Key Responsibilities
Design, implement, and maintain critical infrastructure, security platforms, and enterprise services across cloud and on-premises environments. Convert approved requirements and architecture standards into secure, reliable, and supportable production solutions.
Take end-to-end technical ownership for assigned platforms and services, including configuration standards, documentation, monitoring, patching, upgrades, capacity planning, vendor coordination, incident support, lifecycle planning, and continuous improvement.
Increase delivery capacity across infrastructure and security initiatives by leading or executing technical work packages, resolving dependencies, coordinating testing and change activities, and completing operational handover with service owners and support teams.
Accelerate modernization and reduce technical debt by identifying aging, unsupported, overly complex, or manually administered technologies; developing practical remediation or replacement plans; and implementing standardized, automated, and maintainable solutions.
Reduce lifecycle-management and remediation backlogs by assessing platform health, prioritizing work based on operational and security risk, coordinating maintenance windows, and completing upgrades, patching, configuration remediation, and technology refresh activities.
Improve operational resilience by engineering platforms for availability, recoverability, scalability, and secure operation. Establish monitoring, alerting, backup, recovery, and failover requirements; validate procedures through testing; and address identified gaps.
Automate repeatable infrastructure and operational tasks using scripting, configuration management, infrastructure as code, and orchestration tools. Maintain version-controlled code, technical standards, reusable modules, and tested deployment and rollback procedures.
Troubleshoot complex incidents and recurring service issues using logs, metrics, traces, platform telemetry, and root-cause analysis. Implement corrective actions, document known errors and recovery procedures, and reduce repeated manual intervention.
Engineer and operate services in alignment with approved security requirements. Apply least privilege, secure configuration, secrets and certificate management, vulnerability remediation, logging, segmentation, and access-control standards; identify and escalate exceptions or material risks.
Improve team coverage and reduce key-person dependency by creating current architecture diagrams, build standards, inventories, operating procedures, support runbooks, and knowledge articles. Crosstrain colleagues and ensure critical services have effective primary and secondary support coverage.
Partner with Architecture, Security, Service Management, application teams, and business stakeholders to evaluate technical options, explain tradeoffs, sequence work, and ensure solutions meet operational, security, compliance, and business requirements.
Provide technical leadership during projects and operational changes by reviewing designs, identifying implementation risks, mentoring engineers, and promoting consistent engineering, documentation, testing, and change-management practices.
Required Skills & Experience
Systems engineering experience: 10+ years of progressively responsible experience across systems engineering, infrastructure engineering, cloud operations, enterprise platforms, or security infrastructure, with demonstrated ownership of production services and delivery of maintainable technical solutions.
Platform ownership: Demonstrated experience assuming end-to-end technical ownership for critical services, including design, implementation, operational support, monitoring, lifecycle management, documentation, risk remediation, vendor engagement, and continuous improvement.
Cloud and on-premises infrastructure: Strong hands-on experience with enterprise cloud and data-center technologies, including compute, storage, virtualization, networking, DNS, load balancing, backup, identity integration, and high-availability design. Practical experience with at least one major cloud platform.
Microsoft enterprise technologies: Strong working knowledge of Windows Server, Active Directory, Microsoft Entra ID, Microsoft 365, endpoint and server management, PowerShell, certificates, authentication, and related enterprise administration and troubleshooting practices.
Linux and heterogeneous environments: Working knowledge of Linux administration and the ability to support and troubleshoot services that span multiple operating systems, network zones, cloud services, and third-party platforms.
Automation and infrastructure as code: Strong scripting and automation skills using PowerShell, Python, Bash, or comparable languages. Experience with configuration management, infrastructure as code, APIs, source control, automated testing, and repeatable deployment practices.
Security engineering fundamentals: Practical experience implementing secure configuration, least privilege, privileged access controls, vulnerability and patch remediation, secrets and certificate management, audit logging, network security controls, and security monitoring requirements.
Lifecycle and technical-debt management: Experience assessing platform health, supportability, dependencies, and end-of-life risk; building remediation plans; and executing upgrades, migrations, consolidation, decommissioning, and backlog-reduction work without disrupting critical services.
Operational resilience: Experience designing and operating highly available services, defining service dependencies and recovery requirements, implementing monitoring and alerting, and validating backup, recovery, failover, and continuity procedures.
Production operations and troubleshooting: Advanced ability to diagnose complex, multi-system issues using logs, metrics, traces, packet or protocol analysis, and structured root-cause analysis. Experience with incident, problem, change, release, and configuration management processes.
Documentation and knowledge transfer: Ability to create accurate architecture diagrams, technical standards, build documentation, inventories, runbooks, recovery procedures, and knowledge articles, and to transfer operational knowledge effectively across the team.
Project delivery and collaboration: Ability to translate business, architecture, security, and operational requirements into practical engineering plans; manage dependencies and implementation risks; and work effectively across Infrastructure, Security, Architecture, Service Management, application teams, vendors, and business stakeholders.
Engineering judgment and independence: Ability to work independently within approved architecture and governance, prioritize competing operational and project demands, make sound technical decisions, escalate material risks, and select the simplest supportable solution that meets the requirement.
Preferred / Beneficial Experience
Experience with Microsoft Azure and related identity, networking, monitoring, governance, and security services; relevant experience with AWS or another major cloud platform is also beneficial.
Experience with enterprise security and access platforms such as endpoint detection and response, secure access service edge, vulnerability or exposure management, privileged access management, identity governance, certificate management, or centralized logging and monitoring.
Experience with virtualization, containers, Kubernetes, serverless platforms, configuration-management tools, and infrastructure-as-code technologies such as Terraform, Bicep, or Ansible.
Experience leading platform modernization, cloud migration, data-center consolidation, operating-system or application upgrades, technology decommissioning, or large-scale remediation programs.
Experience improving service resilience through monitoring modernization, backup and recovery improvements, disaster-recovery testing, dependency mapping, capacity planning, and elimination of single points of failure.
Relevant Microsoft, Azure, AWS, Linux, networking, security, IT service management, automation, or DevOps certifications, or equivalent demonstrated practical experience.
