Senior IT Infrastructure Engineer

About The Role Enterprise Electrical is seeking a Senior IT Infrastructure Engineer to provide technical ownership of the company's Microsoft 365 environment, identity and access management, endpoint management, network infrastructure, cybersecurity controls, and data protection and recovery capabilities. As Enterprise Electrical continues to expand its internal IT department, this role will be responsible for designing, administering, documenting, and continuously improving secure, reliable technology infrastructure that supports corporate offices, company facilities, and active construction job sites. Working closely with the company's Managed Service Provider (MSP), the Senior IT Infrastructure Engineer establishes infrastructure standards, guides security and operational improvements, coordinates technical projects, and ensures that systems align with business objectives, cybersecurity requirements, and operational needs. This role serves as the organization's internal infrastructure subject matter expert, focusing on architecture, security, resilience, governance, and long-term technology strategy while supporting escalated operational issues as needed. Key Responsibilities Microsoft 365, Identity & Endpoint Management Design, administer, and maintain Microsoft 365 tenant architecture and configuration standards across Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and IntuneManage identity lifecycle processes, including onboarding, role changes, offboarding, guest access, directory services, and hybrid synchronization where applicableAdminister least-privilege access models, privileged roles, service accounts, emergency access procedures, and MSP administrative accessDesign, test, deploy, and maintain Conditional Access policies supporting multifactor authentication (MFA), device compliance, location-based policies, and risk-based access controlsManage Microsoft Intune enrollment, Autopilot deployments, compliance policies, security baselines, application deployment, endpoint protection, encryption, and update managementConfigure and maintain Microsoft Defender for Office 365 capabilities, including anti-phishing, Safe Links, Safe Attachments, quarantine management, and email security standardsImplement and support Microsoft Purview capabilities, including sensitivity labels, retention policies, data loss prevention (DLP), and information governance controlsMonitor Microsoft Secure Score, tenant health, and security recommendations while prioritizing remediation initiatives based on business risk Security & Operational Resilience Develop and maintain security baselines across identities, endpoints, servers, networks, and email systems using industry best practices and security frameworksTranslate cyber insurance requirements and customer security obligations into enforceable technical controlsAdminister endpoint protection, vulnerability remediation, patch management, and security monitoring processesCoordinate security investigations, alert triage, containment activities, and remediation efforts with the MSPConduct recurring privileged access reviews and account audits for employees, vendors, guest users, service accounts, and MSP personnelMaintain incident response documentation, technical runbooks, and recovery proceduresParticipate in tabletop exercises, security reviews, and operational readiness assessmentsPrepare security posture reports, technical evidence, client security questionnaires, and cyber insurance documentation Network & Server Infrastructure Configure and maintain firewalls, managed switches, wireless access points, routers, VLANs, segmentation policies, PoE systems, and secure remote access solutionsSupport job-site connectivity solutions, including LTE/5G deployments, failover configurations, temporary offices, and construction trailersAssess and optimize wireless coverage across offices, warehouses, fabrication facilities, and project locationsAdminister cloud and on-premises server environments, virtualization platforms, directory services, DNS, DHCP, and related infrastructure servicesMonitor server health, availability, capacity, patch compliance, and configuration standardsCoordinate infrastructure projects, maintenance windows, upgrades, and change management activities with internal stakeholders and the MSP Backup, Recovery & Business Continuity Administer backup and recovery solutions supporting servers, business-critical systems, and Microsoft 365 workloads within approved recovery scopesMonitor backup performance and proactively address failures or protection gapsMaintain backup security controls and recovery access protectionsPerform and document scheduled restore testing and recovery validation exercisesSupport disaster recovery planning, recovery time objectives (RTOs), recovery point objectives (RPOs), and business continuity initiatives Service Delivery & MSP Coordination Assess and improve ticketing systems, workflows, and service management processesDefine support intake processes, escalation paths, support tiers, and service-level expectations with the MSPMaintain infrastructure knowledge bases, support documentation, and operational runbooksServe as the primary internal technical liaison for the MSPCoordinate escalated incidents, infrastructure support requests, and project execution activitiesLead recurring service reviews and evaluate MSP performance against agreed expectationsReview technical work, service delivery metrics, and project status updatesMaintain company ownership and visibility of infrastructure documentation, credentials, inventories, service histories, and configuration recordsRecommend infrastructure improvements, technology investments, and operational enhancements to IT leadership Documentation & Standards Maintain accurate inventories of infrastructure assets, software licensing, network circuits, privileged accounts, and key technical dependenciesDevelop and maintain network diagrams, configuration standards, workstation build documentation, operational procedures, change records, and technical runbooksUtilize PowerShell and automation tools when appropriate to improve operational efficiency and consistencyPerform additional duties as assigned in support of departmental and business objectives Required Qualifications Education Associate's or Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field preferredEquivalent combinations of education, technical training, certifications, and demonstrated experience may be considered Experience Minimum of four (4) years of progressively responsible IT infrastructure administration experienceTypical successful candidate profile includes four to seven (4-7) years of infrastructure engineering experienceStrong Microsoft 365 administration experience, including tenant-level configuration, security, and governanceHands-on experience administering Microsoft Entra ID, Conditional Access policies, and identity lifecycle managementExperience managing Microsoft Intune device compliance, endpoint security, and configuration policiesExperience with managed switches, firewalls, VLANs, segmentation, routing, and enterprise networkingExperience administering backup and disaster recovery solutions, including documented restore testingExperience coordinating and managing MSP relationships, escalations, and operational performanceDemonstrated ability to assess, improve, and document enterprise infrastructure environmentsExperience supporting multi-site operations preferredExperience with tenant migrations, consolidations, ticketing implementations, cyber insurance audits, or distributed workforce environments preferred Knowledge, Skills & Abilities Strong knowledge of Microsoft 365, Microsoft Entra ID, identity governance, privileged access management, and Conditional AccessAdvanced knowledge of endpoint management, endpoint security, patch management, and infrastructure administrationStrong understanding of TCP/IP networking, routing, switching, DNS, DHCP, VLANs, wireless networking, firewall administration, and secure remote accessAbility to architect secure, scalable, and highly available infrastructure solutionsAbility to evaluate technical dependencies, business risks, and operational impactsStrong troubleshooting and root-cause analysis capabilitiesExceptional organizational, analytical, and documentation skillsEffective communication skills with the ability to present technical concepts to non-technical stakeholdersAbility to manage multiple priorities in a fast-paced and growing organizationCommitment to safeguarding confidential and sensitive informationAbility to adapt quickly to changing business and technology requirements Preferred Qualifications Microsoft 365 Administrator certificationsMicrosoft Azure / Entra Administrator certificationsMicrosoft Identity and Access Management certificationsMicrosoft Security Operations certificationsMicrosoft Defender for Endpoint experienceMicrosoft Defender for Office 365 experienceMicrosoft Purview administration experienceExperience with CIS Controls, NIST Cybersecurity Framework (CSF), or similar security frameworksPowerShell scripting and automation experienceExperience supporting construction, field services, manufacturing, or distributed workforce environmentsFamiliarity with construction software platforms such as: VistaSage 300 CREFoundationProcoreAccubid Leadership & Team Collaboration Partner with IT leadership to develop and implement infrastructure strategies and operational standardsServe as the primary internal technical counterpart to the company's Managed Service Provider (MSP)Coordinate infrastructure projects and change management activities across business unitsLead infrastructure planning, technical reviews, and operational improvement initiativesCollaborate with department leaders, business stakeholders, vendors, and project teamsProvide technical guidance and direction to MSP personnel and project resources within delegated authorityThis position has no direct employee supervisory responsibilities Work Environment Work Environment Primarily based onsite in the Houston officeOccasional travel to company locations, warehouses, fabrication facilities, and active construction job sitesFrequent interaction with technology equipment, infrastructure systems, vendors, and business stakeholdersJobsite visits may involve noise, dust, uneven terrain, varying temperatures, and active construction operationsCompliance with all company safety policies and PPE requirements is required during field visits Physical Requirements Prolonged periods of computer and workstation useAbility to inspect, configure, troubleshoot, and connect network and IT equipmentAbility to move throughout office environments, facilities, and construction sitesAbility to occasionally lift, move, or install computers, networking equipment, and related devicesAbility to travel as required to support business and infrastructure operationsReasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions Schedule & Travel Full-time positionPrimarily works standard business hours onsiteOccasional evening, weekend, and after-hours maintenance activities may be requiredParticipation in infrastructure upgrades, project deployments, and critical incident response may require schedule flexibilityTravel may be required based on operational and project needsAdditional hours may be necessary to support outages, projects, maintenance activities, and business priorities Equipment & Technology Desktop and laptop computersMobile devices and tabletsMicrosoft 365 Administration CenterMicrosoft Entra IDMicrosoft IntuneMicrosoft Defender security platformsMicrosoft PurviewServer and virtualization platformsManaged switches, firewalls, wireless access points, routers, cellular gateways, and UPS systemsBackup and recovery platformsRemote administration and monitoring toolsTicketing and service management platformsDocumentation and knowledge management systemsSecure password and credential management toolsStandard office equipment and approved network testing toolsRequired personal protective equipment (PPE) when visiting jobsites What We Value At Enterprise Electrical, we are committed to: Safety First, Safety AlwaysCommitted to ExcellencePlan It, Do It, Own ItLearn It, Know It, Teach ItOne Team, One GoalPositive Attitude Required Our Core Purpose: Building Relationships to Enrich Lives Apply Today If you are an experienced infrastructure professional passionate about cybersecurity, Microsoft technologies, enterprise networking, and operational excellence, we encourage you to apply for the Senior IT Infrastructure Engineer position at Enterprise Electrical. This role offers the opportunity to shape the future of the company's internal IT operations, strengthen cybersecurity posture, build scalable infrastructure, and support a growing organization operating across corporate offices, facilities, and active construction projects.