IT Infrastructure Engineer

Agile Occupational Medicine is seeking a Systems & Network Administrator to support and maintain enterprise IT infrastructure across more than 40 outpatient medical clinics throughout California. This role is responsible for administering Microsoft 365 and Azure cloud services, enterprise networking, virtualization, endpoint management, cybersecurity, and core infrastructure while ensuring the availability, performance, and security of mission‑critical healthcare systems.

Reporting directly to the Senior Director of IT, this position serves as the primary technical escalation point for infrastructure‑related issues, collaborates closely with the Help Desk team, and participates in strategic initiatives including cloud modernization, mergers and acquisitions, security improvements, and infrastructure standardization.

The ideal candidate is hands‑on, enjoys solving complex technical problems, and is comfortable working independently in a fast‑paced, multi‑site healthcare environment.

Schedule: Hybrid work schedule, Monday through Friday, 8:00 AM to 5:00 PM, with onsite work required at the Corporate Office on Mondays and Wednesdays. Additional onsite attendance or travel to clinics may be required based on business needs.

Compensation: Starting compensation range is $-$ annually. Exact compensation may vary based on skills, experience, and location.

• Administer Microsoft 365 and Azure environments across multiple tenants.
• Manage Entra , Intune, Autopilot, Azure Virtual Desktop Host Pools, Azure Virtual Machines, One Drive, SharePoint Online, and Exchange Online.
• Configure Conditional Access, Microsoft Defender, MFA, Identity Protection, and security policies.
• Deploy and manage Windows endpoints using Microsoft Intune and Autopilot.

• Maintain Windows Server infrastructure, Active Directory, DNS, DHCP, Group Policy, Hyper‑V/VMware ESXi, and storage systems.
• Administer enterprise backup and disaster recovery solutions.
• Support legacy EMR infrastructure while assisting with modernization initiatives.
• Monitor system health, performance, and capacity planning.

• Design, implement, and maintain enterprise networking infrastructure.
• Administer Fortinet Forti Gate firewalls, Forti Switches, Cisco Meraki, Sonic Wall appliances, VPN connectivity, SD‑WAN, VLANs, routing, switching, and wireless infrastructure.
• Coordinate ISP installations, circuit upgrades, and network troubleshooting across multiple clinic locations.
• Work with low‑voltage vendors on new clinic openings, relocations, and expansions.

• Assist with HIPAA compliance initiatives and security audits.
• Perform vulnerability remediation and security hardening.
• Monitor Microsoft security tools and investigate security events.

• Provide Tier III infrastructure support and technical leadership for Help Desk escalations.
• Participate in mergers, acquisitions, and clinic integration projects.
• Assist with server migrations, tenant consolidations, and cloud migration initiatives.
• Develop and maintain infrastructure documentation, standards, and operating procedures.
• Participate in after‑hours maintenance windows and on‑call support when required.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or related field.
• Equivalent experience and industry certifications may substitute for a degree.
• 5+ years of enterprise Systems Administration experience.
• 3+ years administering Microsoft Azure and Microsoft 365.
• Experience with:
  Microsoft Entra , Intune, Autopilot, Azure Virtual Machines, Exchange Online, SharePoint Online
• Strong Windows Server and Active Directory administration.
• Experience managing enterprise firewalls and networking.
• Experience supporting multi‑site environments.
• Excellent troubleshooting and documentation skills.
• Strong customer service and communication abilities.

• Experience supporting healthcare organizations.
• Experience with HIPAA compliance.
• Experience with mergers and acquisitions.
• VMware ESXi experience.
• Microsoft Defender for Endpoint and Defender XDR.
• Power Shell scripting and automation.
• Experience supporting VoIP…