Sr. Infrastructure Engineer

Overview

Position Summary: The Senior Infrastructure Engineer is responsible for designing, implementing, and maintaining enterprise systems and network infrastructure. This role combines advanced expertise in server administration, virtualization, storage, and networking to ensure high availability and performance across the organization’s IT environment.

Role details: The role handles end-to-end ownership of the organization’s cybersecurity posture, ensuring the confidentiality, integrity, and availability of all information systems. This includes developing and executing the cybersecurity strategy, overseeing security operations, managing risk, ensuring regulatory compliance, and leading incident response efforts.

• Design, configure, and maintain LAN/WAN infrastructure, including routers, switches, and firewalls.
• Implement and manage VPNs, VLANs, QoS, and network segmentation.
• Monitor network performance and troubleshoot connectivity issues.
• Maintain network security through Palo Alto firewall policies, intrusion prevention, and access controls.
• Support VoIP systems and network-based services.

• Implement, maintain, and improve security configurations across firewalls, servers, endpoints, VPNs, and cloud services.
• Lead response to cybersecurity incidents, coordinate cross‑functional teams, communicate impacts, and ensure post‑incident reviews.
• Manage identity and access security (MFA, conditional access, privileged access).
• Work with cybersecurity 3rd party security vendor to apply best practices.
• Assist in vulnerability assessments and remediation.
• Maintain compliance with TSA Cyber policies and internal IT standards.
• Lead annual TSA Cyber audits.

• Design, deploy, and maintain Windows Server environments, Active Directory, and Group Policy.
• Assist with managing virtualization platforms (VMware ESXi, vCenter) and storage systems (SAN/NAS).
• Oversee backup and disaster recovery solutions.
• Administer Microsoft 365, Exchange, and enterprise applications.
• Ensure compliance with Windows security standards and patch management.

• Lead infrastructure upgrade projects (e.g., VMware, Windows, network refresh).
• Provide technical guidance and mentorship to junior staff.
• Document architecture, configurations, and operational procedures.

• Provide senior-level guidance to IT teams across network, systems, and security disciplines.
• Act as final escalation point for critical incidents affecting networking or system infrastructure.
• Serve as the technical contact for ATT&T, Comcast, and TDS services.
• Participate in on-call rotation for critical systems and network support.

• Judgment and initiative are necessary in setting priorities to meet deadlines and to deal with non-standard situations.
• Frequent telephone, electronic, and personal contact with co-workers.

• 10+ years of experience in advanced systems engineering and networking.
• Advanced knowledge of:
  • Firewall technologies and advanced security features.
  • Expertise with Windows Server, Active Directory, DNS/DHCP, Group Policy, Power Shell.
  • The VMware vSphere platform and its related virtualization environments.
  • Windows Server, AD, DNS, DHCP, GPO, and identity platforms.
  • Pure Storage platforms, SAN replication, and SRM DR technologies.
  • Layer 2/3 networking, routing protocols (BGP, OSPF), VLANs, spanning tree.
• Proven experience leading infrastructure projects and implementing large-scale upgrades.
• Ability to manage complex outages, root cause investigations, and multi-team coordination.

None

• Majority of time spent at low activity level, i.e., sitting.
• Occasional standing/walking/movement required.

Disclaimer: The above information indicates the general nature and level of work performed by employees within this classification. It is not a comprehensive inventory of duties and/or responsibilities associated with this position. Generally, each job function is considered essential to this position and any incumbent must be capable of performing them.