IT Infrastructure Engineer

Enterprise Electrical is seeking a Senior IT Infrastructure Engineer to provide technical ownership of the company’s Microsoft 365 environment, identity and access management, endpoint management, network infrastructure, cybersecurity controls, and data protection and recovery capabilities. As Enterprise Electrical continues to expand its internal IT department, this role will be responsible for designing, administering, documenting, and continuously improving secure, reliable technology infrastructure that supports corporate offices, company facilities, and active construction job sites.

Working closely with the company’s Managed Service Provider (MSP), the Senior IT Infrastructure Engineer establishes infrastructure standards, guides security and operational improvements, coordinates technical projects, and ensures that systems align with business objectives, cybersecurity requirements, and operational needs. This role serves as the organization's internal infrastructure subject matter expert, focusing on architecture, security, resilience, governance, and long-term technology strategy while supporting escalated operational issues as needed.

Key Responsibilities

Microsoft 365, Identity & Endpoint Management

• Design, administer, and maintain Microsoft 365 tenant architecture and configuration standards across Microsoft Entra ID, Exchange Online, Teams, SharePoint, OneDrive, and Intune.
• Manage identity lifecycle processes, including onboarding, role changes, offboarding, guest access, directory services, and hybrid synchronization where applicable.
• Administer least-privilege access models, privileged roles, service accounts, emergency access procedures, and MSP administrative access.
• Design, test, deploy, and maintain Conditional Access policies supporting multifactor authentication (MFA), device compliance, location-based policies, and risk-based access controls.
• Manage Microsoft Intune enrollment, Autopilot deployments, compliance policies, security baselines, application deployment, endpoint protection, encryption, and update management.
• Configure and maintain Microsoft Defender for Office 365 capabilities, including anti-phishing, Safe Links, Safe Attachments, quarantine management, and email security standards.
• Implement and support Microsoft Purview capabilities, including sensitivity labels, retention policies, data loss prevention (DLP), and information governance controls.
• Monitor Microsoft Secure Score, tenant health, and security recommendations while prioritizing remediation initiatives based on business risk.

Security & Operational Resilience

• Develop and maintain security baselines across identities, endpoints, servers, networks, and email systems using industry best practices and security frameworks.