Infrastructure Engineer

Nexus Health Systems Ltd•Houston, TX

About The Position

The Infrastructure Engineer is responsible for designing, implementing, and maintaining secure, reliable, scalable, and high-performing infrastructure solutions across on-premises and cloud environments. This role combines traditional infrastructure management with modern DevOps practices, focusing on automation, infrastructure-as-code, and cloud-native technologies. The ideal candidate will drive automation initiatives, optimize system reliability, and ensure robust disaster recovery and business continuity processes while maintaining compliance with healthcare regulations (HIPAA, JCAHO).

Requirements

Associate’s degree in computer science, Information Technology, or related field (or equivalent relevant experience).
10+ years of experience in infrastructure engineering or systems engineering, including cloud and on-premises environments.
7+ years of hands-on experience with Azure cloud services (compute, storage, networking, identity).
10+ years of experience with virtualization technologies (VMware vSphere and/or Hyper-V).
10+ years of experience working with Windows Server and Linux operating systems.
7+ years of experience with scripting and automation tools (PowerShell, Python) to improve infrastructure performance.
Experience with infrastructure-as-code tools (Terraform, Ansible, ARM templates preferred).
7+ years of experience with Active Directory, Azure Active Directory/Entra ID, and hybrid identity management.
7+ years of experience troubleshooting complex infrastructure issues and delivering enterprise-level solutions.

Nice To Haves

Healthcare IT Systems Experience: Familiarity with healthcare modalities including EMR systems (Meditech), lab systems (Labdaq), pharmacy dispensing systems (Pyxis), nurse call systems, radiology (PACS/RIS), telemetry, and patient monitoring systems (Fukuda). Understanding of medical device network segmentation and clinical workflow integration.
Advanced Azure Services: Experience with Azure Virtual Desktop (AVD), Azure Site Recovery, Azure Backup, Azure Policy, and Azure Arc for hybrid server management. Knowledge of Azure landing zones and enterprise-scale architecture patterns.
Container & Orchestration Technologies: Hands-on experience with Docker, Kubernetes, or Azure Container Instances (ACI). Understanding of container-based workloads and microservices architecture.
Advanced Monitoring & Observability: Experience designing multi-tenant observability solutions with platforms such as Prometheus, Grafana, Splunk, or Datadog. Knowledge of correlation engines for RCA, forecasting, and predictive alerting.
Multi-Cloud & Hybrid Architecture: Exposure to Azure Cloud Platform. Experience designing hybrid connectivity solutions including ExpressRoute, VPN gateways, and cross-cloud networking. Understanding of multi-cloud management strategies. AWS experience a plus.
Advanced Networking: Experience with SD-WAN solutions, WAN optimization, network performance monitoring, and zero-trust network architectures. Familiarity with DNS/DHCP management at enterprise scale.
Security & Compliance Automation: Experience implementing security-as-code, vulnerability scanning automation, and compliance monitoring. Knowledge of security frameworks (NIST, CIS benchmarks) and their application to healthcare environments.
Infrastructure Optimization: Experience with capacity planning, cost optimization strategies, and right-sizing cloud resources. Understanding of FinOps principles and cloud cost management tools.
GitOps & Configuration Management: Familiarity with GitOps workflows, infrastructure versioning, and pull-request-based infrastructure changes. Experience with configuration management at scale.
Disaster Recovery Testing: Hands-on experience conducting DR drills, failover testing, and business continuity exercises. Knowledge of RTO/RPO requirements for healthcare critical systems.
Vendor & Contractor Management: Experience partnering with technology vendors, managed service providers, and contractors to secure infrastructure products and services.
Project Leadership: Experience leading infrastructure projects from design to implementation with minimal supervision. Track record of mentoring junior engineers and conducting knowledge-sharing sessions.

Responsibilities

Cloud & Hybrid Infrastructure Management: Design, implement, and manage Azure cloud infrastructure for compute, storage, networking, and security services. Support and maintain on-premises infrastructure including Windows Server, VMware, Active Directory, and storage systems. Work closely with DevOps and infrastructure teams to ensure operational readiness for secure and scalable workloads.
Infrastructure as Code & Automation: Automate infrastructure provisioning using Terraform, Ansible, PowerShell DSC, or Azure Resource Manager templates. Develop and manage CI/CD pipelines for infrastructure deployment using Azure DevOps or GitHub Actions. Design, deploy, and maintain automation scripts using PowerShell and Python to optimize performance and streamline processes.
Identity & Access Management: Administer and optimize Azure Active Directory/Entra ID including SSO (SAML, OAuth, OIDC), conditional access, password less authentication, and MFA. Manage on-premises Active Directory, Group Policy, DNS, and Certificate Services. Lead Active Directory to Azure AD/Entra ID migration projects and maintain hybrid identity synchronization.
Endpoint & Device Management: Administer Microsoft Intune and Mobile Device Management (MDM) solutions for endpoint security, compliance, and lifecycle management. Implement device restriction policies and enrollment processes for clinical and corporate devices.
Virtualization & Compute: Build, configure, and maintain virtualized environments using VMware vSphere and/or Hyper-V. Implement best practices for high availability, capacity planning, and resource optimization.
Monitoring & Observability: Design and maintain observability platforms including metrics, logs, traces, and events. Create dashboards and alerting for infrastructure health and performance using Azure Monitor, Log Analytics, or equivalent monitoring tools. Implement noise-resistant alerting pipelines to reduce operational load.
Network Infrastructure & Security: Configure firewalls, routing, and switching to maximize network efficiency and security. Design and implement network segmentation strategies, VLANs, and SD-WAN solutions. Perform network and security audits following disaster recovery and business continuity strategies.
Disaster Recovery & Business Continuity: Ensure disaster recovery and business continuity processes are implemented, documented, and maintained with Dell Apex backup. Oversee backup processes at various levels—VM snapshots, OS-level, and SAN-level. Implement automated failover mechanisms and regularly test recovery procedures.
Security & Compliance: Implement security best practices for data protection, compliance, and vulnerability management. Maintain compliance with healthcare regulations (HIPAA) across all infrastructure systems. Configure and maintain security controls including firewalls, VPNs, access control lists, and identity governance.
Documentation & Standards: Maintain comprehensive documentation of system architecture, network diagrams, standard operating procedures, and infrastructure changes. Contribute to runbooks, patterns, and best practices that keep the team productive and efficient.
Leadership & Collaboration: Provide technical leadership and mentorship to team members with less knowledge or experience. Collaborate cross-functionally with application, security, and DevOps teams. Lead infrastructure projects from design to completion with minimal supervision. Participate in on-call rotation and provide timely resolution to critical infrastructure issues.