IT Infrastructure Engineer

Location: Hybrid Salary: 117K - 130K POSITION SUMMARY The IT Infrastructure Engineer designs, operates, secures, and continuously improves the company’s hybrid information technology infrastructure, including enterprise networking, cloud connectivity, servers, virtualization, storage, backup, identity integrations, and core infrastructure services. This role is responsible for the reliability, recoverability, performance, lifecycle, and secure configuration of both on-premises and cloud-based systems. This is a hybrid position based at the Watsonville, CA Headquarters, with weekly onsite presence required to support local network, server-room, connectivity, and hardware lifecycle activities. The engineer also supports infrastructure serving remote employees, cloud workloads, and company locations. The role collaborates closely with IT Operations, Security, application owners, and external service providers. The engineer uses automation, monitoring, documented standards, and disciplined change practices to reduce operational risk and improve service reliability. The role owns secure infrastructure configuration and lifecycle controls while partnering with the security function on architecture, vulnerability remediation, monitoring, incident response, and risk management. ESSENTIAL FUNCTIONS Reasonable Accommodations Statement To accomplish this job successfully, an individual must be able to perform, with or without reasonable accommodation, each essential function satisfactorily. Reasonable accommodations may be made to help enable qualified individuals with disabilities to perform the essential functions. Essential Function Statements  Design, administer, and support hybrid infrastructure including servers, virtualization, storage, backup, cloud resources, network services, and private connectivity.  Administer enterprise wired and wireless networks, switching, routing, firewalls, VPN, and zero-trust network access technologies.  Plan and execute operating system, hypervisor, firmware, network, and infrastructure software maintenance using documented testing, rollback, approval, and communication procedures.  Develop and maintain infrastructure automation using scripting, REST APIs, infrastructure-as-code, and configuration-management practices.  Store infrastructure configurations and automation in version control and participate in peer review, testing, and controlled deployment processes.  Implement and maintain monitoring, centralized logging, alerting, health dashboards, and capacity reporting for critical infrastructure and services.  Administer backup and recovery platforms and regularly validate recoverability through documented restoration and disaster-recovery testing.  Maintain infrastructure diagrams, dependency maps, runbooks, standards, reference configurations, lifecycle plans, and support documentation.  Implement secure configurations, least-privilege administration, segmentation, encryption, logging, and vulnerability remediation in partnership with the security team.  Support infrastructure-related security incidents by assisting with investigation, containment, recovery, evidence preservation, and corrective actions.  Provide Tier 2 and Tier 3 support for infrastructure incidents and requests, perform root-cause analysis, and remediate recurring issues.  Monitor infrastructure capacity, utilization, support status, warranties, certificates, licensing, technical debt, and end-of-life replacement requirements.  Apply cloud governance standards for resource organization, naming, tagging, access, logging, networking, lifecycle management, and cost accountability.  Evaluate proposed infrastructure technologies and solutions for reliability, supportability, security, integration, scalability, and total lifecycle cost.  Coordinate technical work performed by infrastructure vendors, carriers, managed service providers, and professional services partners.  Create operational documentation and provide cross-training to reduce single points of failure within the IT Operations team.  Participate in scheduled maintenance windows and infrastructure incident escalation as required.  Recommend and implement improvements that increase reliability, recoverability, security, efficiency, and operational maturity.  Stay current with evolving infrastructure technologies and industry best practices.  Other duties as assigned. Competency Statements  Accountable – Takes ownership of responsibilities, decisions, and outcomes and follows corrective actions through completion.  Independent – Works reliably with limited supervision while escalating risks, dependencies, and decisions appropriately.  Collaborative – Works effectively with IT peers, security teams, business stakeholders, vendors, and service providers.  Detail Oriented – Demonstrates precision in documentation, configuration, testing, change execution, and validation.  Technical – Applies strong troubleshooting, diagnostic, systems-thinking, and root-cause analysis skills.  Curious – Continuously develops technical knowledge and identifies practical ways to improve infrastructure operations.  Customer Oriented – Balances user and business needs with reliability, security, supportability, and company standards.  Resilient and Solutions-Oriented – Responds constructively to incidents, ambiguity, changing priorities, and technical setbacks.  Risk-Aware – Considers security, availability, recoverability, compliance, and business impact when making technical decisions.  Operationally Disciplined – Uses documentation, testing, peer review, change controls, and validation to reduce avoidable production risk. SKILLS & ABILITIES  Windows and Linux server administration in physical, virtualized, and cloud-hosted environments.  Enterprise virtualization platforms such as VMware, Hyper-V, or equivalent technologies.  Network configuration and troubleshooting including TCP/IP, routing, switching, VLANs, DNS, DHCP, firewalls, wireless, and private connectivity.  Backup and recovery platforms such as Cohesity or Veeam, including restoration and recovery testing.  Microsoft Azure and Entra ID administration in a hybrid identity and infrastructure environment.  Experience with AWS or another public-cloud platform is preferred.  Infrastructure automation using PowerShell, Python, REST APIs, or equivalent technologies.  Familiarity with infrastructure-as-code tools such as Terraform, Bicep, Ansible, or equivalent.  Experience with Git-based version control, peer review, and controlled deployment workflows.  Infrastructure monitoring, centralized logging, alerting, dashboards, and performance/capacity analysis.  Identity and access fundamentals including role-based access control, multifactor authentication, SAML, OIDC, and SCIM.  Experience with VPN and zero-trust network access platforms, preferably Cloudflare Zero Trust or 7/30/26 equivalent.  Understanding of enterprise storage, file services, object storage, data lifecycle, permissions, synchronization, retention, and migration concepts.  Knowledge of infrastructure security baselines, least privilege, vulnerability remediation, network segmentation, encryption, and secure administrative practices.  Experience with change management, root-cause analysis, technical documentation, operational runbooks, and lifecycle planning.  Strong written and verbal communication skills, including the ability to explain technical risks and recommendations to nontechnical stakeholders.  Strong organizational skills and the ability to prioritize operational work, incidents, maintenance, and project deliverables.  Experience supporting multisite, manufacturing, warehouse, or regulated environments is preferred. Other Requirements  Education: Bachelor’s degree in Computer Science, Information Systems, or a related field, or an equivalent combination of professional experience, training, and relevant certifications.  Experience: Minimum of 5 years of progressive experience in IT infrastructure engineering, systems administration, network engineering, or a comparable role.  Ability to work onsite at Watsonville HQ on a weekly basis and participate in scheduled after-hours maintenance or incident escalation when required.