Infrastructure Engineer

Watsco•Coconut Grove, FL

About The Position

Watsco Inc. is seeking an Infrastructure, Cloud & Identity Engineer to own the architecture, reliability, lifecycle, and modernization of networks, servers, cloud platforms, Microsoft 365, identity, backup, and core infrastructure. The role combines hands-on operations with automation and project leadership while retaining internal ownership of partner-delivered solutions. The engineer administers identity and Microsoft 365 services; supports servers, virtualization, storage, and network infrastructure; administers Azure, AWS, and approved cloud resources; and operates backup and disaster-recovery technology. The role also maintains infrastructure documentation and lifecycle plans, automates repeatable administration, leads infrastructure projects, and provides Level 2/3 escalation and major-incident support. The position may require scheduled after-hours work, participation in incident response, and local travel. Duties may evolve with business needs. Reasonable accommodations will be provided in accordance with applicable requirements.

Requirements

5+ years of progressive infrastructure, systems, cloud, network, or identity engineering experience, including production ownership and complex troubleshooting.
Strong experience with Active Directory, Entra ID, Microsoft 365, Windows Server, virtualization, DNS/DHCP, backup/recovery, TCP/IP, VLANs, routing, VPN, wireless, and cloud administration.
Experience planning and executing upgrades, migrations, change windows, testing, rollback, monitoring, documentation, and vendor escalations.
Proficiency with PowerShell or comparable automation.
Sound understanding of least privilege, hardening, logging, vulnerability remediation, and business continuity.
Ability to participate in scheduled after-hours maintenance and critical incident response.

Nice To Haves

Experience with Azure and AWS, hybrid identity, Intune, firewalls, infrastructure-as-code, multi-site networks, immutable backup, and regulated environments.
Relevant Microsoft, Azure, AWS, Cisco/Aruba/Fortinet, VMware/Hyper-V, or backup-platform certification.
Experience directing MSPs or professional-services partners and transferring solutions into operations.

Responsibilities

Administer Active Directory, Entra ID, synchronization and federation, SSPR, MFA, Conditional Access, privileged identity, service accounts, and automated joiner-mover-leaver workflows.
Operate Microsoft 365 tenant services, including Exchange Online, SharePoint, OneDrive, Teams, mail flow, shared resources, licensing, service health, retention configuration, and vendor cases.
Engineer and support physical and virtual servers, hypervisors, storage, file services, DNS, DHCP, certificates, monitoring, capacity, patching, upgrades, migrations, and secure decommissioning.
Own switching, routing, wireless, WAN, VPN, VLANs, IP addressing, network monitoring, configuration backups, firmware lifecycle, and carrier/vendor escalation; coordinate firewall controls with Security.
Administer Azure, AWS, and approved cloud resources, including subscriptions/accounts, networking, identity integration, tagging, monitoring, backup, cost optimization, logging, and infrastructure automation.
Operate backup and disaster-recovery technology; monitor jobs, protect immutable/offsite copies, test restoration and failover, maintain recovery runbooks, and remediate gaps.
Maintain infrastructure inventory, architecture diagrams, dependency maps, standards, lifecycle plans, support dates, and change/rollback documentation.
Automate repeatable administration using secure, version-controlled scripts or infrastructure-as-code with peer review, monitoring, documentation, and rollback.
Lead network restructuring, server upgrades, identity modernization, cloud migrations, backup modernization, and reliability projects; manage technical partners and require design, as-built documentation, testing, and knowledge transfer.
Provide Level 2/3 escalation, root-cause analysis, major-incident support, vulnerability remediation, and short-term service-desk backup without becoming the routine frontline queue.