Sr. Infrastructure Engineer

Position Summary:
The Senior Infrastructure Engineer is responsible for designing, implementing, and maintaining enterprise systems and network infrastructure. This role combines advanced expertise in server administration, virtualization, storage, and networking to ensure high availability and performance across the organization's IT environment.

The role handles endtoend ownership of the organization's cyber security posture, ensuring the confidentiality, integrity, and availability of all information systems. This includes developing and executing the cybersecurity strategy, overseeing security operations, managing risk, ensuring regulatory compliance, and leading incident response efforts.

Job Functions:
Network Engineering

• Design, configure, and maintain LAN/WAN infrastructure, including routers, switches, and firewalls.
• Implement and manage VPNs, VLANs, QoS, and network segmentation.
• Monitor network performance and troubleshoot connectivity issues.
• Maintain network security through Palo Alto firewall policies, intrusion prevention, and access controls.
• Support VoIP systems and network-based services.

Cyber Security & Compliance

• Implement, maintain, and improve security configurations across firewalls, servers, endpoints, VPNs, and cloud services.
• Lead response to cybersecurity incidents, coordinate crossfunctional teams, communicate impacts, and ensure postincident reviews.
• Manage identity and access security (MFA, conditional access, privileged access).
• Work with cybersecurity 3^rd party security vendor to apply best practices.
• Assist in vulnerability assessments and remediation.

• Maintain compliance with TSA Cyber policies and internal IT standards.
• Lead annual TSA Cyber audits.

Systems Engineering

• Design, deploy, and maintain Windows Server environments, Active Directory, and Group Policy
• Assist with managing virtualization platforms (VMware ESXi, vCenter) and storage systems (SAN/NAS)
• Oversee backup and disaster recovery solutions.
• Administer Microsoft 365, Exchange, and enterprise applications.
• Ensure compliance with Windows security standards and patch management.

Project Leadership

• Lead infrastructure upgrade projects (e.g., VMware, Windows, network refresh)
• Provide technical guidance and mentorship to junior staff.
• Document architecture, configurations, and operational procedures.

Cross-Functional Support

• Provide senior-level guidance to IT teams across network, systems, and security disciplines.
• Act as final escalation point for critical incidents affecting networking or system infrastructure.

• Serve as the technical contact for ATT&T, Comcast, and TDS services.
• Participate in on-call rotation for critical systems and network support.

Required Competencies:

• Judgment and initiative are necessary in setting priorities to meet deadlines and to deal with non-standard situations.
• Frequent telephone, electronic, and personal contact with co-workers.

Education & Experience:

Required

• 10+ years of experience in advanced systems engineering and networking.
• Advanced knowledge of:
  
  
  
  • Firewall technologies and advanced security features.
  • Expertise with Windows Server, Active Directory, DNS/DHCP, Group Policy, PowerShell.
  • The VMware vSphere platform and its related virtualization environments.
  • Windows Server, AD, DNS, DHCP, GPO, and identity platforms.
  • Pure Storage platforms, SAN replication, and SRM DR technologies.
  • Layer 2/3 networking, routing protocols (BGP, OSPF), VLANs, spanning tree.
  
  
  
  
• Proven experience leading infrastructure projects and implementing large-scale upgrades.
• Ability to manage complex outages, root cause investigations, and multi-team coordination

Supervisory Responsibilities:

None

Work Environment, Physical Demands & Travel:

• Majority of time spent at low activity level, i.e., sitting
• Occasional standing/walking/movement required

Disclaimer: The above information indicates the general nature and level of work performed by employees within this classification. It is not a comprehensive inventory of duties and/or responsibilities associated with this position. Generally, each job function is considered essential to this position and any incumbent must be capable of performing them.