Senior Infrastructure Engineer

Paschal Home Services is a privately held, non–private equity backed home services provider, still growing with 13 locations and 400+ employees. We are building something designed to last—focused on long-term growth, best-in-class culture, and doing things the right way.

We are seeking an experienced Senior Infrastructure Engineer to own the architecture, security, and reliability of the core network and systems infrastructure supporting our growing organization. This is a hands-on engineering role spanning enterprise networking, cybersecurity, Microsoft cloud and identity, Windows infrastructure, and core network services.

You will work alongside our

Technical Support Analysts, providing technical leadership, architectural direction, and escalation support while they handle much of the day-to-day Microsoft 365, endpoint, and user administration. This role is responsible for the design and health of the overall environment, with direct ownership of networking and core infrastructure services.

We are looking for an engineer who takes ownership, solves problems at their root cause, and continually improves how our technology environment is designed, secured, documented, and operated.

• Network Engineering & Security
• • Design, implement, and support multi-site wired and wireless infrastructure using
  
  Ruckus Networks.
• • Configure and maintain
  
  Fortinet/Forti Gate firewalls, VPNs, security policies, and related Fortinet technologies.
• • Manage routing, switching, VLANs, wireless, site-to-site connectivity, NAT, and firewall services.
• • OwnDNSandDHCParchitecture, configuration, availability, and troubleshooting.
• • Monitor network performance and security, troubleshoot complex issues, and perform root-cause analysis.
• • Plan and execute network expansions, equipment refreshes, firmware upgrades, and new-location deployments.
• • Maintain network diagrams, configurations, standards, and recovery documentation.

• • Own the architecture, security, and overall health of Microsoft 365,Active Directory,Microsoft Entra , and Windows Server infrastructure.
• • Design identity and access standards including MFA,Conditional Access, role-based access, privileged access, and Group Policy.
• • Engineer and maintain core infrastructure services includingDNS,DHCP,file services,Group Policy, and hybrid identity.
• • Provide technical leadership and escalation support to the Technical Support Analysts for Microsoft cloud, identity, endpoint, and user administration.
• • Lead infrastructure upgrades, migrations, patching strategy, backup/recovery planning, and lifecycle management.
• • Troubleshoot and resolve complex identity, authentication, server, file-service, and cloud infrastructure issues.

• • Develop infrastructure standards that improve security, reliability, scalability, and operational consistency.
• • Lead infrastructure deployments, migrations, upgrades, technology refreshes, and new-location implementations.
• • Identify technical risks and implement improvements related to security, system hardening, backup/recovery, and disaster recovery.
• • Evaluate new technologies and vendors and make recommendations based on business value, security, reliability, and cost.
• • Automate repetitive administration and engineering tasks using
  
  Power
  
  Shelland other appropriate tools.
• • Serve as the highest level of technical escalation for infrastructure, networking, and systems issues.

• • 5+ yearsof professional experience in network engineering, systems engineering, infrastructure engineering, or a comparable role.
• • Strong hands-on experience with Fortinet/Forti Gate firewalls and Ruckus Networks switching and wireless infrastructure.
• • Strong networking fundamentals includingTCP/IP, subnetting, VLANs, routing, switching,DNS,DHCP, NAT, VPNs, and firewall technologies.
• • Strong working knowledge of Microsoft 365,Active Directory,Group Policy,Microsoft Entra , and Windows Server.
• • Experience designing and supporting identity security controls such asMFAandConditional Access.
• • Strong understanding of cybersecurity fundamentals including segmentation, least privilege, system…