• Architecture & technical leadership: Set technical direction for the compute environment. Design scalable, resilient server and virtualization architectures, lead infrastructure projects end-to-end, and drive capacity and lifecycle planning.
• Standards & guidance: Establish standards and best practices for the team, review work, and guide other engineers.
• Server & VM management: Provision, configure, patch, and maintain physical servers and virtual machines (Windows Server and Linux). Monitor health, capacity, and performance, and remediate complex issues.
• Virtualization: Design and administer the hypervisor environment (e.g., VMware vSphere, Microsoft Hyper-V, or equivalent), host management, resource allocation, snapshots, templates, and high availability/clustering.
• Microsoft identity & cloud: Administer Microsoft Entra ID (Azure AD), including users, groups, roles, conditional access, and hybrid identity (Entra Connect). Manage integrations and SSO between on-prem and cloud services.
• Endpoint & device management: Manage device enrollment, configuration profiles, compliance policies, and application deployment through Microsoft Intune. Provision and support Windows 365 Cloud PCs.
• Application & backend connectivity: Support backend systems and the connections between applications, identity providers, and infrastructure services. Troubleshoot authentication, networking, and integration issues end-to-end.
• Automation & scripting: Automate routine provisioning and maintenance using PowerShell (and other scripting tools) to reduce manual effort and improve consistency.
• Monitoring & reliability: Implement and maintain monitoring, alerting, and backup/recovery for computing resources. Participate in incident response and root-cause analysis.
• Security & compliance: Apply patching, hardening, and access-control best practices. Support audits and ensure computing resources meet security and compliance requirements.
• Documentation: Maintain accurate documentation of configurations, procedures, and runbooks.
• Collaboration & support: Partner with networking, security, and helpdesk teams; provide escalation support for complex computing and identity issues.
• 10% Travel expected (maximum)