Senior IT Infrastructure Engineer

Enterprise Electrical•Houston, TX

19h•Onsite

About The Position

Enterprise Electrical is seeking a Senior IT Infrastructure Engineer to provide technical ownership of the company’s Microsoft 365 environment, identity and access management, endpoint management, network infrastructure, cybersecurity controls, and data protection and recovery capabilities. As Enterprise Electrical continues to expand its internal IT department, this role will be responsible for designing, administering, documenting, and continuously improving secure, reliable technology infrastructure that supports corporate offices, company facilities, and active construction job sites. Working closely with the company’s Managed Service Provider (MSP), the Senior IT Infrastructure Engineer establishes infrastructure standards, guides security and operational improvements, coordinates technical projects, and ensures that systems align with business objectives, cybersecurity requirements, and operational needs. This role serves as the organization's internal infrastructure subject matter expert, focusing on architecture, security, resilience, governance, and long-term technology strategy while supporting escalated operational issues as needed.

Requirements

Associate’s or Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field preferred. Equivalent combinations of education, technical training, certifications, and demonstrated experience may be considered.
Minimum of four (4) years of progressively responsible IT infrastructure administration experience.
Typical successful candidate profile includes four to seven (4-7) years of infrastructure engineering experience.
Strong Microsoft 365 administration experience, including tenant-level configuration, security, and governance.
Hands-on experience administering Microsoft Entra ID, Conditional Access policies, and identity lifecycle management.
Experience managing Microsoft Intune device compliance, endpoint security, and configuration policies.
Experience with managed switches, firewalls, VLANs, segmentation, routing, and enterprise networking.
Experience administering backup and disaster recovery solutions, including documented restore testing.
Experience coordinating and managing MSP relationships, escalations, and operational performance.
Demonstrated ability to assess, improve, and document enterprise infrastructure environments.
Experience supporting multi-site operations preferred.
Experience with tenant migrations, consolidations, ticketing implementations, cyber insurance audits, or distributed workforce environments preferred.
Strong knowledge of Microsoft 365, Microsoft Entra ID, identity governance, privileged access management, and Conditional Access.
Advanced knowledge of endpoint management, endpoint security, patch management, and infrastructure administration.
Strong understanding of TCP/IP networking, routing, switching, DNS, DHCP, VLANs, wireless networking, firewall administration, and secure remote access.
Ability to architect secure, scalable, and highly available infrastructure solutions.
Ability to evaluate technical dependencies, business risks, and operational impacts.
Strong troubleshooting and root-cause analysis capabilities.
Exceptional organizational, analytical, and documentation skills.
Effective communication skills with the ability to present technical concepts to non-technical stakeholders.
Ability to manage multiple priorities in a fast-paced and growing organization.
Commitment to safeguarding confidential and sensitive information.
Ability to adapt quickly to changing business and technology requirements.

Nice To Haves

Microsoft 365 Administrator certifications.
Microsoft Azure / Entra Administrator certifications.
Microsoft Identity and Access Management certifications.
Microsoft Security Operations certifications.
Microsoft Defender for Endpoint experience.
Microsoft Defender for Office 365 experience.
Microsoft Purview administration experience.
Experience with CIS Controls, NIST Cybersecurity Framework (CSF), or similar security frameworks.
PowerShell scripting and automation experience.
Experience supporting construction, field services, manufacturing, or distributed workforce environments.
Familiarity with construction software platforms such as: Vista Sage 300 CRE Foundation Procore Accubid

Responsibilities

Design, administer, and maintain Microsoft 365 tenant architecture and configuration standards across Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and Intune.
Manage identity lifecycle processes, including onboarding, role changes, offboarding, guest access, directory services, and hybrid synchronization where applicable.
Administer least-privilege access models, privileged roles, service accounts, emergency access procedures, and MSP administrative access.
Design, test, deploy, and maintain Conditional Access policies supporting multifactor authentication (MFA), device compliance, location-based policies, and risk-based access controls.
Manage Microsoft Intune enrollment, Autopilot deployments, compliance policies, security baselines, application deployment, endpoint protection, encryption, and update management.
Configure and maintain Microsoft Defender for Office 365 capabilities, including anti-phishing, Safe Links, Safe Attachments, quarantine management, and email security standards.
Implement and support Microsoft Purview capabilities, including sensitivity labels, retention policies, data loss prevention (DLP), and information governance controls.
Monitor Microsoft Secure Score, tenant health, and security recommendations while prioritizing remediation initiatives based on business risk.
Develop and maintain security baselines across identities, endpoints, servers, networks, and email systems using industry best practices and security frameworks.
Translate cyber insurance requirements and customer security obligations into enforceable technical controls.
Administer endpoint protection, vulnerability remediation, patch management, and security monitoring processes.
Coordinate security investigations, alert triage, containment activities, and remediation efforts with the MSP.
Conduct recurring privileged access reviews and account audits for employees, vendors, guest users, service accounts, and MSP personnel.
Maintain incident response documentation, technical runbooks, and recovery procedures.
Participate in tabletop exercises, security reviews, and operational readiness assessments.
Prepare security posture reports, technical evidence, client security questionnaires, and cyber insurance documentation.
Configure and maintain firewalls, managed switches, wireless access points, routers, VLANs, segmentation policies, PoE systems, and secure remote access solutions.
Support job-site connectivity solutions, including LTE/5G deployments, failover configurations, temporary offices, and construction trailers.
Assess and optimize wireless coverage across offices, warehouses, fabrication facilities, and project locations.
Administer cloud and on-premises server environments, virtualization platforms, directory services, DNS, DHCP, and related infrastructure services.
Monitor server health, availability, capacity, patch compliance, and configuration standards.
Coordinate infrastructure projects, maintenance windows, upgrades, and change management activities with internal stakeholders and the MSP.
Administer backup and recovery solutions supporting servers, business-critical systems, and Microsoft 365 workloads within approved recovery scopes.
Monitor backup performance and proactively address failures or protection gaps.
Maintain backup security controls and recovery access protections.
Perform and document scheduled restore testing and recovery validation exercises.
Support disaster recovery planning, recovery time objectives (RTOs), recovery point objectives (RPOs), and business continuity initiatives.
Assess and improve ticketing systems, workflows, and service management processes.
Define support intake processes, escalation paths, support tiers, and service-level expectations with the MSP.
Maintain infrastructure knowledge bases, support documentation, and operational runbooks.
Serve as the primary internal technical liaison for the MSP.
Coordinate escalated incidents, infrastructure support requests, and project execution activities.
Lead recurring service reviews and evaluate MSP performance against agreed expectations.
Review technical work, service delivery metrics, and project status updates.
Maintain company ownership and visibility of infrastructure documentation, credentials, inventories, service histories, and configuration records.
Recommend infrastructure improvements, technology investments, and operational enhancements to IT leadership.
Maintain accurate inventories of infrastructure assets, software licensing, network circuits, privileged accounts, and key technical dependencies.
Develop and maintain network diagrams, configuration standards, workstation build documentation, operational procedures, change records, and technical runbooks.
Utilize PowerShell and automation tools when appropriate to improve operational efficiency and consistency.
Perform additional duties as assigned in support of departmental and business objectives.
Partner with IT leadership to develop and implement infrastructure strategies and operational standards.
Serve as the primary internal technical counterpart to the company’s Managed Service Provider (MSP).
Coordinate infrastructure projects and change management activities across business units.
Lead infrastructure planning, technical reviews, and operational improvement initiatives.
Collaborate with department leaders, business stakeholders, vendors, and project teams.
Provide technical guidance and direction to MSP personnel and project resources within delegated authority.