Job Description
Job Description
JOB SUMMARY
Pankow thrives on innovation, utilizing Azure cloud infrastructure and minimal on-premise stacks to lead the construction industry. The Senior Infrastructure Engineer serves as the senior-most technical expert in our IT department.
The position will operate with a high degree of self-direction. They will lead our most complex projects, own critical cloud and network systems, and act as the final escalation point for technical issues. The successful candidate will be passionate about driving technology roadmaps, automating infrastructure, and making high-level strategic decisions, this role is for you.
JOB SCOPE & ESSENTIAL FUNCTIONS
Primary Accountabilities
Technical Implementation:
- Contribute to the technology roadmap and long-term infrastructure planning.
- Lead the design, implementation, and optimization of complex enterprise network and cloud infrastructure, including routing, switching, firewalls, VPNs, and cloud networking.
- Lead cross-functional implementation efforts, coordinating with systems, security, applications, vendors, and business stakeholders to ensure successful delivery of projects.
- Ensure implemented solutions meet enterprise standards for reliability, security, performance, scalability, compliance, and operational supportability, while proactively identifying and mitigating technical risks.
System Management:
- Own selected technology platforms, including Azure Infrastructure, enterprise networking, firewall services, and SQL infrastructure.
- Lead the resolution of high-impact infrastructure outages and performance bottlenecks.
- Contribute to security posture, including engaging in vulnerability assessment, remediation, and active participation in security incident response.
- Provide Disaster Recovery management and ensure Business Continuity by planning, documenting, and testing tools and procedures.
- Automate infrastructure deployment, configuration, monitoring, and maintenance tasks using scripting, infrastructure-as-code, templates, APIs, and orchestration tools where appropriate.
- Maintain comprehensive technical documentation for all implemented infrastructure, including architecture diagrams, standards, and support procedures, to ensure effective team handoff.
Technical Leadership:
- Take ownership of initiatives and projects from initiation through completion, including managing risks and dependencies, communicating progress to stakeholders, and adhering to timelines and standards.
- Perform Vendor relationship management and provide technical estimates for infrastructure spend.
- Independently identify, prioritize, and deliver infrastructure improvements, escalating risks and tradeoffs to IT leadership as needed.
Escalation and Mentorship:
- Serve as the technical anchor for a IT support team of 4 total members, providing Tier 3 escalation.
- Mentor and support tier 1 and tier 2 support team members.
- Occasional after-hours support for scheduled high-impact deployments.
QUALIFICATIONS
Education/Training:
- Minimum 8 years of enterprise experience in systems, networking, and cloud infrastructure required.
- Bachelor's degree in a related field preferred; an equivalent combination of education and hands-on experience will be considered.
- Demonstrated ability to professionally communicate and deliver complex projects from initiation to completion
- Relevant certifications:
- Azure Solutions Architect Expert
- CCNA/CCIE, Aruba Networking Certified Professional or Expert
- CISSP, CCSP
- Windows Server Hybrid Admin
- ITIL Foundation
Knowledge/Skills/Abilities:
Expertise
- Microsoft Azure infrastructure services, including cloud networking, security, identity integration, compute, storage, backup, monitoring, and hybrid connectivity.
- Traditional enterprise networking concepts and technologies, including TCP/IP, DNS, DHCP, VLANs, routing, switching, firewalls, VPNs, wireless networking, network segmentation, monitoring, troubleshooting, and performance optimization.
- SD-WAN and SASE products and principles
- Microsoft server support
- Microsoft Entra ID: Conditional Access, PIM, SSO, MFA
- On-prem Microsoft Active Directory
- PowerShell scripting and automation
Familiarity
- Microsoft Azure Site Recovery
- Modern identity protocols (SAML / OAuth 2.0 / OIDC)
- SQL infrastructure support
- Linux distributions
- Information and application security concepts, including public key encryption, identity and access management technologies, and certificate-based authentication
- Cybersecurity Vulnerability management and remediation
- Microsoft 365 administration, including Exchange Online, SharePoint, OneDrive, Teams, identity integration, security, compliance, licensing, and tenant management.
- SAN and NAS Enterprise storage
- VMWare and Hyper-V virtualization management
- Python automation