Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

Lead Infrastructure Engineer (Microsoft Cloud & Cybersecurity)

Location: Denver, CO (Hybrid – Remote with Client Visits Throughout the Denver Metro Area)

Employment Type: Full-Time

Compensation: $110,000–$125,000 Base Salary + Target 10% Annual Performance Bonus

About PCG Systems

PCG Systems is a growing Managed IT and Cybersecurity company supporting businesses throughout Colorado and beyond. We specialize in Microsoft Cloud, Cybersecurity, Networking, Infrastructure Modernization, and Strategic IT Consulting for small and mid-sized businesses.

We're looking for an experienced Lead Infrastructure Engineer to become one of the senior technical leaders within our organization.

This role is responsible for designing, implementing, securing, and supporting complex client environments while helping establish technical standards, mentoring engineers, improving automation, and serving as a senior technical resource for the engineering team.

If you're looking for a traditional help desk role, this isn't it.

What You'll Do

As our Lead Infrastructure Engineer, you'll work directly with the Managing Partner and engineering team to deliver secure, reliable, and scalable technology solutions for our clients.

Responsibilities include:

Architect, deploy, and support Microsoft 365 environments

Design, implement, and support Microsoft Azure infrastructure

Design and administer Microsoft Entra ID and Microsoft Intune

Lead Microsoft 365 tenant migrations and cloud modernization projects

Design, configure, and support Fortinet security solutions

Configure business networking including VLANs, routing, switching, VPNs, wireless, and network security

Implement and support SentinelOne, Check Point Harmony Email & Collaboration, and other cybersecurity solutions

Design and support cloud backup and disaster recovery solutions

Develop PowerShell automation and scripting to improve efficiency

Lead infrastructure projects from planning through implementation

Troubleshoot and resolve complex Tier III infrastructure issues

Mentor engineers and help develop technical standards

Improve documentation and engineering processes within Hudu

Work directly with business owners and executive leadership on strategic technology initiatives

Required Technical Experience

Candidates should possess strong, hands-on experience across most of the following technologies.

Microsoft Cloud

Microsoft 365

Exchange Online

SharePoint Online

Microsoft Teams

OneDrive

Microsoft Entra ID

Microsoft Intune

Microsoft Azure

Azure Virtual Machines

Conditional Access

Multi-Factor Authentication

Microsoft Defender

Microsoft 365 Tenant Migrations

Networking

Fortinet Firewalls

FortiSwitch

FortiAP

VLAN Design

Routing & Switching

VPN Configuration

DNS

DHCP

Wireless Networking

Network Security Best Practices

Windows Infrastructure

Windows Server

Active Directory

Group Policy

Hyper-V and/or VMware

Storage & Virtualization

Server Migrations

Cybersecurity

SentinelOne

Check Point Harmony Email & Collaboration (Avanan)

Endpoint Detection & Response (EDR)

Email Security

Identity Security

Vulnerability Remediation

Security Hardening

Incident Response

Backup & Disaster Recovery

Experience supporting one or more enterprise cloud backup platforms, including:

Cove Data Protection

Datto BCDR

Axcient

Veeam

Microsoft 365 Backup Solutions

Cloud-to-Cloud Backup

Disaster Recovery Planning & Testing

MSP Platforms

Experience with one or more of the following:

Halo PSA (Preferred)

NinjaOne (Preferred)

Hudu

ConnectWise Control

ConnectWise Manage

Datto RMM

AutoTask

N-able

Automation

PowerShell

Microsoft Graph

Scripting

Process Automation

Minimum Qualifications

7+ years of professional IT experience

5+ years working for a Managed Services Provider (MSP)

Demonstrated experience leading Microsoft 365 migrations

Advanced Microsoft Azure administration experience

Advanced Fortinet administration experience

Strong networking design and troubleshooting experience

Experience leading infrastructure projects

Excellent written and verbal communication skills

Strong documentation habits

Valid driver's license and reliable transportation

Ability to travel throughout the Denver Metro area as needed

Preferred Certifications

Microsoft Certified: Azure Administrator Associate

Microsoft Certified: Azure Solutions Architect Expert

Microsoft 365 Administrator Expert

Fortinet NSE Certification

CISSP

Security+

Network+

What Success Looks Like

Successful engineers in this role:

Take ownership of complex client environments.

Design secure, scalable infrastructure with minimal oversight.

Build standards that improve consistency across all clients.

Mentor engineers and elevate the technical capability of the team.

Improve documentation and automation.

Build long-term client trust through professionalism and technical excellence.

Compensation & Benefits

$110,000–$125,000 Base Salary

Target 10% Annual Performance Bonus

Monthly Healthcare Reimbursement

401(k)

Paid Time Off

Paid Holidays

Company-provided equipment

Company-paid certifications and professional development

Hybrid work environment

Opportunity to help shape the future of PCG's engineering organization

Why PCG Systems?

We're building an engineering-first MSP.

We believe exceptional client service begins with exceptional engineers. We're investing in documentation, automation, standardization, mentorship, and professional development to build one of the strongest engineering teams in Colorado.

If you're looking for a role where you'll solve challenging technical problems, influence engineering standards, mentor others, and make a meaningful impact on a growing company - we'd love to meet you.

Job Summary

We are seeking a dynamic and highly skilled Lead Infrastructure Engineer specializing in Microsoft Cloud and Cybersecurity to drive our cloud transformation and security initiatives. In this pivotal role, you will lead the design, deployment, and management of scalable, secure, and resilient cloud infrastructure solutions across multiple platforms. Your expertise will empower our organization to leverage cutting-edge cloud services, optimize infrastructure operations, and ensure robust cybersecurity measures. This is an exciting opportunity to influence our cloud architecture strategy while fostering innovation and excellence within our IT teams.

Duties

Lead the development and implementation of cloud infrastructure architectures utilizing Microsoft Azure, AWS, Google Cloud Platform, and other public cloud services.

Design and manage hybrid cloud environments incorporating Virtual Private Clouds (VPCs), Virtual Machines (VMs), containers (Docker, Kubernetes), and serverless solutions to ensure scalability and high availability.

Drive automation of deployment processes using Infrastructure as Code (IaC) tools such as Terraform, Ansible, PowerShell, Bash scripting, and CI/CD pipelines with Jenkins or similar platforms.

Oversee the integration of cybersecurity best practices into cloud environments, including identity and access management (IAM), system hardening, encryption protocols, VPN configurations, and threat detection strategies.

Collaborate with software development teams to implement microservices architectures utilizing RESTful APIs, web services, and container orchestration tools to support SaaS and PaaS offerings.

Manage IT infrastructure components such as VMware, OpenStack, Citrix, Rackspace hosting environments, ensuring optimal performance through virtualization techniques.

Monitor system health, troubleshoot issues proactively, perform capacity planning for distributed systems, and implement scalable solutions aligned with business growth.

Requirements

Proven experience leading large-scale cloud infrastructure projects across multiple platforms including Microsoft Azure, AWS, Google Cloud Platform, or Rackspace.

Strong knowledge of service-oriented architecture (SOA), microservices development, RESTful APIs, web services integration, and cloud-native application design.

Hands-on expertise with virtualization technologies such as VMware, OpenStack, Docker containers, Kubernetes orchestration tools.

Proficiency in scripting languages including PowerShell, Bash (Unix shell), Python, Go or Ruby for automation purposes.

Deep understanding of cloud management tools like Terraform, Ansible, Puppet or Chef for Infrastructure as Code (IaC) deployment automation.

Familiarity with database systems such as MySQL, PostgreSQL, Oracle Database or Microsoft SQL Server for managing data-driven applications.

Experience implementing security protocols including identity and access management solutions (IAM), system hardening techniques for operating systems like Linux/Windows.

Knowledge of networking concepts such as VPNs, Virtual Private Networks; SDLC methodologies; DevOps practices; CI/CD pipelines; application deployment strategies; system scalability; NoSQL databases; Internet of Things (IoT); and software development life cycle processes.

Bachelor’s degree in Computer Science or related field; relevant certifications such as Microsoft Certified: Azure Solutions Architect Expert or AWS Certified Solutions Architect are highly desirable.

Join us to lead innovative cloud infrastructure initiatives that transform our technology landscape! We’re committed to fostering a collaborative environment where your expertise drives impactful change while offering opportunities for professional growth in a fast-paced digital world.

Pay: $110,000.00 - $125,000.00 per year

Benefits:

401(k)

401(k) matching

Flexible schedule

Health insurance

Paid time off

Tuition reimbursement

Application Question(s):

How many M365 tenant migrations have you personally led?

How many Fortinet firewall/network deployments have you personally completed?

How would you rate your Microsoft Azure administration experience? (Intermediate, Advanced, Expert)

How many years have you administered Microsoft Intune?

Which PSA and RMM platforms have you used?

Describe the most technically complex infrastructure project you personally designed and implemented (short answer is fine):

Describe a PowerShell script or automation you've written that improved operations or eliminated manual work (Short answer is fine):

What is your current compensation and desired compensation?

Experience:

MSP: 5 years (Required)

License/Certification:

CDL (Required)

Location:

Denver, CO 80202 (Required)

Work Location: Hybrid remote in Denver, CO 80202