Senior Hybrid Infrastructure Engineer

WHAT YOU'LL DO Manage and maintain core Microsoft infrastructure services including Windows Server, Active Directory, DNS, DHCP, and file services; working knowledge of Linux; design and implement enhancements and dependent solutions as the environment evolves toward a unified hybrid infrastructure model. Administer, support, enhance, and implement new solutions for hypervisor and hyperconverged environments including Hyper-V and Azure Local; manage clustering and high availability configurations across both platforms. Administer and enhance storage platform configurations including NetApp SAN and HPE Nimble; leverage NetApp Cloud Insights for storage and compute monitoring. Administer existing SQL Server Enterprise platforms including high availability and disaster recovery configurations; design and implement new solutions spanning on-premises and Azure SQL services, with a horizon toward enhancing and extending on-premises clustering to Azure SQL instances as part of a broader hybrid database strategy. Administer and maintain data protection and recovery platforms including Rubrik Security Cloud, on-premises CDM appliances, and Azure Site Recovery as part of an integrated hybrid DR strategy. Administer and enhance security platforms including Tanium endpoint security and Microsoft Defender for Cloud; leverage Arc-enabled capabilities to extend security visibility and continuously improve security posture across hybrid environments. Manage and maintain certificate lifecycle and PKI infrastructure using Palo Alto certificate management; support public certificate management through DigiCert and assist in the design and delivery of enhanced certificate solutions as part of the broader hybrid infrastructure strategy. Administer and enhance infrastructure monitoring, alerting, and observability platforms including New Relic and Azure Monitor; respond to alerts and incidents while driving improvements to monitoring coverage and capabilities as legacy tools like SCOM are evaluated and replaced as part of the hybrid strategy. Administer, enhance, and where needed design and implement new solutions for secure file transfer and data services including Cerberus SFTP and associated file service platforms. Design, deliver, and maintain hybrid infrastructure solutions across Azure and Azure Arc environments using established IaC practices with Terraform, Terraform Cloud, and GitHub; implement supporting components including managed identities, Key Vault, diagnostic logging, and NSGs in compliance with established policies and standards. Contribute to the design and delivery of modular, self-service infrastructure solutions across the hybrid ecosystem that enable application teams and end users to consume services seamlessly across on-premises and cloud environments. Leverage AI-assisted workflows and tooling as an integral part of solution design, delivery, and maintenance — including code generation, automation, and documentation; contribute to the development of AI-driven engineering workflows including agentic capabilities as the hybrid infrastructure strategy evolves. Collaborate with application teams, security, and operations to deliver well-architected, production-ready solutions across both environments. REQUIRED SKILLS & EXPERIENCE 5+ years of hands-on experience managing enterprise on-premises infrastructure including Windows Server, Active Directory, DNS, DHCP, Hyper-V, and clustering. Experience with hyperconverged infrastructure solutions including Azure Local or equivalent. 3+ years of hands-on experience with Microsoft Azure working across compute, storage, networking, and governance within existing enterprise environments; working knowledge of Azure Arc and Azure Policy sufficient to build and deliver compliant hybrid infrastructure solutions. Solid understanding of core networking concepts including TCP/IP, DNS, VLANs, subnetting, and firewall rules sufficient to design and deliver hybrid infrastructure solutions alongside a dedicated network team. Demonstrated experience with enterprise storage platforms including NetApp SAN, HPE Nimble, or equivalent enterprise storage solutions. Experience managing SQL Server Enterprise environments including high availability and disaster recovery configurations. Experience with data protection and recovery platforms including Rubrik Security Cloud or equivalent; familiarity with Azure Site Recovery as part of a hybrid DR strategy. Experience with endpoint security and security posture tooling including Tanium and Microsoft Defender for Cloud. Experience with certificate lifecycle and PKI management in an enterprise environment. Experience with infrastructure monitoring and observability platforms including New Relic and Azure Monitor. Experience with Terraform and GitHub as part of an IaC-based delivery workflow. Experience with AI-assisted tooling in engineering workflows — code generation, automation, or documentation. Strong communication skills and the ability to translate business needs into technical solutions across both on-premises and cloud environments. NICE TO HAVE Experience with advanced Azure networking design including VNet architecture, ExpressRoute, and Private Link. Experience architecting and designing hyperconverged infrastructure solutions including Azure Local or equivalent. Experience building and managing CI/CD pipelines including pipeline design, workflow automation, and pipeline-as-code practices. Proficiency with Terraform module development, state management, and workspace organization using Terraform Cloud. Azure certifications (AZ-104, AZ-305, AZ-500, AZ-800, AZ-801). Familiarity with Azure PaaS services including App Services, Functions, API Management, and Front Door as part of end-to-end solution delivery. Experience with platform engineering practices and methodologies — building or consuming internal developer platforms and self-service infrastructure catalogs. Salary Range $132,000.00 - $165,000.00 USD (Salary) Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit. Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors. Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including: Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only Dental provided through UHC Nationwide Vision provided by UHC Flexible Spending Account for Health & Dependent Care Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific) Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera Corporate Wellness Program provided by Goomi Group Employee Assistance Program Wellness Days 401k Plan Basic and Supplemental Life Insurance Short Term & Long Term Disability Critical Illness, Critical Hospital, and Voluntary Accident Insurance Tuition Reimbursement (available 6 months after start date, capped) Paid Time Off (accrued and prorated, maximum of 120 hours annually) Paid Holidays Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law