> Markdown version of [/jobs/ext/73592-principle-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/73592-principle-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principle Infrastructure Engineer - **Company:** Paradigm - **Location:** Virginia Beach, VA, United States - **Experience:** Expert - **Salary:** $135,000.0 - $165,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Access Network, Active Directory, Domain Controllers, Application Layers, Microsoft Azure, Backup Devices, Business Software, Cloud Computing, Cloud Engineering, Collaborative Software, CompTIA Security+, Cyber Security, Information Systems, Databases, Continuous Integration, Data Centers, Dynamic Host Configuration Protocol, Network Address Translation, Disaster Recovery, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Domain Name System (DNS), Multi-Factor Authentication, Microsoft Dynamics NAV, VMware ESX Servers, Github, Monitoring of Systems, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Linux System Administration, Microsoft Dynamics, Microsoft SQL Server, Windows Servers, Networking Basics, Routing, Network Segmentation, Network Virtualization, Performance Tuning, Windows PowerShell, Release Management, Azure Active Directory, Ansible, Server Administration, Microsoft SharePoint, Software Engineering, TCP/IP, Virtual Local Area Networks, Virtualization Technology, VMware VSphere, SSL Certificate Management, Network Switches, Information Security Management System, Load Balancing, IT Architecture, Software Troubleshooting, Technical Debt, Firewalls (Computer Science), Sender Policy Framework (SPF), Infrastructure Automation Frameworks, Information Technology, SolarWinds (Software), Microsoft Business Central, Palo Alto Networks, Vcenter, Patch Management, Cloudflare, Tools for Reporting, Sendgrid, Hardware Infrastructure, 3-tier Architectures, Firewall Services Module, Veeam, Dropbox, Terraform, Dynatrace, Vmware - **Published:** May 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e26a94c5a6adceae ## About the Role Do you have experience in Windows?, * Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or related field; equivalent professional experience may be considered. * 10+ years of hands-on experience across infrastructure engineering, systems administration, network engineering, cloud engineering, and/or security engineering. * Demonstrated ability to independently diagnose and resolve complex multi-layer infrastructure problems across network, security, virtualization, identity, cloud, and application layers. * Deep production experience with VMware vSphere, including ESXi, vCenter, vMotion, HA/DRS, storage, distributed networking, lifecycle management, and performance troubleshooting. * Strong experience with Palo Alto Networks firewalls, including policy design, NAT, threat prevention, VPN/GlobalProtect, segmentation, and Panorama or equivalent management. * Deep knowledge of Active Directory architecture and administration, including multi-forest environments, Group Policy, replication, DNS/DHCP, trusts, and hybrid identity with Microsoft Entra ID. * Hands-on experience with Microsoft Azure infrastructure, hybrid architectures, Microsoft 365 administration, Exchange Online, Teams, SharePoint, conditional access, and MFA. * Experience with backup, disaster recovery, and restore validation using Veeam or similar enterprise backup platforms. * Strong understanding of networking fundamentals, including TCP/IP, VLANs, routing, switching, VPNs, load balancers, DNS, certificates, CDN/edge services, and email authentication such as SPF, DKIM, and DMARC. * Experience supporting Windows Server and Linux environments, patch management, system hardening, monitoring, and operational documentation. * Working knowledge of compliance and security frameworks such as SOC2, NIST, and FedRAMP, especially as they relate to infrastructure controls and cloud readiness. * Strong written and verbal communication skills, including the ability to produce clear documentation, explain technical risk, and communicate effectively with technical teams, business stakeholders, and executive leadership. Preferred Experience: * Direct experience preparing environments for FedRAMP authorization, including control implementation, system security plan support, POA&M remediation, and 3PAO coordination. * Experience planning or executing cloud migrations from on-premises VMware environments to Azure in regulated or government-adjacent environments. * Experience administering Microsoft Dynamics Business Central and/or Dynamics NAV, including on-premises deployments and SQL Server coordination. * Experience with Dynatrace, SolarWinds, Netwrix, Cloudflare, SendGrid, CodeTwo, GlobalSign, LastPass, Jscape, Files.com, and similar infrastructure tools. * Experience with CI/CD pipelines, GitHub, PowerShell, Python, Terraform, Ansible, or other automation and infrastructure-as-code tools. * Certifications such as VMware VCP-DCV, Palo Alto PCNSA/PCNSE, Microsoft Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), Microsoft 365 Administrator, CompTIA Security+/CASP+, RHCSA/RHCE, or similar. * Experience supporting education technology, credentialing platforms, government systems, apostille processes, vital records, StateRAMP, CJIS, FERPA, CCPA, GDPR, or similar privacy/compliance requirements. Physical Requirements: * This is primarily an office-based job that may require sitting for extended periods of time working on a computer. * Must be able to lift up to 25 pounds at times and occasionally assist with server, network, or office equipment movement. * Good vision, with or without corrective lenses, to sustain adequate visual focus over a period of time. * Fine motor skills, including full use and muscle control required to make precise hand movements for tasks requiring hand-eye coordination, muscle coordination, and dexterity. * May occasionally require work outside normal business hours to support maintenance windows, critical incidents, system upgrades, or disaster recovery testing., How many years of hands-on experience do you have between infrastructure engineering, systems administration, network engineering, cloud engineering, and/or security engineering? * How many years' experience do you have with Palo Alto Network firewalls? * How many years' experience do you have of Active Directory architecture and administration? * How many years' of hands-on experience do you have with Microsoft Azure Infrastructure?, * How many years' working knowledge do you have of compliance and security frameworks such as SOC2, NIST, and FedRAMP? ## Description We are seeking a hands-on Principal Infrastructure Engineer to serve as the senior technical authority for infrastructure across Paradigm and @Gov. Reporting to the Chief Information Officer, this senior individual contributor role will own the most complex infrastructure engineering, troubleshooting, assessment, and architecture work across two segmented environments. The successful candidate will be the tier 3 escalation point for complex issues spanning network, security, virtualization, identity, cloud, ERP, backup, monitoring, and application infrastructure. This role is ideal for an active practitioner who can assess inherited infrastructure, identify technical debt and security gaps, design a scalable and resilient future state, and execute the roadmap needed to support business growth, FedRAMP readiness, and future cloud migration. This is not a people-management position; however, the role is expected to mentor administrators, strengthen operational processes, and improve documentation and knowledge transfer across the IT team. This is a full-time, exempt position based in Virginia Beach, Virginia, with a hybrid work arrangement., Infrastructure Architecture & Strategy * Assess the current Paradigm and @Gov infrastructure environments, including network segmentation, firewall policy, Active Directory forests, VMware vSphere, Azure, Microsoft 365, Dynamics, backup, monitoring, DNS/CDN, and certificate management. * Design and maintain secure, scalable, and resilient infrastructure architectures that support credentialing, apostille, vital records, and government services platforms. * Create prioritized remediation plans for misconfigurations, single points of failure, capacity constraints, technical debt, and operational risk. * Develop target-state architecture and transition plans for Paradigm's hybrid environment and @Gov's post-FedRAMP cloud migration path. * Recommend improvements to tooling, automation, vendor relationships, licensing, and infrastructure processes where they improve maturity, resilience, security, or cost efficiency. Tier 3 Escalation & Complex Problem Resolution * Serve as the senior escalation resource for complex incidents that span multiple infrastructure domains or exceed the capabilities of day-to-day administration. * Diagnose and resolve production issues end-to-end across Palo Alto firewalls, VMware vSphere, Active Directory and Entra ID, Azure services, Dynamics environments, email deliverability, backups, monitoring, and application infrastructure. * Lead high-severity incident response, coordinate with infrastructure, development, QA, business stakeholders, and vendors, and drive root-cause analysis and post-incident remediation. * Build and maintain runbooks, escalation procedures, architecture diagrams, and post-mortem templates that improve response consistency and team capability. Network, Security & Identity * Administer and optimize Palo Alto next-generation firewall configurations, including security policies, NAT rules, threat prevention, URL filtering, GlobalProtect VPN, and inter-network access controls. * Manage network switching, routing, VLANs, VPNs, load balancers, DNS, DHCP, and related physical and virtual network infrastructure across segmented environments. * Serve as a senior authority for separate Active Directory forests and domains, including domain controllers, replication, Group Policy, DNS/DHCP, OU design, trusts, and hybrid identity patterns. * Manage Paradigm's Azure/Entra ID hybrid identity, Microsoft 365 administration, conditional access, SSO, MFA, privileged access controls, and user lifecycle processes. * Harden infrastructure in alignment with SOC2, NIST, government security requirements, and FedRAMP readiness expectations for @Gov. Virtualization, Cloud & Systems Operations * Administer and improve VMware vSphere environments, including ESXi, vCenter, HA/DRS, vMotion, resource management, VM networking, templates, upgrades, storage, and performance tuning. * Administer Azure infrastructure for Paradigm, including compute, networking, storage, subscriptions, identity services, monitoring, and hybrid connectivity with on-premises systems. * Plan @Gov's future migration from fully on-premises infrastructure to Azure once FedRAMP certification objectives are met. * Implement automation and infrastructure-as-code practices using tools such as Terraform, Ansible, PowerShell, or similar platforms. * Maintain server hardware, operating systems, patching, rack/data-center coordination, UPS, and supporting infrastructure needed for reliable operations. Business Applications, Monitoring & Disaster Recovery * Support infrastructure for Microsoft Dynamics Business Central and NAV environments, including server administration, SQL Server coordination, performance, availability, backups, and change windows. * Manage and improve monitoring and observability using tools such as Dynatrace, SolarWinds, Netwrix, and related alerting/reporting platforms. * Manage Veeam backup and recovery capabilities, including job configuration, retention, restore testing, disaster recovery documentation, and recoverability validation for critical systems. * Administer supporting platforms such as Cloudflare, GlobalSign certificates, SendGrid, CodeTwo, Jscape, Files.com, Dropbox, LastPass, and collaboration tools as needed. * Map critical workflows and dataflows across edge, firewall, application, database, ERP, identity, and cloud layers to identify dependencies, bottlenecks, and operational risks. Collaboration, Documentation & Mentorship * Partner with software engineering, QA, finance, operations, product, and executive stakeholders to align infrastructure decisions with business needs and customer commitments. * Participate in change control, release planning, audit support, and compliance documentation with attention to cross-system and cross-network impacts. * Mentor systems administrators through pairing, documentation, architecture reviews, and hands-on knowledge transfer without assuming direct people-management responsibilities. * Identify team skill gaps and recommend training, certifications, and process improvements that raise the technical capability of the IT organization., How many years' experience do you have supporting Windows Server and Linux environments? ## Related Videos - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Generating code with Angular schematics](https://www.wearedevelopers.com/videos/129-generating-code-with-angular-schematics) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [How to Answer the Interview Question: “Why Do You Want to Be a Software Engineer?”](https://www.wearedevelopers.com/magazine/392-how-to-answer-the-interview-question-why-do-you-want-to-be-a-software-engineer) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)