeam, tempdb sizing, memory configuration, and storage layout for OLTP workloads. Not DBA-level query optimization or indexing strategy. Platform-level ownership of the instance and the environment it runs in.
• Hands-on virtualization experience across at least two platforms (VMware vSphere, Hyper-V, or Proxmox), including vMotion, HA, and DRS configuration
• Working knowledge of SAN and HCI storage: NetApp ONTAP, Pure Storage, Nutanix AHV, or VMware vSAN
• AWS and Azure deployment experience covering IaaS, Azure AD/Entra ID, ExpressRoute/VPN connectivity, and hybrid identity
• Veeam Backup & Replication design and administration experience
• Familiarity with STIG application, NIST 800-171 controls, and CMMC compliance requirements
• Ability to read and apply documentation, runbooks, and standards established by others without requiring constant design input
• Relevant certifications (Microsoft MCSA/MCSE/Azure, VMware VCP, or AWS SAA) are a plus, not a requirement
• Working familiarity with Citrix Workspaces at the infrastructure layer: VDA provisioning, machine catalog design, storage sizing for VDI workloads, and ADC/NetScaler at a working level. Application delivery configuration sits with dedicated specialists. You need enough Citrix context to support them without creating hand-off gaps.
• Ability to produce clear technical documentation: runbooks, build guides, change records, and audit-ready configuration documentation that another engineer can follow without asking you questions
• Prior experience in a multi-client service delivery environment is an advantage; comfort adapting to established standards across varied client environments matters here