Senior Hybrid Infrastructure Engineer

Astreya•Seattle, WA

3d•$132,000 - $165,000•Hybrid

About The Position

We are seeking a Senior Hybrid Infrastructure Engineer to manage and maintain core Microsoft infrastructure services, design and implement enhancements for a unified hybrid infrastructure model, and administer hypervisor and hyperconverged environments. This role involves managing storage platforms, SQL Server Enterprise, data protection, security platforms, certificate lifecycle management, and infrastructure monitoring. The engineer will also be responsible for secure file transfer services, designing and delivering hybrid infrastructure solutions using Infrastructure as Code (IaC) practices with Terraform and GitHub, and contributing to modular, self-service infrastructure solutions. A key aspect of this role is leveraging AI-assisted workflows and tooling for solution design, delivery, and maintenance, and collaborating with application teams, security, and operations to deliver well-architected solutions across both on-premises and cloud environments.

Requirements

5+ years of hands-on experience managing enterprise on-premises infrastructure including Windows Server, Active Directory, DNS, DHCP, Hyper-V, and clustering.
Experience with hyperconverged infrastructure solutions including Azure Local or equivalent.
3+ years of hands-on experience with Microsoft Azure working across compute, storage, networking, and governance within existing enterprise environments; working knowledge of Azure Arc and Azure Policy sufficient to build and deliver compliant hybrid infrastructure solutions.
Solid understanding of core networking concepts including TCP/IP, DNS, VLANs, subnetting, and firewall rules sufficient to design and deliver hybrid infrastructure solutions alongside a dedicated network team.
Demonstrated experience with enterprise storage platforms including NetApp SAN, HPE Nimble, or equivalent enterprise storage solutions.
Experience managing SQL Server Enterprise environments including high availability and disaster recovery configurations.
Experience with data protection and recovery platforms including Rubrik Security Cloud or equivalent; familiarity with Azure Site Recovery as part of a hybrid DR strategy.
Experience with endpoint security and security posture tooling including Tanium and Microsoft Defender for Cloud.
Experience with certificate lifecycle and PKI management in an enterprise environment.
Experience with infrastructure monitoring and observability platforms including New Relic and Azure Monitor.
Experience with Terraform and GitHub as part of an IaC-based delivery workflow.
Experience with AI-assisted tooling in engineering workflows — code generation, automation, or documentation.
Strong communication skills and the ability to translate business needs into technical solutions across both on-premises and cloud environments.

Nice To Haves

Experience with advanced Azure networking design including VNet architecture, ExpressRoute, and Private Link.
Experience architecting and designing hyperconverged infrastructure solutions including Azure Local or equivalent.
Experience building and managing CI/CD pipelines including pipeline design, workflow automation, and pipeline-as-code practices.
Proficiency with Terraform module development, state management, and workspace organization using Terraform Cloud.
Azure certifications (AZ-104, AZ-305, AZ-500, AZ-800, AZ-801).
Familiarity with Azure PaaS services including App Services, Functions, API Management, and Front Door as part of end-to-end solution delivery.
Experience with platform engineering practices and methodologies — building or consuming internal developer platforms and self-service infrastructure catalogs.

Responsibilities

Manage and maintain core Microsoft infrastructure services including Windows Server, Active Directory, DNS, DHCP, and file services; working knowledge of Linux; design and implement enhancements and dependent solutions as the environment evolves toward a unified hybrid infrastructure model.
Administer, support, enhance, and implement new solutions for hypervisor and hyperconverged environments including Hyper-V and Azure Local; manage clustering and high availability configurations across both platforms.
Administer and enhance storage platform configurations including NetApp SAN and HPE Nimble; leverage NetApp Cloud Insights for storage and compute monitoring.
Administer existing SQL Server Enterprise platforms including high availability and disaster recovery configurations; design and implement new solutions spanning on-premises and Azure SQL services, with a horizon toward enhancing and extending on-premises clustering to Azure SQL instances as part of a broader hybrid database strategy.
Administer and maintain data protection and recovery platforms including Rubrik Security Cloud, on-premises CDM appliances, and Azure Site Recovery as part of an integrated hybrid DR strategy.
Administer and enhance security platforms including Tanium endpoint security and Microsoft Defender for Cloud; leverage Arc-enabled capabilities to extend security visibility and continuously improve security posture across hybrid environments.
Manage and maintain certificate lifecycle and PKI infrastructure using Palo Alto certificate management; support public certificate management through DigiCert and assist in the design and delivery of enhanced certificate solutions as part of the broader hybrid infrastructure strategy.
Administer and enhance infrastructure monitoring, alerting, and observability platforms including New Relic and Azure Monitor; respond to alerts and incidents while driving improvements to monitoring coverage and capabilities as legacy tools like SCOM are evaluated and replaced as part of the hybrid strategy.
Administer, enhance, and where needed design and implement new solutions for secure file transfer and data services including Cerberus SFTP and associated file service platforms.
Design, deliver, and maintain hybrid infrastructure solutions across Azure and Azure Arc environments using established IaC practices with Terraform, Terraform Cloud, and GitHub; implement supporting components including managed identities, Key Vault, diagnostic logging, and NSGs in compliance with established policies and standards.
Contribute to the design and delivery of modular, self-service infrastructure solutions across the hybrid ecosystem that enable application teams and end users to consume services seamlessly across on-premises and cloud environments.
Leverage AI-assisted workflows and tooling as an integral part of solution design, delivery, and maintenance — including code generation, automation, and documentation; contribute to the development of AI-driven engineering workflows including agentic capabilities as the hybrid infrastructure strategy evolves.
Collaborate with application teams, security, and operations to deliver well-architected, production-ready solutions across both environments.

Benefits

Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through UHC Nationwide
Vision provided by UHC
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
Corporate Wellness Program provided by Goomi Group
Employee Assistance Program
Wellness Days
401k Plan
Basic and Supplemental Life Insurance
Short Term & Long Term Disability
Critical Illness, Critical Hospital, and Voluntary Accident Insurance
Tuition Reimbursement (available 6 months after start date, capped)
Paid Time Off (accrued and prorated, maximum of 120 hours annually)
Paid Holidays
Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law