Senior IT Infrastructure Engineer

📋 Job Overview

Enterprise Electrical is seeking a Senior IT Infrastructure Engineer to provide technical ownership of the company’s Microsoft 365 environment, identity and access management, endpoint management, network infrastructure, cybersecurity controls, and data protection and recovery capabilities. As Enterprise Electrical continues to expand its internal IT department, this role will be responsible for designing, administering, documenting, and continuously improving secure, reliable technology infrastructure that supports corporate offices, company facilities, and active construction job sites.

🏢 About Enterprise Electrical

Enterprise Electrical is a company that provides electrical services and is expanding its internal IT department to better support its operations.

🎯 The Role

Working closely with the company’s Managed Service Provider (MSP), the Senior IT Infrastructure Engineer establishes infrastructure standards, guides security and operational improvements, coordinates technical projects, and ensures that systems align with business objectives, cybersecurity requirements, and operational needs. This role serves as the organization's internal infrastructure subject matter expert, focusing on architecture, security, resilience, governance, and long-term technology strategy while supporting escalated operational issues as needed.

✅ Key Responsibilities

• Design, administer, and maintain Microsoft 365 tenant architecture and configuration standards across Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and Intune.
• Manage identity lifecycle processes, including onboarding, role changes, offboarding, guest access, directory services, and hybrid synchronization where applicable.
• Administer least-privilege access models, privileged roles, service accounts, emergency access procedures, and MSP administrative access.
• Design, test, deploy, and maintain Conditional Access policies supporting multifactor authentication (MFA), device compliance, location-based policies, and risk-based access controls.
• Manage Microsoft Intune enrollment, Autopilot deployments, compliance policies, security baselines, application deployment, endpoint protection, encryption, and update management.
• Configure and maintain Microsoft Defender for Office 365 capabilities, including anti-phishing, Safe Links, Safe Attachments, quarantine management, and email security standards.
• Implement and support Microsoft Purview capabilities, including sensitivity labels, retention policies, data loss prevention (DLP), and information governance controls.
• Monitor Microsoft Secure Score, tenant health, and security recommendations while prioritizing remediation initiatives based on business risk.
• Develop and maintain security baselines across identities, endpoints, servers, networks, and email systems using industry best practices and security frameworks.
• Translate cyber insurance requirements and customer security obligations into enforceable technical controls.
• Administer endpoint protection, vulnerability remediation, patch management, and security monitoring processes.
• Coordinate security investigations, alert triage, containment activities, and remediation efforts with the MSP.
• Conduct recurring privileged access reviews and account audits for employees, vendors, guest users, service accounts, and MSP personnel.
• Maintain incident response documentation, technical runbooks, and recovery procedures.
• Participate in tabletop exercises, security reviews, and operational readiness assessments.
• Prepare security posture reports, technical evidence, client security questionnaires, and cyber insurance documentation.
• Configure and maintain firewalls, managed switches, wireless access points, routers, VLANs, segmentation policies, PoE systems, and secure remote access solutions.
• Support job-site connectivity solutions, including LTE/5G deployments, failover configurations, temporary offices, and construction trailers.
• Assess and optimize wireless coverage across offices, warehouses, fabrication facilities, and project locations.
• Administer cloud and on-premises server environments, virtualization platforms, directory services, DNS, DHCP, and related infrastructure services.
• Monitor server health, availability, capacity, patch compliance, and configuration standards.
• Coordinate infrastructure projects, maintenance windows, upgrades, and change management activities with internal stakeholders and the MSP.
• Administer backup and recovery solutions supporting servers, business-critical systems, and Microsoft 365 workloads within approved recovery scopes.
• Monitor backup performance and proactively address failures or protection gaps.
• Maintain backup security controls and recovery access protections.
• Perform and document scheduled restore testing and recovery validation exercises.
• Support disaster recovery planning, recovery time objectives (RTOs), recovery point objectives (RPOs), and business continuity initiatives.
• Assess and improve ticketing systems, workflows, and service management processes.
• Define support intake processes, escalation paths, support tiers, and service-level expectations with the MSP.
• Maintain infrastructure knowledge bases, support documentation, and operational runbooks.
• Serve as the primary internal technical liaison for the MSP.
• Coordinate escalated incidents, infrastructure support requests, and project execution activities.
• Lead recurring service reviews and evaluate MSP performance against agreed expectations.
• Review technical work, service delivery metrics, and project status updates.
• Maintain company ownership and visibility of infrastructure documentation, credentials, inventories, service histories, and configuration records.
• Recommend infrastructure improvements, technology investments, and operational enhancements to IT leadership.

🎁 Benefits

Competitive

🛂 Visa & Eligibility

Not specified