Lead Infrastructure Engineer

Medical Guardian•Philadelphia, PA

11d•Hybrid

About The Position

Medical Guardian is seeking a highly experienced and proactive Lead Infrastructure Engineer to oversee the design, maintenance, and performance of our cloud-first enterprise IT infrastructure. This role leads both technical operations and security response, with a focus on Azure cloud infrastructure, networking and services, Microsoft 365, RBAC and identity management. The ideal candidate is comfortable wearing multiple hats—cloud architect, network troubleshooter, security responder, and automation engineer. You will serve as the senior technical lead on the Infrastructure Operations team, helping to ensure high availability, performance, and security of the systems that power our business.

Requirements

Deep expertise with Microsoft Azure (IaaS/PaaS networking, compute, NSG, Private DNS, VPN Gateway, etc.)
Strong working knowledge of Microsoft 365 (Exchange, SharePoint, Teams, OneDrive, Entra ID)
Skilled in managing Conditional Access, SSO integrations, Intune/Endpoint Manager
Familiarity with Azure Sentinel, Defender for Endpoint, and related log sources
Experience with PowerShell scripting for automation and policy enforcement
Proficient with TCP/IP, DNS, DHCP, VLANs, and firewall configurations
Hands-on experience with Cisco Meraki network gear
Experience with Wi-Fi and wireless controllers (Cisco)
Ability to physically troubleshoot network and device issues at HQ and warehouse locations
Experience with Proofpoint, Netskope, or other email/security platforms is a plus
Able to respond to security events and perform first-level analysis on alerts/logs
Comfortable correlating logs across Microsoft and third-party platforms
Admin-level knowledge of Linux servers (basic patching, log review, networking)
Ability to write and troubleshoot Bash and PowerShell scripts
Familiarity with Git and Infrastructure-as-Code concepts is a plus
Bachelor’s degree in Computer Science, Information Technology, or related field
Minimum of 8+ years in IT infrastructure roles, with 3+ years in a senior or lead position
Demonstrated ability to manage complex hybrid environments with a cloud-first mindset
Hybrid work model with on-site presence required for physical troubleshooting (Philadelphia HQ and Sharon Hill locations)
Must be available for after-hours incident support, including nights/weekends as needed
Ability to rack equipment, manage cabling, and support physical installs as needed

Nice To Haves

Microsoft certifications (AZ-104, MS-102, SC-200, SC-300, etc.)
Experience in a multi-cloud environment (Azure + AWS)
Familiarity with eCommerce or SaaS operations
Jira, Confluence, and ITSM platform experience

Responsibilities

Own and manage Azure-based infrastructure including compute, networking, DNS, VPNs, virtual appliances, private endpoints, and storage accounts.
Administer and optimize Microsoft 365 services including Exchange Online, SharePoint Online, OneDrive, Teams, and Entra ID (Azure AD).
Implement and support Intune Endpoint Manager, Conditional Access, and other identity governance and device compliance tools.
Act as Tier 3 escalation for infrastructure and network issues, both during and outside business hours—including security events requiring immediate response.
Support and monitor Proofpoint Email Security, working closely with the Security & Compliance team to investigate threats and mitigate phishing attempts.
Perform log analysis across platforms such as Azure Monitor, Sentinel, Defender, and Proofpoint to assist in incident triage and root cause investigations.
Manage on-site network infrastructure, including switch and firewall configuration (Cisco), VLANs, wireless, and site connectivity.
Troubleshoot complex network issues at the packet level using tools like Wireshark and perform physical diagnostics and hardware replacements as needed.
Assist in the administration of Linux-based VMs (RHEL) and cloud workloads in Azure and AWS environments.
Lead infrastructure automation and scripting efforts using PowerShell Bicep and Bash to improve operational efficiency and reduce manual overhead.
Contribute to post-incident reviews and work with security teams on continuous improvement of system hardening and defense-in-depth.
Partner with Help Desk, Security, and Engineering teams to deliver reliable, secure IT services and infrastructure.
Maintain documentation of infrastructure configuration, network diagrams, and operational runbooks.
Participate in on-call rotation for high-impact or after-hours infrastructure and security events.