Infrastructure Engineer

Watsco, Inc.•Miami, FL

About The Position

Watsco Inc. is seeking an Infrastructure, Cloud & Identity Engineer to own the architecture, reliability, lifecycle, and modernization of its networks, servers, cloud platforms, Microsoft 365, identity, backup, and core infrastructure. The role combines hands-on operations with automation and project leadership while retaining internal ownership of partner-delivered solutions. The engineer provides Level 2/3 escalation and supports root-cause analysis, major incidents, vulnerability remediation, and short-term service-desk backup. The role may require scheduled after-hours work, incident-response participation, and local travel. Duties may evolve with business needs, and reasonable accommodations will be provided in accordance with applicable requirements.

Requirements

At least 5 years of progressive infrastructure, systems, cloud, network, or identity engineering experience, including production ownership and complex troubleshooting.
Strong experience with Active Directory, Entra ID, Microsoft 365, Windows Server, virtualization, DNS/DHCP, backup/recovery, TCP/IP, VLANs, routing, VPN, wireless, and cloud administration.
Experience planning and executing upgrades, migrations, change windows, testing, rollback, monitoring, documentation, and vendor escalations.
Proficiency with PowerShell or comparable automation.
Sound understanding of least privilege, hardening, logging, vulnerability remediation, and business continuity.
Ability to participate in scheduled after-hours maintenance and critical incident response.

Nice To Haves

Experience with Azure and AWS, hybrid identity, Intune, firewalls, infrastructure-as-code, multi-site networks, immutable backup, and regulated environments.
Relevant Microsoft, Azure, AWS, Cisco/Aruba/Fortinet, VMware/Hyper-V, or backup-platform certification.
Experience directing MSPs or professional-services partners and transferring solutions into operations.

Responsibilities

Administer Active Directory, Entra ID, synchronization and federation, SSPR, MFA, Conditional Access, privileged identity, service accounts, and automated joiner-mover-leaver workflows.
Operate Microsoft 365 tenant services, including Exchange Online, SharePoint, OneDrive, Teams, mail flow, shared resources, licensing, service health, retention configuration, and vendor cases.
Engineer and support physical and virtual servers, hypervisors, storage, file services, DNS, DHCP, certificates, monitoring, capacity, patching, upgrades, migrations, and secure decommissioning.
Own switching, routing, wireless, WAN, VPN, VLANs, IP addressing, network monitoring, configuration backups, firmware lifecycle, and carrier/vendor escalation; coordinate firewall controls with Security.
Administer Azure, AWS, and approved cloud resources, including subscriptions and accounts, networking, identity integration, tagging, monitoring, backup, cost optimization, logging, and infrastructure automation.
Operate backup and disaster-recovery technology; monitor jobs, protect immutable and offsite copies, test restoration and failover, maintain recovery runbooks, and remediate gaps.
Maintain infrastructure inventory, architecture diagrams, dependency maps, standards, lifecycle plans, support dates, and change/rollback documentation.
Automate repeatable administration using secure, version-controlled scripts or infrastructure-as-code, with peer review, monitoring, documentation, and rollback.
Lead network restructuring, server upgrades, identity modernization, cloud migrations, backup modernization, and reliability projects; manage technical partners and require design, as-built documentation, testing, and knowledge transfer.
Provide Level 2/3 escalation, root-cause analysis, major-incident support, vulnerability remediation, and short-term service-desk backup without becoming the routine frontline queue.
Participate in scheduled after-hours maintenance and critical incident response; local travel may be required.