Sr. IT Infrastructure Engineer

We are seeking a hands-on Senior Infrastructure Engineer to design, build, secure, and operate the systems our business runs on: network and firewalls, servers, Microsoft 365, AWS and Azure cloud environments, and the endpoints our employees use every day. This role sits where infrastructure and cybersecurity meet. You will harden what you build, keep it patched, and produce the documentation and change records that support our SOC 2 and insurance regulatory obligations. The right candidate owns systems end to end, from design through day-to-day operation, and can explain technical decisions clearly to engineers, business leaders, and auditors alike., Infrastructure and Network

• Design, implement, and maintain network infrastructure, including next-generation firewalls, switching, routing, VPN, DNS, and DHCP.
• Plan and deliver infrastructure projects end to end, from requirements and design through deployment, handoff, and documentation.
• Administer Windows Server and Linux systems, Active Directory, and hybrid identity with Microsoft Entra ID.
• Monitor performance and capacity across network, server, and cloud systems, and act on trends before they become outages.
• Maintain backup, recovery, and disaster recovery capabilities, and take part in periodic recovery testing.
• Serve as the escalation point for the help desk, resolve complex issues, and document resolutions in the knowledge base.
• Write and maintain IT procedures for the systems you support.

Cloud

• Build and support infrastructure in AWS and Microsoft Azure, including networking, compute, storage, and identity and access controls.
• Use infrastructure-as-code (Terraform) and Git-based source control (Bitbucket) so changes are repeatable, reviewed, and traceable.
• Partner with development and platform engineering teams to make sure applications are deployed securely and are supportable in production.

Endpoint and Patch Management

• Administer Microsoft Intune, including Windows Autopilot enrollment, configuration profiles, compliance policies, and application packaging and deployment.
• Own patch management for endpoints and servers in NinjaOne: patch policies, deployment rings, compliance reporting, and remediation of failed or missing updates.
• Deploy and maintain remote monitoring and management, remote access, and endpoint management tooling.

Cybersecurity

• Implement and maintain security controls across identity, endpoints, email, and network, including Microsoft Defender for Endpoint and Office 365, Conditional Access, MFA, and application allowlisting.
• Apply security baselines and hardening standards (such as CIS Benchmarks) to servers, endpoints, network devices, and cloud resources.
• Support vulnerability management: triage findings, prioritize remediation by risk, and track items to closure.
• Participate in security incident response, including containment, investigation, evidence collection, and post-incident review.
• Manage privileged and third-party vendor access to infrastructure, including periodic access reviews.

• Troubleshooting across network, server, identity, cloud, and endpoint layers, with a focus on finding root cause rather than only restoring service.
• A security-first approach that builds controls into designs instead of adding them afterward.
• Clear written and verbal communication with technical and non-technical audiences, including management and auditors.
• Ability to work independently, manage competing priorities, and carry work through to completion.
• Effective collaboration with cross-functional teams, vendors, and managed service providers.
• An automation mindset, using PowerShell and other scripting to remove repetitive manual work., * Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and experience
• At least 5 years of experience in IT infrastructure engineering, including network and systems administration
• Hands-on production experience administering Microsoft Intune and Microsoft Entra ID
• Experience with an enterprise patch management or RMM platform; NinjaOne strongly preferred
• Experience configuring and managing enterprise firewalls
• In-depth knowledge of network protocols and technologies, such as TCP/IP, DNS, DHCP, VLANs, routing, and VPN
• Working experience with AWS and/or Microsoft Azure infrastructure
• Experience administering and securing Microsoft 365, including Exchange Online and Microsoft Defender
• Scripting experience with PowerShell, * Experience in a regulated industry such as insurance, financial services, or healthcare, including supporting SOC 2 or regulatory examinations
• Experience with Terraform and Git-based workflows
• Experience configuring firewalls and network security in Azure
• Experience with Zero Trust network access (such as Microsoft Global Secure Access) and application allowlisting (such as ThreatLocker)
• Linux administration experience
• Experience working alongside a managed service provider
• Relevant certifications, such as Microsoft MD-102, AZ-104, or SC-300; AWS Certified SysOps Administrator or Solutions Architect; CompTIA Security+; or CISSP

This is a full-time position. Days and hours of work are Monday through Friday, 8:00 a.m. to 5:00 p.m. Additional hours as needed to complete work and ensure operations/business is not interrupted or slowed, including scheduled maintenance windows and security incident response., If you meet the above qualifications and are looking for an exciting opportunity to join a growing company, please submit your resume. We offer competitive salary, benefits, and career growth opportunities.