Senior IT Infrastructure Engineer

Senior IT Infrastructure Engineer

About the Role

Enterprise Electrical is seeking a Senior IT Infrastructure Engineer to provide technical ownership of the company’s Microsoft 365 environment, identity and access management, endpoint management, network infrastructure, cybersecurity controls, and data protection and recovery capabilities. As Enterprise Electrical continues to expand its internal IT department, this role will be responsible for designing, administering, documenting, and continuously improving secure, reliable technology infrastructure that supports corporate offices, company facilities, and active construction job sites.

Working closely with the company’s Managed Service Provider (MSP), the Senior IT Infrastructure Engineer establishes infrastructure standards, guides security and operational improvements, coordinates technical projects, and ensures that systems align with business objectives, cybersecurity requirements, and operational needs. This role serves as the organization's internal infrastructure subject matter expert, focusing on architecture, security, resilience, governance, and long-term technology strategy while supporting escalated operational issues as needed.

Key Responsibilities

Microsoft 365, Identity & Endpoint Management

• Design, administer, and maintain Microsoft 365 tenant architecture and configuration standards across Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and Intune.
• Manage identity lifecycle processes, including onboarding, role changes, offboarding, guest access, directory services, and hybrid synchronization where applicable.
• Administer least-privilege access models, privileged roles, service accounts, emergency access procedures, and MSP administrative access.
• Design, test, deploy, and maintain Conditional Access policies supporting multifactor authentication (MFA), device compliance, location-based policies, and risk-based access controls.
• Manage Microsoft Intune enrollment, Autopilot deployments, compliance policies, security baselines, application deployment, endpoint protection, encryption, and update management.
• Configure and maintain Microsoft Defender for Office 365 capabilities, including anti-phishing, Safe Links, Safe Attachments, quarantine management, and email security standards.
• Implement and support Microsoft Purview capabilities, including sensitivity labels, retention policies, data loss prevention (DLP), and information governance controls.
• Monitor Microsoft Secure Score, tenant health, and security recommendations while prioritizing remediation initiatives based on business risk.

Security & Operational Resilience

• Develop and maintain security baselines across identities, endpoints, servers, networks, and email systems using industry best practices and security frameworks.
• Translate cyber insurance requirements and customer security obligations into enforceable technical controls.
• Administer endpoint protection, vulnerability remediation, patch management, and security monitoring processes.
• Coordinate security investigations, alert triage, containment activities, and remediation efforts with the MSP.
• Conduct recurring privileged access reviews and account audits for employees, vendors, guest users, service accounts, and MSP personnel.
• Maintain incident response documentation, technical runbooks, and recovery procedures.
• Participate in tabletop exercises, security reviews, and operational readiness assessments.
• Prepare security posture reports, technical evidence, client security questionnaires, and cyber insurance documentation.

Network & Server Infrastructure

• Configure and maintain firewalls, managed switches, wireless access points, routers, VLANs, segmentation policies, PoE systems, and secure remote access solutions.
• Support job-site connectivity solutions, including LTE/5G deployments, failover configurations, temporary offices, and construction trailers.
• Assess and optimize wireless coverage across offices, warehouses, fabrication facilities, and project locations.
• Administer cloud and on-premises server environments, virtualization platforms, directory services, DNS, DHCP, and related infrastructure services.
• Monitor server health, availability, capacity, patch compliance, and configuration standards.
• Coordinate infrastructure projects, maintenance windows, upgrades, and change management activities with internal stakeholders and the MSP.

Backup, Recovery & Business Continuity

• Administer backup and recovery solutions supporting servers, business-critical systems, and Microsoft 365 workloads within approved recovery scopes.
• Monitor backup performance and proactively address failures or protection gaps.
• Maintain backup security controls and recovery access protections.
• Perform and document scheduled restore testing and recovery validation exercises.
• Support disaster recovery planning, recovery time objectives (RTOs), recovery point objectives (RPOs), and business continuity initiatives.

Service Delivery & MSP Coordination

• Assess and improve ticketing systems, workflows, and service management processes.
• Define support intake processes, escalation paths, support tiers, and service-level expectations with the MSP.
• Maintain infrastructure knowledge bases, support documentation, and operational runbooks.
• Serve as the primary internal technical liaison for the MSP.
• Coordinate escalated incidents, infrastructure support requests, and project execution activities.
• Lead recurring service reviews and evaluate MSP performance against agreed expectations.
• Review technical work, service delivery metrics, and project status updates.
• Maintain company ownership and visibility of infrastructure documentation, credentials, inventories, service histories, and configuration records.
• Recommend infrastructure improvements, technology investments, and operational enhancements to IT leadership.

Documentation & Standards

• Maintain accurate inventories of infrastructure assets, software licensing, network circuits, privileged accounts, and key technical dependencies.
• Develop and maintain network diagrams, configuration standards, workstation build documentation, operational procedures, change records, and technical runbooks.
• Utilize PowerShell and automation tools when appropriate to improve operational efficiency and consistency.
• Perform additional duties as assigned in support of departmental and business objectives.

Required Qualifications

Education

• Associate’s or Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field preferred.
• Equivalent combinations of education, technical training, certifications, and demonstrated experience may be considered.

Experience

• Minimum of four (4) years of progressively responsible IT infrastructure administration experience.
• Typical successful candidate profile includes four to seven (4-7) years of infrastructure engineering experience.
• Strong Microsoft 365 administration experience, including tenant-level configuration, security, and governance.
• Hands-on experience administering Microsoft Entra ID, Conditional Access policies, and identity lifecycle management.
• Experience managing Microsoft Intune device compliance, endpoint security, and configuration policies.
• Experience with managed switches, firewalls, VLANs, segmentation, routing, and enterprise networking.
• Experience administering backup and disaster recovery solutions, including documented restore testing.
• Experience coordinating and managing MSP relationships, escalations, and operational performance.
• Demonstrated ability to assess, improve, and document enterprise infrastructure environments.
• Experience supporting multi-site operations preferred.
• Experience with tenant migrations, consolidations, ticketing implementations, cyber insurance audits, or distributed workforce environments preferred.

Knowledge, Skills & Abilities

• Strong knowledge of Microsoft 365, Microsoft Entra ID, identity governance, privileged access management, and Conditional Access.
• Advanced knowledge of endpoint management, endpoint security, patch management, and infrastructure administration.
• Strong understanding of TCP/IP networking, routing, switching, DNS, DHCP, VLANs, wireless networking, firewall administration, and secure remote access.
• Ability to architect secure, scalable, and highly available infrastructure solutions.
• Ability to evaluate technical dependencies, business risks, and operational impacts.
• Strong troubleshooting and root-cause analysis capabilities.
• Exceptional organizational, analytical, and documentation skills.
• Effective communication skills with the ability to present technical concepts to non-technical stakeholders.
• Ability to manage multiple priorities in a fast-paced and growing organization.
• Commitment to safeguarding confidential and sensitive information.
• Ability to adapt quickly to changing business and technology requirements.

Preferred Qualifications

• Microsoft 365 Administrator certifications.
• Microsoft Azure / Entra Administrator certifications.
• Microsoft Identity and Access Management certifications.
• Microsoft Security Operations certifications.
• Microsoft Defender for Endpoint experience.
• Microsoft Defender for Office 365 experience.
• Microsoft Purview administration experience.
• Experience with CIS Controls, NIST Cybersecurity Framework (CSF), or similar security frameworks.
• PowerShell scripting and automation experience.
• Experience supporting construction, field services, manufacturing, or distributed workforce environments.
• Familiarity with construction software platforms such as:
• Vista
• Sage 300 CRE
• Foundation
• Procore
• Accubid

Leadership & Team Collaboration

• Partner with IT leadership to develop and implement infrastructure strategies and operational standards.
• Serve as the primary internal technical counterpart to the company’s Managed Service Provider (MSP).
• Coordinate infrastructure projects and change management activities across business units.
• Lead infrastructure planning, technical reviews, and operational improvement initiatives.
• Collaborate with department leaders, business stakeholders, vendors, and project teams.
• Provide technical guidance and direction to MSP personnel and project resources within delegated authority.
• This position has no direct employee supervisory responsibilities.

Work Environment

Work Environment

• Primarily based onsite in the Houston office.
• Occasional travel to company locations, warehouses, fabrication facilities, and active construction job sites.
• Frequent interaction with technology equipment, infrastructure systems, vendors, and business stakeholders.
• Jobsite visits may involve noise, dust, uneven terrain, varying temperatures, and active construction operations.
• Compliance with all company safety policies and PPE requirements is required during field visits.

Physical Requirements

• Prolonged periods of computer and workstation use.
• Ability to inspect, configure, troubleshoot, and connect network and IT equipment.
• Ability to move throughout office environments, facilities, and construction sites.
• Ability to occasionally lift, move, or install computers, networking equipment, and related devices.
• Ability to travel as required to support business and infrastructure operations.
• Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

Schedule & Travel

• Full-time position.
• Primarily works standard business hours onsite.
• Occasional evening, weekend, and after-hours maintenance activities may be required.
• Participation in infrastructure upgrades, project deployments, and critical incident response may require schedule flexibility.
• Travel may be required based on operational and project needs.
• Additional hours may be necessary to support outages, projects, maintenance activities, and business priorities.

Equipment & Technology

• Desktop and laptop computers.
• Mobile devices and tablets.
• Microsoft 365 Administration Center.
• Microsoft Entra ID.
• Microsoft Intune.
• Microsoft Defender security platforms.
• Microsoft Purview.
• Server and virtualization platforms.
• Managed switches, firewalls, wireless access points, routers, cellular gateways, and UPS systems.
• Backup and recovery platforms.
• Remote administration and monitoring tools.
• Ticketing and service management platforms.
• Documentation and knowledge management systems.
• Secure password and credential management tools.
• Standard office equipment and approved network testing tools.
• Required personal protective equipment (PPE) when visiting jobsites.

What We Value

At Enterprise Electrical, we are committed to:

• Safety First, Safety Always
• Committed to Excellence
• Plan It, Do It, Own It
• Learn It, Know It, Teach It
• One Team, One Goal
• Positive Attitude Required

Our Core Purpose: Building Relationships to Enrich Lives

Apply Today

If you are an experienced infrastructure professional passionate about cybersecurity, Microsoft technologies, enterprise networking, and operational excellence, we encourage you to apply for the Senior IT Infrastructure Engineer position at Enterprise Electrical. This role offers the opportunity to shape the future of the company's internal IT operations, strengthen cybersecurity posture, build scalable infrastructure, and support a growing organization operating across corporate offices, facilities, and active construction projects.