Position Overview:
The Senior IT Infrastructure Engineer is responsible for designing, implementing, supporting, and maintaining the organization’s core IT infrastructure across network, server, cloud, cybersecurity, identity, endpoint, and backup/disaster recovery environments. This role supports reliable, secure, and scalable IT operations while helping protect business systems, users, and data.
The position requires hands-on technical experience with enterprise infrastructure technologies, including firewalls, Fortinet, virtualization platforms, Nutanix, VMware, cloud services, identity platforms, endpoint management, cybersecurity tools, and IT service management systems.
Responsibilities
Network Infrastructure
- Design, configure, monitor, and support enterprise network infrastructure, including LAN, WAN, VPN, wireless, routing, switching, and firewall environments.
- Administer and troubleshoot Fortinet firewalls, VPNs, security policies, NAT rules, routing, IPS/IDS, and network segmentation.
- Support secure remote access technologies, including ZTNA solutions.
- Assist with network performance monitoring, capacity planning, and availability improvement.
- Maintain accurate network diagrams, firewall rules documentation, and infrastructure standards.
Server, Virtualization, and Data Center Infrastructure
- Manage Windows and Linux server environments, including patching, monitoring, performance tuning, and troubleshooting.
- Administer virtualization platforms such as VMware and Nutanix.
- Support compute, storage, and hyperconverged infrastructure environments.
- Perform system upgrades, migrations, lifecycle replacements, and infrastructure optimization.
- Maintain server hardening standards, baseline configurations, and operational documentation.
Cloud Infrastructure
- Support cloud environments in Microsoft Azure and AWS.
- Assist with cloud networking, identity integration, storage, compute, backup, security, and monitoring.
- Support hybrid infrastructure integrations between on-premises environments and cloud platforms.
- Assist with cloud security controls, access management, logging, and cost optimization.
Identity, Access, and Endpoint Management
- Administer Active Directory, Group Policy, DNS, DHCP, and related Windows infrastructure services.
- Support identity and access management platforms such as Okta and Microsoft Entra ID.
- Assist with SSO, MFA, conditional access, role-based access, and account lifecycle management.
- Support Microsoft Intune for endpoint enrollment, configuration profiles, compliance policies, application deployment, device security, and remote wipe.
- Maintain endpoint standards for laptops, desktops, and servers.
Cybersecurity Operations
- Support cybersecurity tools and processes across endpoint, email, network, identity, and cloud environments.
- Administer or support tools such as EDR/XDR, Darktrace, Mimecast, Microsoft Purview, Okta, Fortinet security features, and related monitoring platforms.
- Assist with vulnerability management, patch compliance, security alert triage, incident response, and remediation.
- Support data protection initiatives, including DLP, retention, classification, encryption, and secure file handling.
- Help maintain security documentation, evidence, and controls aligned with company policies and compliance requirements.
Backup, Disaster Recovery, and Business Continuity
- Manage backup and recovery platforms for servers, cloud systems, file shares, and critical applications.
- Support Backup/DR planning, testing, documentation, and recovery validation.
- Monitor backup jobs, troubleshoot failures, and ensure recovery objectives are met.
- Assist with disaster recovery exercises and infrastructure resilience improvements.
IT Operations and Service Management
- Use ServiceNow or similar ITSM platforms to manage incidents, requests, changes, problems, and operational tasks.
- Participate in change management, maintenance windows, root cause analysis, and escalation processes.
- Provide Tier 2/Tier 3 technical support for infrastructure-related issues.
- Collaborate with IT support teams, security teams, vendors, MSPs, and business stakeholders.
- Create and maintain technical documentation, runbooks, diagrams, standards, and procedures.
Qualifications
- 8+ years of hands-on experience in IT infrastructure, network, systems, cloud, or cybersecurity engineering.
- Strong experience supporting enterprise network and firewall environments, preferably Fortinet.
- Experience with VMware, Nutanix, or other virtualization/hyperconverged infrastructure platforms.
- Strong knowledge of Windows Server, Active Directory, Group Policy, DNS, DHCP, and file services.
- Experience with cloud platforms such as Microsoft Azure and AWS.
- Experience with identity platforms such as Okta, Microsoft Entra ID, SSO, and MFA.
- Experience with endpoint management tools such as Microsoft Intune.
- Working knowledge of cybersecurity tools, including EDR, email security, DLP, SIEM/NDR, and vulnerability management.
- Experience with backup, disaster recovery, and infrastructure monitoring tools.
- Familiarity with ITSM platforms such as ServiceNow.
- Strong troubleshooting, documentation, communication, and project execution skills.
- Experience with Fortinet firewalls, FortiGate VPN, FortiAnalyzer, or FortiManager.
- Experience with ZTNA platforms and secure remote access architectures.
- Experience with Microsoft Purview for data loss prevention, retention, classification, or compliance.
- Experience with Mimecast email security administration.
- Experience with Darktrace or similar network detection and response tools.
- Experience supporting regulated environments such as CMMC, NIST 800-171, ISO 27001, SOC 2, or ITAR-controlled environments.
- Experience with ServiceNow change, incident, and problem management.
About the Company:
Velo, Velo3D, Sapphire and Intelligent Fusion are registered trademarks of Velo3D, Inc. Without Compromise, Flow, Flow Developer, and Assure are trademarks of Velo3D, Inc.
With the only SupportFree laser powder bed fusion capability, we enable on-demand manufacturing of production quality Titanium, Inconel, and Aluminum parts with an unprecedented degree of design freedom and quality control. The VELO3D award-winning solution includes an integrated offering of hardware and software: Sapphire® metal AM production printer, Flow™ print preparation software, Assure™ quality assurance and control system, and an integrated manufacturing process that runs throughout the printing operation.
Our team enjoys excellent benefits including healthcare coverage and 401(K) employer contributions. We believe in transparency and recognizing exceptional efforts through our monthly all-hands meetings and team member appreciation awards.
Our job titles may span more than one career level. The starting base salary for this full-time position is between $120,000 and $180,000. This salary range reflects the minimum and maximum target for this position in the U.S. The actual base pay is dependent upon many factors, such as work experience, job-related skills, related education, work location, and market demands. The base pay range is subject to change and may be modified in the future. In addition to a competitive base salary and a comprehensive benefits package, this position may be eligible for other forms of compensation such as participation in a bonus and equity program, as applicable.
Velo3D provides equal employment opportunities to all employees and applicants for employment without regard to, and prohibits discrimination and harassment based on, race, color, religion, age, sex, national origin, disability, medical condition, genetic information, military or veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
