> Markdown version of [/jobs/ext/4657547-senior-microsoft-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/4657547-senior-microsoft-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Microsoft Infrastructure Engineer - **Company:** ROBERT FERRILLI, LLC - **Location:** Beverly Hills, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Domain Controllers, Microsoft Azure, Cloud Computing, Dynamic Host Configuration Protocol, Disaster Recovery, Domain Name System (DNS), Infrastructure as a Service (IaaS), Identity and Access Management, Virtual Private Networks (VPN), Microsoft Software, Networking Basics, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Runbook, Azure Automation, Computer Network Operations, Azure Powershell, Microsoft InTune, National Institute of Standards and Technology Cybersecurity Framework, Infrastructure Automation Frameworks, Banner Advertisement, Bicep, CIS Benchmarks, Terraform, User Administration - **Published:** November 10, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-microsoft-infrastructure-engineer-beverly-hills-ca--7d707216-0298-4135-a5eb-9159b0cba619 ## About the Role Microsoft Infrastructure, Microsoft Product Family, Professional Services, Technical Support, Higher Education, Cloud Computing, Network Operations Center, Administrative Skills, Microsoft Active Directory, Microsoft Infrastructure, * 8+ years of Microsoft infrastructure engineering, with at least 5 years as a primary administrator or architect of enterprise on-premises Active Directory. * 3+ years administering production Azure environments. * Expert knowledge of AD DS, Group Policy, DNS, AD replication, and trust relationships. * Hands-on experience with Entra Connect or Cloud Sync and hybrid identity design. * Proven ability to assess unfamiliar client environments quickly: inventory AD, Entra ID, and Azure configurations, identify risks and gaps against best practices, and turn findings into prioritized, actionable recommendations. * Strong PowerShell scripting skills for AD and Azure automation. * Working knowledge of Windows Server (2016-2025), networking fundamentals, and identity security best practices. * Proven ability to document environments clearly and communicate with both technical staff and executives. * Bachelor's degree in IT or a related field, or equivalent professional experience., * Experience in higher education IT or as a consultant serving multiple clients. * Experience integrating higher education ERPs, such as Ellucian Colleague and Banner, with identity and access management platforms such as EUP and RapidIdentity for automated account provisioning and lifecycle management. * Experience with AD forest migrations or tenant-to-tenant consolidations (for example, Quest or ADMT tooling). * Familiarity with Intune, Microsoft 365 administration, and Defender for Identity. * Exposure to security frameworks such as NIST CSF, CIS Controls, or GLBA requirements for institutions. ## Description The Senior Microsoft Infrastructure Engineer is Ferrilli's lead technical resource for Active Directory and hybrid identity, with deep hands-on Azure administration skills. You will assess, remediate, and modernize on-premises AD environments, then extend them securely into Microsoft Entra ID and Azure. This is a client-facing consulting role. You will work directly with campus IT leaders, deliver projects end to end, and serve as the escalation point for complex Microsoft infrastructure issues across multiple institutions. Key responsibilities On-premises Active Directory * Design, administer, and troubleshoot multi-site AD DS environments, including forests, domains, trusts, sites and services, and replication. * Lead AD health assessments, cleanup, and consolidation, including stale objects, OU redesign, and domain or forest migrations. * Manage Group Policy architecture, DNS, DHCP, and AD Certificate Services (PKI). * Harden AD using tiered administration, least-privilege delegation, LAPS, and remediation of findings from tools such as PingCastle or Purple Knight. * Plan and execute domain controller upgrades, functional level raises, and AD backup and forest recovery procedures. Hybrid identity * Implement and maintain Microsoft Entra Connect / Cloud Sync, including password hash sync, pass-through authentication, and federation (AD FS) decisions. * Configure Conditional Access, MFA, SSPR, and Privileged Identity Management. * Integrate campus identity sources (for example, ERP-driven provisioning) with AD and Entra ID. Azure administration * Build and govern Azure environments: subscriptions, management groups, RBAC, Azure Policy, and landing zones. * Administer IaaS workloads, virtual networks, VPN/ExpressRoute connectivity, storage, and Azure Backup and Site Recovery. * Monitor cost, performance, and security with Azure Monitor, Defender for Cloud, and Cost Management. * Automate administration with PowerShell, Azure CLI, and infrastructure as code (Bicep, ARM, or Terraform). Client delivery and leadership * Scope work, produce assessments, runbooks, and architecture documentation, and present findings to CIOs and IT staff. * Mentor junior engineers and contribute to Ferrilli's ETS service offerings and proposal responses.