IT Infrastructure Engineer

RoslinCT US•Hopkinton, MA

6d•$77,000 - $115,000

About The Position

The IT Infrastructure Engineer will be responsible for the design, implementation, and support of reliable, secure IT infrastructure for RoslinCT’s USA operations, working closely with colleagues across the USA and UK. This hands-on role combines systems administration with infrastructure and network design, project delivery, and advanced technical support. The role is responsible for maintaining and improving networks, virtualization platforms, physical servers, storage, and cloud infrastructure. It supports business and manufacturing continuity through effective monitoring, troubleshooting, backup and recovery, and controlled changes in a regulated environment.

Requirements

3 - 5+ years of relevant experience in systems administration and infrastructure/networking design, implementation, and support.
Demonstrable ownership of infrastructure projects, complex incidents, and recovery activities.
Strong networking skills covering TCP/IP, routing, switching, VLANs, DNS, DHCP, wireless, VPNs, firewalls, and segmentation, with systematic troubleshooting using logs and packet capture.
Strong enterprise virtualization experience with platforms such as VMware, Nutanix AHV, or Hyper-V, including clusters, high availability, migrations, storage dependencies, and performance/capacity troubleshooting.
Hands-on deployment and support of physical servers, enterprise storage, and network hardware, including fault diagnosis, firmware, maintenance, and lifecycle management.
Hands-on production infrastructure experience in AWS or Microsoft Azure, covering compute, storage, identity and access management, networking, monitoring, backup, and secure on-premises connectivity.
Strong Windows Server, Active Directory, and Group Policy administration skills. Working knowledge of Entra ID, hybrid identity, MFA, Conditional Access, role-based and privileged access, service accounts, and SSO troubleshooting.
Practical PowerShell scripting skills to write, understand, troubleshoot, and safely test repeatable administration tasks, with appropriate error handling, documentation, and protection of credentials.
Practical infrastructure security experience, including secure configuration, patching, vulnerability remediation, least privilege, endpoint protection, and security incident escalation.
Backup, restore, and disaster recovery experience, including protected backups, recovery time and data-loss objectives, application dependencies, and tested recovery. Ability to choose between database, file, and whole-server recovery.
Experience configuring monitoring and useful alerts, investigating logs, and identifying the cause of infrastructure performance and availability issues.
Ability to follow controlled change processes, document designs and configurations, plan testing and rollback, and produce clear implementation evidence.
Strong communication, prioritization, and collaboration skills.
Advanced Microsoft Entra ID administration and experience with Microsoft Defender, Microsoft 365, and Intune, including endpoint compliance and identity/security integration.
Cisco Meraki switching, wireless, and security appliances, including dashboard administration, VPN connectivity, and troubleshooting.
IT or infrastructure experience in pharmaceutical, biotechnology, or cell and gene therapy environments; familiarity with GMP/GxP, validated systems, data integrity, and collaboration with Quality Assurance and Computer Systems Validation teams.
Infrastructure as code using Terraform, Bicep, or CloudFormation; Git version control and review of scripts/configuration changes; API-based administration and automation.
Working knowledge of Linux services, permissions, logs, and patching, and application infrastructure dependencies such as TLS certificates, service accounts, and database connectivity.
Experience supporting both AWS and Azure, cloud cost optimization, and ITIL service management practices.
Exposure to containerized application hosting, such as Docker, where relevant to business applications.
Ability to use approved AI tools safely for scripting and troubleshooting, validate their output, and protect company information.
A highly organized work style that ensures timely execution of tasks.
A mindset that ensures accurate results.
Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint).
Effective problem-solving capabilities.
Strong oral and written communication skills.

Responsibilities

Design, configure, and support LAN, WAN, wireless, routing, switching, VLANs, VPNs, and firewalls, including network segmentation and resilient connectivity between sites and cloud services.
Administer and improve virtualization platforms, including host and cluster configuration, virtual machine provisioning, migrations, capacity planning, and high availability.
Install, configure, and troubleshoot physical servers, storage, and network hardware; coordinate maintenance, firmware updates, component replacement, and equipment lifecycle planning.
Build, administer, and support infrastructure in AWS or Microsoft Azure, covering compute, storage, networking, access controls, monitoring, backup, and cost management.
Maintain Windows Server, Active Directory, Group Policy, DNS, and DHCP, and support integration between on-premises systems and cloud services.
Own complex infrastructure incidents and provide advanced escalation support. Use logs, monitoring, and network diagnostics to isolate faults across network, identity, server, storage, cloud, and application layers and implement lasting fixes.
Configure actionable monitoring and alerts for infrastructure availability, performance, and capacity; address risks proactively and plan maintenance with business and manufacturing stakeholders.
Manage protected backups and recovery procedures, investigate failures, and perform documented restore and disaster recovery tests against agreed recovery time and data-loss objectives, accounting for application dependencies.
Apply approved security controls, patching, and secure configurations; support vulnerability remediation, access reviews, and security incident investigation with the security team.
Administer hybrid identity and access controls, and support Microsoft 365, Intune, and Defender in collaboration with IT operations and security colleagues.
Deliver infrastructure upgrades and migrations, including technical designs, implementation plans, testing, rollback arrangements, and operational handover.
Maintain accurate network diagrams, configuration records, asset information, procedures, and support documentation. Record incidents, requests, and changes in the service management system.
Follow approved change control and documentation processes. Work with Quality Assurance and Computer Systems Validation colleagues to assess regulated system impacts and provide implementation and test evidence.
Coordinate vendors and service providers, share knowledge with the wider IT team, and automate repeatable administration tasks using tested, documented scripts and controlled changes.
Other duties as assigned.