Senior Infrastructure Engineer

Paschal Home Services is a privately held, non–private equity backed home services provider, still growing with 13 locations and 400+ employees. We are building something designed to last—focused on long-term growth, best-in-class culture, and doing things the right way. 

We are seeking an experienced Senior Infrastructure Engineer to own the architecture, security, and reliability of the core network and systems infrastructure supporting our growing organization. This is a hands-on engineering role spanning enterprise networking, cybersecurity, Microsoft cloud and identity, Windows infrastructure, and core network services. 

You will work alongside our Technical Support Analysts, providing technical leadership, architectural direction, and escalation support while they handle much of the day-to-day Microsoft 365, endpoint, and user administration. This role is responsible for the design and health of the overall environment, with direct ownership of networking and core infrastructure services. 

We are looking for an engineer who takes ownership, solves problems at their root cause, and continually improves how our technology environment is designed, secured, documented, and operated. 

What You'll Do 

Network Engineering & Security 

• Design, implement, and support multi-site wired and wireless infrastructure using Ruckus Networks. 

• Configure and maintain Fortinet/FortiGate firewalls, VPNs, security policies, and related Fortinet technologies. 

• Manage routing, switching, VLANs, wireless, site-to-site connectivity, NAT, and firewall services. 

• Own DNS and DHCP architecture, configuration, availability, and troubleshooting. 

• Monitor network performance and security, troubleshoot complex issues, and perform root-cause analysis. 

• Plan and execute network expansions, equipment refreshes, firmware upgrades, and new-location deployments. 

• Maintain network diagrams, configurations, standards, and recovery documentation. 

Infrastructure, Identity & Core Services 

• Own the architecture, security, and overall health of Microsoft 365, Active Directory, Microsoft Entra ID, and Windows Server infrastructure. 

• Design identity and access standards including MFA, Conditional Access, role-based access, privileged access, and Group Policy. 

• Engineer and maintain core infrastructure services including DNS, DHCP, file services, Group Policy, and hybrid identity. 

• Provide technical leadership and escalation support to the Technical Support Analysts for Microsoft cloud, identity, endpoint, and user administration. 

• Lead infrastructure upgrades, migrations, patching strategy, backup/recovery planning, and lifecycle management. 

• Troubleshoot and resolve complex identity, authentication, server, file-service, and cloud infrastructure issues. 

Infrastructure, Security & Improvement 

• Develop infrastructure standards that improve security, reliability, scalability, and operational consistency. 

• Lead infrastructure deployments, migrations, upgrades, technology refreshes, and new-location implementations. 

• Identify technical risks and implement improvements related to security, system hardening, backup/recovery, and disaster recovery. 

• Evaluate new technologies and vendors and make recommendations based on business value, security, reliability, and cost. 

• Automate repetitive administration and engineering tasks using PowerShell and other appropriate tools. 

• Serve as the highest level of technical escalation for infrastructure, networking, and systems issues. 

What You'll Bring 

• 5+ years of professional experience in network engineering, systems engineering, infrastructure engineering, or a comparable role. 

• Strong hands-on experience with Fortinet/FortiGate firewalls and Ruckus Networks switching and wireless infrastructure. 

• Strong networking fundamentals including TCP/IP, subnetting, VLANs, routing, switching, DNS, DHCP, NAT, VPNs, and firewall technologies. 

• Strong working knowledge of Microsoft 365, Active Directory, Group Policy, Microsoft Entra ID, and Windows Server. 

• Experience designing and supporting identity security controls such as MFA and Conditional Access. 

• Strong understanding of cybersecurity fundamentals including segmentation, least privilege, system hardening, vulnerability management, and secure administrative practices. 

• Strong troubleshooting skills across networking, systems, identity, and cloud services, with the ability to take ownership through resolution. 

• Strong communication and technical documentation skills, including the ability to provide technical guidance to support staff. 

Preferred Experience & Certifications 

Demonstrated technical ability and hands-on experi