Senior Infrastructure Engineer

Senior Infrastructure Engineer

MSP4, LLC  |  Full-Time  |  Remote  |  Up to 25% Travel

About the Role

MSP4 operates as the embedded IT department for a portfolio of clients spanning professional services, legal, distribution, manufacturing, and government sectors. Environments range from 50 to 1,500 users and carry real compliance weight: CMMC L2, NIST 800-171, and SOC 2 are active requirements in this client base, not aspirational targets.

This role owns infrastructure delivery across that portfolio. You will design, implement, and support on-premise and hybrid cloud environments, working across bare metal, virtualization, SAN and HCI storage, backup and recovery, and hardened Windows Server configurations. Cloud work spans AWS, Azure Commercial, and Azure Government. You will work under the direction of our Principal Solutions Architect, who owns design authority. The expectation is clean execution, thorough documentation, and judgment that improves the environment, not the urge to rebuild it from scratch.

This is a remote role. Travel is required up to 25% for major client project deployments. Day-to-day work is executed remotely.

What You Will Do

• Deploy and maintain Windows Server environments on bare metal and virtualized platforms: VMware vSphere, Microsoft Hyper-V, and Proxmox
• Design and implement SAN and HCI solutions (NetApp, Pure Storage, Nutanix, VMware vSAN) and manage Mellanox/RDMA high-speed fabric infrastructure
• Architect and operate hybrid cloud environments across AWS, Azure Commercial, and Azure Government, covering IaaS, identity, and landing zone configurations
• Own Veeam-based backup and disaster recovery implementations: design, deployment, testing, and documentation
• Apply STIG hardening and NIST 800-171 controls across Windows Server environments in support of CMMC L2 and SOC 2 compliance requirements
• Support the infrastructure layer for enterprise business applications across the client base: legal practice management (TR Prolaw), petroleum distribution (iRely), manufacturing ERP platforms (Epicor, Infor SyteLine), and accounting and operations platforms (Sage 100, Sage 300). Windows Server, SQL Server, storage performance, and connectivity are your domain. The application runs on what you build and maintain.
• Own the SQL Server platform layer for client ERP and line-of-business applications: installation, licensing, patching and version upgrades, Always On Availability Groups or failover cluster instances, application-consistent backup coordination with Veeam, storage layout for tempdb, data, and log files, and baseline instance configuration. DBA-level query tuning, indexing strategy, and application-side schema work sit with client DBAs or application vendors. The instance and the infrastructure underneath it are yours.
• Support the infrastructure layer for Citrix Workspaces deployments: VDA compute and storage provisioning, machine catalog management, hypervisor integration, and ADC/NetScaler gateway configuration. Dedicated Citrix specialists on the team own application delivery and session configuration; your ownership is the layer underneath.
• Produce documentation that meets audit standards and enables other engineers to maintain what you build
• Travel to client sites up to 25% for major project-based deployments

What You Bring

• 6 or more years of infrastructure engineering experience in production environments across professional services, manufacturing, distribution, legal, or government sectors
• Deep Windows Server expertise: Active Directory, DNS, DHCP, Group Policy, PKI, and server lifecycle management. Not surface familiarity. Operational depth.
• Operational SQL Server depth: installation, patching, licensing model (core vs. CAL), Always On Availability Groups or Failover Cluster Instances, application-consistent backup coordination with Veeam, tempdb sizing, memory configuration, and storage layout for OLTP workloads. Not DBA-level query optimization or indexing strategy. Platform-level ownership of the instance and the environment it runs in.
• Hands-on virtualization experience across at least two platforms (VMware vSphere, Hyper-V, or Proxmox), including vMotion, HA, and DRS configuration
• Working knowledge of SAN and HCI storage: NetApp ONTAP, Pure Storage, Nutanix AHV, or VMware vSAN
• AWS and Azure deployment experience covering IaaS, Azure AD/Entra ID, ExpressRoute/VPN connectivity, and hybrid identity
• Veeam Backup & Replication design and administration experience
• Familiarity with STIG application, NIST 800-171 controls, and CMMC compliance requirements
• Ability to read and apply documentation, runbooks, and standards established by others without requiring constant design input
• Relevant certifications (Microsoft MCSA/MCSE/Azure, VMware VCP, or AWS SAA) are a plus, not a requirement
• Working familiarity with Citrix Workspaces at the infrastructure layer: VDA provisioning, machine catalog design, storage sizing for VDI workloads, and ADC/NetScaler at a working level. Application delivery configuration sits with dedicated specialists. You need enough Citrix context to support them without creating hand-off gaps.
• Ability to produce clear technical documentation: runbooks, build guides, change records, and audit-ready configuration documentation that another engineer can follow without asking you questions
• Prior experience in a multi-client service delivery environment is an advantage; comfort adapting to established standards across varied client environments matters here

How We Work

MSP4 does not operate like a traditional IT department or a ticket-centric help desk. We function as embedded IT leadership for our clients, accountable to their outcomes, not to our own preferences about how infrastructure should be built.

Our Principal Solutions Architect owns the design framework. Engineers at every level, including senior, operate within that framework. This is not a limitation. It is what allows us to maintain consistent, auditable, defensible environments across a complex multi-client portfolio. If you need to own every architectural decision to feel effective, this role is not the right fit. If you find satisfaction in executing at a high level, improving what you work on, and building client trust through reliability, it is.

We are building the operating model in real time. Some processes are documented; others are being written as we go. Senior engineers are expected to help shape what does not yet exist while executing reliably within what does.

We expect senior engineers to push back when something is wrong. We do not expect them to redesign based on personal preference.

About MSP4

MSP4, LLC provides infrastructure, security, and IT advisory services to mid-market professional services, manufacturing, distribution, legal, and government clients across the United States. Our commercial practice and regulated practice serve organizations with serious compliance requirements including SOC 2 Type II and CMMC Level 2.

We are a small team. Every person on it has direct impact on client outcomes. The ladder is tiered for scope and audit; access is not. Everyone here has direct access to everyone else, up to and including the CEO.