Job Description

SENIOR IT INFRASTRUCTURE ENGINEER

Full Time / Part Time: Full Time
FLSA Classification: Exempt
Business Unit: IT
Reports to: Director, IT Infrastructure & Cybersecurity
Travel Requirement: Yes

The Senior IT Infrastructure Engineer is responsible for the design, implementation, operation, and security of the organization's hybrid infrastructure environment, including on-premises data centers, cloud platforms, networking, virtualization, storage, and identity services. This role serves as a senior technical resource responsible for ensuring high availability, scalability, performance, and cybersecurity across all infrastructure systems.

The ideal candidate possesses deep expertise in Microsoft technologies, virtualization, networking, cloud services, cybersecurity best practices, and infrastructure automation. The Senior IT Infrastructure Engineer will collaborate closely with cybersecurity, application, and business teams to deliver secure and resilient technology solutions that support business operations.

The essential job functions include, but are not limited to
• Design, implement, and maintain enterprise infrastructure across on-premises and cloud environments.
• Manage Windows Server, Linux, Active Directory, Office365, Microsoft Entra ID, DNS, DHCP, PKI, Group Policy, and related services.
• Administer virtualization platforms (VMware vSphere).
• Manage SAN, NAS, backup systems, disaster recovery platforms, and storage infrastructure.
• Develop and maintain infrastructure standards, documentation, and operational procedures.
• Ensure infrastructure scalability, performance, and high availability.
• Architect highly available, fault-tolerant, and scalable cloud solutions.
• Design and implement enterprise-scale Azure landing zones and subscription architectures.
• Develop hybrid infrastructure solutions by integrating on-premises data centers with Azure services.
• Design and support Microsoft Azure environments, including: Virtual Networks, Network Security Groups, Azure Resources Groups, Azure Firewall, Azure Site Recovery, Azure Backup, Azure Storage, Azure Virtual Machines, Microsoft Entra ID, Azure Virtual Desktop (AVD), Azure Storage Accounts, Azure Files, Azure NetApp Files, Azure Backup, Azure Site Recovery, Azure Key Vault, Azure Bastion, Azure Load Balancer, Azure Application Gateway, Azure Front Door, Azure DNS, Azure Monitor
• Support hybrid cloud connectivity between on-premises and cloud environments.
• Lead cloud migration, modernization, and optimization initiatives.
• Implement infrastructure security controls aligned with NIST, CIS, and industry best practices.
• Manage: Identity and access management, multi-factor authentication, privileged access controls, certificate management.
• Support vulnerability management, remediation, patch management, and security auditing.
• Partner with Cybersecurity team to investigate security events and support incident response activities.
• Implement security measures across the Azure environment, including Microsoft Defender for Cloud, Network Security Groups (NSGs), and Key Vault.
• Conduct regular security reviews and risk assessments of infrastructure platforms.
• Deploy and maintain infrastructure monitoring solutions.
• Create and support automation solutions using: PowerShell, Python, Azure Automation, Infrastructure-as-Code tools.
• Develop proactive monitoring, alerting, and reporting capabilities.
• Develop and maintain disaster recovery procedures.
• Perform periodic recovery testing.
• Ensure compliance with Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO).
• Serve as a senior escalation point for infrastructure incidents.
• Lead infrastructure projects from planning through implementation.
• Provide mentorship and technical guidance to engineers and administrators.
• Evaluate emerging technologies and recommend strategic improvements.

Other duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Requirements
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required:
• Bachelor's degree in computer science, Information Technology, or related field (or equivalent experience).
• 8+ years of progressive IT infrastructure experience.
• 5+ years supporting enterprise Microsoft environments including Windows Server, Active Directory, Microsoft Entra ID, Microsoft 365, Exchange Online, Teams, SharePoint Online, OneDrive, and related identity, collaboration, security, and compliance services.
• Strong experience with: Windows Server 2019/2022/2025, Active Directory, Microsoft Entra ID, VMware vSphere, Azure Infrastructure Services, Enterprise storage solutions, Backup and recovery platforms.
• Strong experience administering Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, OneDrive, Microsoft Entra ID, licensing, security, compliance, retention, and governance using Microsoft 365 admin centers and PowerShell.
• Strong understanding of user access management principles, RBAC, and least privilege concepts.
• Strong problem-solving and analytical skills to troubleshoot access-related issues and security incidents.
• Experience supporting infrastructure compliance requirements, audit readiness, evidence collection, and control remediation activities in regulated or security-sensitive environments.
• Effective communication and interpersonal skills to work collaboratively with cross-functional teams and end-users.
• Advanced understanding of networking concepts including TCP/IP, DNS, VLANs, VPNs, routing, and firewalls.
• Proficiency with cloud security concepts, governance and technologies.
• Hands-on experience with Azure DevSecOps and ability to integrate security practices into development workflows.
• Strong understanding of cybersecurity principles and infrastructure hardening.
• Experience creating automation using PowerShell or Python.

Select Values and Guiding Principles
• W: Working Safe
• A: Accountability
• T: Teamwork
• E: Excellence
• R: Respect

Top Tier Benefits
• Medical, dental, vision, coverage in addition to life and disability insurance plans.
• Paid Vacation Days and Paid Holidays.
• Retirement and Savings (401K) Plan with Company match.
• Referral bonus with no cap on amount of referrals.
• Paid Training.

Compensation Information
Compensation is competitive and commensurate with experience.

Physical Demands and Exposures
• This position works inside a climate-controlled environment a majority of the time. The Company will supply adequate training and equipment to perform the functions of the job. Some travel will be required.
• Monday – Friday, 8am-5pm.
• Involves sitting at a desk for extended periods of time.
• Needs high degree of concentration in a busy area.
• Ability to lift up to 25 lbs.

Select Water Solutions is an equal opportunity employer. It is Select’s policy to prohibit discrimination and harassment of any type and to afford equal employment opportunities to employees and applicants without regard to any protected class, status, characteristic, or activity. All employment decisions, including decisions regarding recruitment, selection, hiring, compensation, benefits, training, advancement, discipline, discharge, and other terms, conditions, and privileges of employment are made without regard to any lawfully protected class, status, characteristic, or activity.

Select Water Solutions requires all employees whose jobs may involve environmental compliance to understand and comply with the U.S. Environmental Protections Agency’s Clean Air Act that regulates air emissions from stationary and mobile sources. A copy of the Clean Air Act can be provided to you upon request from Human Resources.

Select Water Solutions participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, Select is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Select only uses E-Verify once you have accepted a job offer and completed the Form I-9.