IT Operations Engineer

IT Operations Engineer

INIT Innovations in Transportation, Inc. is a leading provider of hardware, software, service, support, and operations management solutions for public transportation companies across North America. As a turnkey supplier, INIT develops, produces, installs, and maintains integrated hardware and software solutions for all key tasks required by transportation authorities, including fare collection systems, passenger counting, CAD/AVL systems, passenger information systems, and other Intelligent Transportation System solutions.

Our Information Technology team designs, builds, operates, and maintains infrastructure in support of INIT software solutions deployed for transit agency customers in major metropolitan areas including Atlanta, Houston, Los Angeles, San Diego, Seattle, Portland, Tampa, Honolulu, and more.

The IT Operations Engineer is a member of the IT Operations team responsible for the ownership and operation of complex infrastructure systems and services supporting INIT's customer-facing transit technology deployments. This position takes ownership of systems requiring ongoing judgment, architecture-level decisions, and active vendor management, operating with a high degree of independence and proactively identifying gaps and improvement opportunities across the infrastructure portfolio.

The IT Operations Engineer provides informal technical guidance to junior team members and collaborates closely with the IT Systems Engineering team on platform-level decisions.

Key Responsibilities

• Monitor Azure resource health, performance, availability, and cost across subscriptions; respond to alerts and proactively identify optimization opportunities.
• Author and maintain Power Shell automation for provisioning, configuration management, reporting, and remediation workflows.
• Manage Azure networking components including virtual networks, subnets, NSGs, peering, Azure Virtual WAN, Azure DNS, and Azure Private DNS to ensure secure and reliable connectivity across customer environments.
• Support Azure identity and access management including role-based access control, Managed Identities, and Key Vault access policies.
• Administer the broader Azure platform footprint, including Azure File Sync, Azure Backup, Azure Site Recovery, Log Analytics, Azure Storage, App Services, and (future) Azure Virtual Desktop.
• Administer and maintain Windows Server environments including installation, configuration, patching, performance monitoring, and capacity management.
• Manage Active Directory infrastructure including user and group administration, Group Policy Objects, DNS, DHCP, and organizational unit structure.
• Administer VMware vSphere environments including vCenter, ESXi hosts, virtual machine lifecycle management, storage, and networking.
• Monitor resource utilization and performance across VMware environments; identify and implement optimization opportunities.
• Operate application and API delivery infrastructure, including F5 BIG-IP, Azure Application Gateway, and API Management, ensuring high availability, performance, and reliability for customer-facing transit systems.
• Administer Cloudflare, including DNS, WAF, and Cloudflare Zero Trust - Access policy management, Tunnel configuration, and device posture enforcement.
• Manage SSL/TLS certificate lifecycle and reverse proxy configuration across delivery infrastructure.
• Support identity federation and SAML-based authentication for published applications.
• Configure and manage health monitoring for application pools and endpoints; respond to availability alerts and coordinate remediation to maintain service continuity.
• Troubleshoot application delivery issues include traffic routing, virtual server configuration, and end-to-end connectivity problems.
• Manage endpoint devices using Microsoft Intune, including device enrollment, compliance policies, configuration profiles, and application deployment.
• Support user onboarding and offboarding processes including device provisioning, account lifecycle management, and access controls.
• Administer, standardize, and tune Solar Winds and Pager Duty across managed environments, including alert tuning and false-positive reduction.
• Develop KPIs and dashboards covering availability, performance, and capacity monitoring, including synthetic monitoring of customer-facing endpoints.
• Produce executive-level operational reporting, root cause analysis, and trend analysis to support recurring issue resolution and capacity planning.
• Administer Microsoft Entra , including identity synchronization, Conditional Access policy implementation, Privileged Identity Management (PIM), and identity lifecycle management.
• Vulnerability remediation and patch management across Windows Server, VMware, Azure, and endpoint environments.
• Administer EDR and endpoint/server security platforms
  -Microsoft Defender, ESET, or equivalent
  -including antivirus, anti-malware, and file integrity monitoring.
• Monitor security dashboards and alerts; investigate detections, participate in…