Enterprise Engineer (4 Days Onsite- Brentwood, TN)

About the role

The Enterprise Engineer designs, implements, and supports the core infrastructure and identity platforms that keep CoreCivic's enterprise technology environment secure, available, and performing reliably across corporate and facility locations. Serves as a hands-on technical expert for Windows Server, Active Directory, Entra ID, virtualization, and cloud infrastructure, partnering closely with Enterprise Operations, Cybersecurity, Network Infrastructure, and Field Services teams. Participates in patch and vulnerability management cycles, contributes to system design and modernization projects, and provides escalated technical support to ensure consistent, secure operations enterprise-wide.

Schedule

This position requires 4 days onsite in Brentwood, TN. Domestic U.S. travel may be required. Participation in an on-call rotation and after-hours support is required as needed to maintain system availability.

Responsibilities

• Designs, configures, and maintains enterprise infrastructure including Windows Server, Active Directory, Azure/Entra ID, DNS, Group Policy, conditional access, and core provisioning services.
• Builds, maintains, and supports virtualization and end-user compute platforms, including VDI environments, hypervisor administration, and related storage and backup infrastructure.
• Deploys, monitors, and optimizes Azure cloud infrastructure and hybrid connectivity, including compute, storage, identity, and SSO/authentication services.
• Partners with Cybersecurity to implement and maintain security controls, identity and access management practices, and compliance requirements across supported systems.
• Leads or contributes to escalated Tier 2/3 troubleshooting and incident response for infrastructure and endpoint issues affecting facility or business operations, performing root cause analysis to prevent recurrence.
• Participates in enterprise infrastructure projects, migrations, and modernization initiatives (e.g., platform upgrades, cloud migration, endpoint modernization), ensuring changes are tested, documented, and implemented in accordance with change management standards.
• Maintains accurate documentation, configuration standards, and runbooks for supported systems to support consistent operations and knowledge transfer.
• Monitors system health, capacity, and performance across supported infrastructure, proactively identifying and remediating risks to availability and reliability.
• Supports the monthly patch management cycle, helping validate updates and coordinate rollout in line with compliance timelines.
• Serves as a technical liaison with vendors and internal engineering teams on supported technologies, escalated support cases, and project delivery.
• Provides mentorship and technical guidance to junior engineering staff and cross-trains team members on supported platforms to strengthen team coverage.
• Provides secondary, backup-level support for endpoint and mobile device management platforms (e.g., SCCM, Intune) as needed.

Requirements

• Bachelor's degree in Information Technology, Computer Science, or a related field from an accredited college or university (additional related experience may be substituted on a year-for-year basis).
• 2+ years of progressive experience in systems engineering, infrastructure engineering, or enterprise IT operations.
• Demonstrated experience administering Windows Server, Active Directory, Azure/Entra ID, and Group Policy in an enterprise environment.
• Experience with patch management, vulnerability remediation, and change management processes in a regulated or compliance-driven environment.
• Strong troubleshooting, analytical, and root cause analysis skills with the ability to manage multiple priorities in a fast-paced environment.
• Effective written and verbal communication skills, with the ability to document technical work clearly and coordinate across cross-functional teams.
• Must be willing and able to participate in an on-call rotation.

Preferred Qualifications

• Experience with virtualization platforms (e.g., Nutanix, Hyper-V, VMware) and VDI environments.
• Experience with Microsoft Azure infrastructure, cloud networking, and hybrid identity/SSO configurations.
• Working knowledge of backup, storage, and disaster recovery practices.
• Familiarity with endpoint and mobile device management platforms (e.g., SCCM, Intune, or comparable tools).
• Relevant technical certifications such as Microsoft Certified: Azure Administrator Associate or comparable credentials.