Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

This role is responsible for designing, implementing, securing, and supporting complex client environments while helping establish technical standards, mentoring engineers, improving automation, and serving as a senior technical resource for the engineering team.

If you’re looking for a traditional help desk role, this isn’t it.

What You’ll Do

As our Lead Infrastructure Engineer, you’ll work directly with the Managing Partner and engineering team to deliver secure, reliable, and scalable technology solutions for our clients.

Responsibilities include:

• Architect, deploy, and support Microsoft 365 environments
• Design, implement, and support Microsoft Azure infrastructure
• Design and administer Microsoft Entra ID and Microsoft Intune
• Lead Microsoft 365 tenant migrations and cloud modernization projects
• Design, configure, and support Fortinet security solutions
• Configure business networking including VLANs, routing, switching, VPNs, wireless, and network security
• Implement and support SentinelOne, Check Point Harmony Email & Collaboration, and other cybersecurity solutions
• Design and support cloud backup and disaster recovery solutions
• Develop PowerShell automation and scripting to improve efficiency
• Lead infrastructure projects from planning through implementation
• Troubleshoot and resolve complex Tier III infrastructure issues
• Mentor engineers and help develop technical standards
• Improve documentation and engineering processes within Hudu
• Work directly with business owners and executive leadership on strategic technology initiatives

Required Technical Experience

Candidates should possess strong, hands-on experience across most of the following technologies.

Microsoft Cloud

• Microsoft 365
• Exchange Online
• SharePoint Online
• Microsoft Teams
• OneDrive
• Microsoft Entra ID
• Microsoft Intune
• Microsoft Azure
• Azure Virtual Machines
• Conditional Access
• Multi-Factor Authentication
• Microsoft Defender
• Microsoft 365 Tenant Migrations

Networking

• Fortinet Firewalls
• FortiSwitch
• FortiAP
• VLAN Design
• Routing & Switching
• VPN Configuration
• DNS
• DHCP
• Wireless Networking
• Network Security Best Practices

Windows Infrastructure

• Windows Server
• Active Directory
• Group Policy
• Hyper-V and/or VMware
• Storage & Virtualization
• Server Migrations

Cybersecurity

• SentinelOne
• Check Point Harmony Email & Collaboration (Avanan)
• Endpoint Detection & Response (EDR)
• Email Security
• Identity Security
• Vulnerability Remediation
• Security Hardening
• Incident Response

Backup & Disaster Recovery

Experience supporting one or more enterprise cloud backup platforms, including:

• Cove Data Protection
• Datto BCDR
• Axcient
• Veeam
• Microsoft 365 Backup Solutions
• Cloud-to-Cloud Backup
• Disaster Recovery Planning & Testing

MSP Platforms, * Microsoft Certified: Azure Solutions Architect Expert

• Microsoft 365 Administrator Expert
• Fortinet NSE Certification
• CISSP
• Security+
• Network+

What Success Looks Like

Successful engineers in this role:

• Take ownership of complex client environments.
• Design secure, scalable infrastructure with minimal oversight.
• Build standards that improve consistency across all clients.
• Mentor engineers and elevate the technical capability of the team.
• Improve documentation and automation.
• Build long-term client trust through professionalism and technical excellence., We are seeking a dynamic and highly skilled Lead Infrastructure Engineer specializing in Microsoft Cloud and Cybersecurity to drive our cloud transformation and security initiatives. In this pivotal role, you will lead the design, deployment, and management of scalable, secure, and resilient cloud infrastructure solutions across multiple platforms. Your expertise will empower our organization to leverage cutting-edge cloud services, optimize infrastructure operations, and ensure robust cybersecurity measures. This is an exciting opportunity to influence our cloud architecture strategy while fostering innovation and excellence within our IT teams., * Lead the development and implementation of cloud infrastructure architectures utilizing Microsoft Azure, AWS, Google Cloud Platform, and other public cloud services.
• Design and manage hybrid cloud environments incorporating Virtual Private Clouds (VPCs), Virtual Machines (VMs), containers (Docker, Kubernetes), and serverless solutions to ensure scalability and high availability.
• Drive automation of deployment processes using Infrastructure as Code (IaC) tools such as Terraform, Ansible, PowerShell, Bash scripting, and CI/CD pipelines with Jenkins or similar platforms.
• Oversee the integration of cybersecurity best practices into cloud environments, including identity and access management (IAM), system hardening, encryption protocols, VPN configurations, and threat detection strategies.
• Collaborate with software development teams to implement microservices architectures utilizing RESTful APIs, web services, and container orchestration tools to support SaaS and PaaS offerings.
• Manage IT infrastructure components such as VMware, OpenStack, Citrix, Rackspace hosting environments, ensuring optimal performance through virtualization techniques.
• Monitor system health, troubleshoot issues proactively, perform capacity planning for distributed systems, and implement scalable solutions aligned with business growth.

• Halo PSA (Preferred)
• NinjaOne (Preferred)
• Hudu
• ConnectWise Control
• ConnectWise Manage
• Datto RMM
• AutoTask
• N-able

Automation

• PowerShell
• Microsoft Graph
• Scripting
• Process Automation, * 7+ years of professional IT experience
• 5+ years working for a Managed Services Provider (MSP)
• Demonstrated experience leading Microsoft 365 migrations
• Advanced Microsoft Azure administration experience
• Advanced Fortinet administration experience
• Strong networking design and troubleshooting experience
• Experience leading infrastructure projects
• Excellent written and verbal communication skills
• Strong documentation habits
• Valid driver’s license and reliable transportation
• Ability to travel throughout the Denver Metro area as needed, * Proven experience leading large-scale cloud infrastructure projects across multiple platforms including Microsoft Azure, AWS, Google Cloud Platform, or Rackspace.
• Strong knowledge of service-oriented architecture (SOA), microservices development, RESTful APIs, web services integration, and cloud-native application design.
• Hands-on expertise with virtualization technologies such as VMware, OpenStack, Docker containers, Kubernetes orchestration tools.
• Proficiency in scripting languages including PowerShell, Bash (Unix shell), Python, Go or Ruby for automation purposes.
• Deep understanding of cloud management tools like Terraform, Ansible, Puppet or Chef for Infrastructure as Code (IaC) deployment automation.
• Familiarity with database systems such as MySQL, PostgreSQL, Oracle Database or Microsoft SQL Server for managing data-driven applications.
• Experience implementing security protocols including identity and access management solutions (IAM), system hardening techniques for operating systems like Linux/Windows.
• Knowledge of networking concepts such as VPNs, Virtual Private Networks; SDLC methodologies; DevOps practices; CI/CD pipelines; application deployment strategies; system scalability; NoSQL databases; Internet of Things (IoT); and software development life cycle processes.
• Bachelor’s degree in Computer Science or related field; relevant certifications such as Microsoft Certified: Azure Solutions Architect Expert or AWS Certified Solutions Architect are highly desirable.

Join us to lead innovative cloud infrastructure initiatives that transform our technology landscape! We’re committed to fostering a collaborative environment where your expertise drives impactful change while offering opportunities for professional growth in a fast-paced digital world., * How would you rate your Microsoft Azure administration experience? (Intermediate, Advanced, Expert)

• How many years have you administered Microsoft Intune?
• Which PSA and RMM platforms have you used?
• Describe the most technically complex infrastructure project you personally designed and implemented (short answer is fine):
• Describe a PowerShell script or automation you’ve written that improved operations or eliminated manual work (Short answer is fine):
• What is your current compensation and desired compensation?

Experience:

• MSP: 5 years (Required)

License/Certification:

• CDL (Required)

Pulled from the full job description

• Tuition reimbursement
• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Paid holidays
• Flexible schedule, * $110,000-$125,000 Base Salary
• Target 10% Annual Performance Bonus
• Monthly Healthcare Reimbursement
• 401(k)
• Paid Time Off
• Paid Holidays
• Company-provided equipment
• Company-paid certifications and professional development
• Hybrid work environment
• Opportunity to help shape the future of PCG’s engineering organization

Why PCG Systems?

We’re building an engineering-first MSP.

We believe exceptional client service begins with exceptional engineers. We’re investing in documentation, automation, standardization, mentorship, and professional development to build one of the strongest engineering teams in Colorado.

If you’re looking for a role where you’ll solve challenging technical problems, influence engineering standards, mentor others, and make a meaningful impact on a growing company-we’d love to meet you., * 401(k)

• 401(k) matching
• Flexible schedule
• Health insurance
• Paid time off
• Tuition reimbursement

PCG Systems is a growing Managed IT and Cybersecurity company supporting businesses throughout Colorado and beyond. We specialize in Microsoft Cloud, Cybersecurity, Networking, Infrastructure Modernization, and Strategic IT Consulting for small and mid-sized businesses.