Infrastructure Engineer

Overview

Infrastructure Engineer responsible for the day-to-day administration, maintenance, and continuous improvement of the Microsoft Azure cloud environment and Microsoft Intune endpoint platform. The role includes managing legacy on-premise systems with a view to transitioning workloads to Azure in a structured, low-risk manner. The position is based in New York, NY (On-site) and is full-time and non-union.

• Administer and maintain the established Microsoft Azure environment — including virtual machines, virtual networks, storage accounts, subscriptions, and resource groups — ensuring stability, performance, and cost efficiency.
• Manage Azure Active Directory (Entra ) including user lifecycle management, role-based access control, conditional access policies, and SSO integrations.
• Monitor and maintain Azure-based services including Azure Monitor, Azure Backup, Azure Site Recovery, and Log Analytics work spaces — proactively addressing alerts and ensuring service health.
• Regularly review the Azure environment against Microsoft best practices and Well-Architected Framework principles, identifying and proposing improvements to security, reliability, and operational efficiency.
• Document the current environment thoroughly and maintain up-to-date architecture records, runbooks, and change logs.

• Administer and maintain the Intune environment, ensuring device enrollment, compliance policies, and configuration profiles remain accurate and up to date.
• Monitor endpoint compliance across Windows and macOS devices, investigating and resolving non-compliant devices and policy gaps in a timely manner.
• Review and fine-tune application deployment pipelines, Autopilot workflows, and conditional access policies to reduce friction and strengthen governance.
• Identify opportunities to enhance the Intune configuration and implement changes aligned with industry best practices and Microsoft guidance.
• Serve as the internal subject matter expert for Intune, advising the IT team on endpoint management standards and promoting consistent practices.

• Support and maintain LAN/WAN infrastructure, VPN connectivity, and network segmentation across office and venue locations.
• Monitor infrastructure health, performance, and capacity; respond to and resolve alerts proactively.
• Implement and enforce security best practices across all infrastructure layers, including patch management, access control, and vulnerability remediation.
• Participate in infrastructure-related incident response, root cause analysis, and post-incident documentation.

• Lead and contribute to infrastructure improvement projects, including migrations, upgrades, and new technology rollouts.
• Produce and maintain clear technical documentation, including runbooks, architecture diagrams, and change records.
• Collaborate with IT, Development, and Security teams on cross-functional initiatives, providing infrastructure expertise as needed.
• Evaluate new technologies and make recommendations aligned with business goals and long-term infrastructure strategy.

• 3-5 years of experience in an infrastructure engineering, cloud engineering, or systems administration role.
• Solid hands-on experience administering Microsoft Azure environments — including virtual machines, virtual networks, Entra , Azure Monitor, and Azure Backup.
• Proven experience managing and optimizing Microsoft Intune environments — including Autopilot, compliance policies, configuration profiles, and app deployment.
• Strong working knowledge of Azure Active Directory / Entra  — including conditional access, RBAC, and SSO integrations.
• Experience assessing legacy on-premise infrastructure and contributing to cloud migration planning and execution.
• Working knowledge of VMware virtualization (vSphere, ESXi, vCenter).
• Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPNs, and firewall concepts.
• Experience administering Windows Server environments — including Active Directory, Group Policy, DNS, and DHCP.
• A best-practice mindset — comfortable reviewing…