Infrastructure Engineer

Watsco Inc. is the largest distributor of air conditioning, heating and refrigeration equipment and related parts and supplies in the HVAC/R distribution industry. We serve over 125,000 contractor-customers through our nearly 700 locations where more than 7,400 team members bring essential, sustainable comfort to families and businesses across the Americas. At Watsco, we recognize our responsibility to help drive the transition to a lower carbon future. That’s why we are committed to providing high efficiency, low carbon HVAC equipment and energy-saving parts and supplies to households and businesses across the Americas. Since January 2020, Watsco’s sales of high efficiency equipment has reduced future CO2e emissions by over 19.2 M MT. Learn more about our impact and how you can become part of this transformation at www.watsco.com/environment

Position Summary

Seeking an Infrastructure, Cloud & Identity Engineer to own the architecture, reliability, lifecycle, and modernization of networks, servers, cloud platforms, Microsoft 365, identity, backup, and core infrastructure. The role combines hands-on operations with automation and project leadership while retaining internal ownership of partner-delivered solutions.

Key Responsibilities

• Administer Active Directory, Entra ID, synchronization/federation, SSPR, MFA, Conditional Access, privileged identity, service accounts, and automated joiner-mover-leaver workflows.
• Operate Microsoft 365 tenant services, including Exchange Online, SharePoint, OneDrive, Teams, mail flow, shared resources, licensing, service health, retention configuration, and vendor cases.
• Engineer and support physical/virtual servers, hypervisors, storage, file services, DNS, DHCP, certificates, monitoring, capacity, patching, upgrades, migrations, and secure decommissioning.
• Own switching, routing, wireless, WAN, VPN, VLANs, IP addressing, network monitoring, configuration backups, firmware lifecycle, and carrier/vendor escalation; coordinate firewall controls with Security.
• Administer Azure, AWS, and approved cloud resources, including subscriptions/accounts, networking, identity integration, tagging, monitoring, backup, cost optimization, logging, and infrastructure automation.
• Operate backup and disaster-recovery technology; monitor jobs, protect immutable/offsite copies, test restoration and failover, maintain recovery runbooks, and remediate gaps.
• Maintain infrastructure inventory, architecture diagrams, dependency maps, standards, lifecycle plans, support dates, and change/rollback documentation.
• Automate repeatable administration using secure, version-controlled scripts or infrastructure-as-code with peer review, monitoring, documentation, and rollback.
• Lead network restructuring, server upgrades, identity modernization, cloud migrations, backup modernization, and reliability projects; manage technical partners and require design, as-built documentation, testing, and knowledge transfer.
• Provide Level 2/3 escalation, root-cause analysis, major-incident support, vulnerability remediation, and short-term service-desk backup without becoming the routine frontline queue.

Required Qualifications

• 5+ years of progressive infrastructure, systems, cloud, network, or identity engineering experience, including production ownership and complex troubleshooting.
• Strong experience with Active Directory, Entra ID, Microsoft 365, Windows Server, virtualization, DNS/DHCP, backup/recovery, TCP/IP, VLANs, routing, VPN, wireless, and cloud administration.
• Experience planning and executing upgrades, migrations, change windows, testing, rollback, monitoring, documentation, and vendor escalations.
• Proficiency with PowerShell or comparable automation and a sound understanding of least privilege, hardening, logging, vulnerability remediation, and business continuity.
• Ability to participate in scheduled after-hours maintenance and critical incident response.

Preferred Qualifications

• Experience with Azure and AWS, hybrid identity, Intune, firewalls, infrastructure-as-code, multi-site networks, immutable backup, and regulated environments.
• Relevant Microsoft, Azure, AWS, Cisco/Aruba/Fortinet, VMware/Hyper-V, or backup-platform certification.
• Experience directing MSPs or professional-services partners and transferring solutions into operations.

Working Conditions

This role may require scheduled after-hours work, participation in incident response, and local travel as stated above. Duties may evolve with business needs. Reasonable accommodations will be provided in accordance with applicable requirements.