IT Infrastructure Engineer

The IT Infrastructure Engineer is responsible for designing, implementing, maintaining, and supporting the Company’s infrastructure environment across multiple retail banners and corporate locations. This role supports enterprise modernization initiatives while ensuring the stability, security, and performance of core infrastructure systems.

The IT Infrastructure Engineer partners closely with Network Engineering, Systems Engineering, Information Security, and Operations teams to support a hybrid technology environment consisting of Active Directory, Azure/Entra ID, AWS, Fortinet technologies, and enterprise networking systems. This position is responsible for both project-based engineering and advanced infrastructure support, helping drive technology standardization, automation, security, and operational excellence across Good Food Holdings.

Essential Duties and Responsibilities

Includes the following duties (others may be assigned):

Infrastructure Engineering & Modernization

· Support enterprise infrastructure modernization initiatives across multiple retail banners and corporate locations

· Assist in the consolidation, migration, and standardization of Active Directory environments and enterprise identity platforms

· Design, implement, and maintain hybrid cloud infrastructure supporting Azure/Entra ID and AWS environments

· Support network modernization initiatives, including Fortinet technologies, FortiManager, FortiNAC, and Zero Trust security architectures

· Develop and implement automation solutions to improve operational efficiency and reduce manual administrative tasks

· Participate in infrastructure planning, architecture reviews, and technology roadmap initiatives

Identity & Access Management

· Support enterprise Active Directory environments, including domain architecture, trusts, group policies, and authentication services

· Assist with Azure/Entra ID administration, hybrid identity management, single sign-on (SSO), and conditional access solutions

· Support identity governance, access controls, and security initiatives

Network & Security Infrastructure

· Support routing, switching, firewall, VPN, SD-WAN, and network security technologies across a distributed retail environment

· Assist in implementing and maintaining Zero Trust security principles and Network Access Control (NAC) technologies

· Support infrastructure security initiatives and ensure compliance with company security standards and industry best practices

· Partner with Information Security and Network Engineering teams on security projects and remediation efforts

Cloud & Systems Administration

· Maintain and support AWS infrastructure, cloud networking, and hybrid connectivity solutions

· Support Windows Server environments, virtualization platforms, storage systems, and related infrastructure technologies

· Assist in maintaining enterprise backup, disaster recovery, and business continuity solutions

· Monitor infrastructure performance and implement improvements to maximize reliability and availability

Infrastructure Operations & Support

· Serve as an escalation point for complex infrastructure, networking, identity, and systems-related issues

· Participate in an on-call rotation and provide after-hours support for critical infrastructure systems

· Plan and execute maintenance activities, upgrades, and infrastructure changes during approved maintenance windows

· Troubleshoot and resolve advanced infrastructure issues affecting business operations

Documentation & Process Improvement

· Develop and maintain technical documentation, standards, procedures, and architecture diagrams

· Contribute to infrastructure governance and operational best practices

· Identify opportunities for process improvement and operational efficiencies

· Maintain accurate records of system configurations, changes, and infrastructure assets

Cross-Functional Collaboration

· Partner with IT, Operations, vendors, and business stakeholders to support infrastructure projects and initiatives

· Support new store openings, remodels, acquisitions, and technology deployments

· Participate in project planning, implementation, and post-project support activities

To perform this job successfully, the candidate must be able to perform each essential duty satisfactorily. The requirements below reflect the knowledge, skill, and ability expected for this role. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.

· Bachelor’s degree in Information Technology, Computer Science, Engineering, or related field preferred

· Minimum 5 years of progressively responsible infrastructure engineering experience

· Strong experience supporting enterprise Active Directory environments, including multi-domain and multi-forest architectures

· Experience supporting Azure/Entra ID hybrid identity environments

· Experience supporting distributed enterprise networks and security technologies

· Experience supporting AWS cloud environments

· Experience with Fortinet technologies preferred

· Experience supporting multi-location retail environments preferred

Technical Skills

· Strong knowledge of Microsoft Active Directory, Windows Server, DNS, DHCP, and Group Policy

· Experience with Azure/Entra ID, hybrid identity, SSO, and conditional access

· Knowledge of AWS cloud infrastructure and networking concepts

· Understanding of routing, switching, firewall administration, VPN technologies, and network

· security

· Experience with infrastructure automation and scripting preferred

· Strong troubleshooting, analytical, and problem-solving skills

· Excellent organizational and project management abilities

· Strong written and verbal communication skills

· Ability to manage multiple priorities in a fast-paced environment

Language Skills

Ability to read, analyze, and interpret technical documentation, procedures, contracts, and vendor materials. Ability to communicate effectively with technical and non-technical stakeholders at all levels of the organization.

Mathematical Skills

Ability to analyze technical metrics, system performance data, capacity planning information, and operational reports.

Reasoning Ability

Ability to solve complex technical problems involving multiple systems, technologies, and stakeholders. Ability to evaluate alternatives and implement effective solutions with limited supervision.

Pulled from the full job description

• Professional development assistance
• Tuition reimbursement
• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Employee discount, The work environment includes corporate offices, retail stores, data closets, server rooms, and other technology support environments. The noise level is generally quiet to moderate.

Travel

Travel up to 25% may be required to support store locations, corporate offices, technology deployments, and infrastructure projects throughout California, Oregon, and Washington.

Pay: $115,000.00 - $130,000.00 per year, * 401(k)

• 401(k) matching
• Dental insurance
• Employee discount
• Flexible schedule
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Tuition reimbursement
• Vision insurance