Infrastructure Engineer

Watsco; Miami (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

Watsco seeks an Infrastructure, Cloud & Identity Engineer to own the architecture, reliability, lifecycle, and modernization of networks, servers, cloud platforms, Microsoft 365, identity, backup, and core infrastructure. The role blends hands‑on operations with automation and project leadership while retaining internal ownership of partner‑delivered solutions.

The position requires 5+ years of infrastructure experience and deep expertise in Active Directory, Entra ID, M365, Azure/AWS, and IaC.

Qualifications

• 5+ years of progressive infrastructure, systems, cloud, network, or identity engineering experience, including production ownership and complex troubleshooting.
• Strong experience with Active Directory, Entra ID, Microsoft 365, Windows Server, virtualization, DNS/DHCP, backup/recovery, TCP/IP, VLANs, routing, VPN, wireless, and cloud administration.
• Experience planning and executing upgrades, migrations, change windows, testing, rollback, monitoring, documentation, and vendor escalations.
• Proficiency with PowerShell or comparable automation and a sound understanding of least privilege, hardening, logging, vulnerability remediation, and business continuity.
• Ability to participate in scheduled after‑hours maintenance and critical incident response.

Responsibilities

• Administer Active Directory, Entra ID, MFA, and CA workflows.
• Operate Microsoft 365 tenant services including Exchange Online, SharePoint, OneDrive, Teams.
• Engineer and support physical/virtual servers, DNS/DHCP, backups, monitoring, patching, migrations.
• Own networking: switching, routing, VPN, VLANs, IP addressing, firewall coordination.
• Administer Azure, AWS, cloud resources, cost optimization, logging, automation.
• Operate backup and disaster recovery technologies and test restores.
• Maintain architecture diagrams, inventories, lifecycle plans, change docs.
• Automate admin tasks using scripts or IaC with peer review.
• Lead upgrades, migrations, and reliability projects with partners.
• Provide Level 2/3 escalation and incident response support.

Skills

Active Directory

Entra ID

Microsoft 365

Windows Server

virtualization

DNS/DHCP

backup/recovery

TCP/IP

VLANs

routing

VPN

wireless

Azure

AWS

infrastructure-as-code

PowerShell

least privilege

hardening

logging

vulnerability remediation

after-hours maintenance

Tools

VMware/Hyper-V

Cisco/Aruba/Fortinet

backup-platform

Job description

Description

Watsco Inc. is the largest distributor of air conditioning, heating and refrigeration equipment and related parts and supplies in the HVAC/R distribution industry. We serve over 125,000 contractor-customers through our nearly 700 locations where more than 7,400 team members bring essential, sustainable comfort to families and businesses across the Americas. At Watsco, we recognize our responsibility to help drive the transition to a lower carbon future. That’s why we are committed to providing high efficiency, low carbon HVAC equipment and energy-saving parts and supplies to households and businesses across the Americas. Since January 2020, Watsco’s sales of high efficiency equipment has reduced future CO2e emissions by over 19.2 M MT. Learn more about our impact and how you can become part of this transformation at www.watsco.com/environment

Position Summary

Seeking an Infrastructure, Cloud & Identity Engineer to own the architecture, reliability, lifecycle, and modernization of networks, servers, cloud platforms, Microsoft 365, identity, backup, and core infrastructure. The role combines hands‑on operations with automation and project leadership while retaining internal ownership of partner‑delivered solutions.

Key Responsibilities

• Administer Active Directory, Entra ID, synchronization/federation, SSPR, MFA, Conditional Access, privileged identity, service accounts, and automated joiner‑mover‑leaver workflows.
• Operate Microsoft 365 tenant services, including Exchange Online, SharePoint, OneDrive, Teams, mail flow, shared resources, licensing, service health, retention configuration, and vendor cases.
• Engineer and support physical/virtual servers, hypervisors, storage, file services, DNS, DHCP, certificates, monitoring, capacity, patching, upgrades, migrations, and secure decommissioning.
• Own switching, routing, wireless, WAN, VPN, VLANs, IP addressing, network monitoring, configuration backups, firmware lifecycle, and carrier/vendor escalation; coordinate firewall controls with Security.
• Administer Azure, AWS, and approved cloud resources, including subscriptions/accounts, networking, identity integration, tagging, monitoring, backup, cost optimization, logging, and infrastructure automation.
• Operate backup and disaster‑recovery technology; monitor jobs, protect immutable/offsite copies, test restoration and failover, maintain recovery runbooks, and remediate gaps.
• Maintain infrastructure inventory, architecture diagrams, dependency maps, standards, lifecycle plans, support dates, and change/rollback documentation.
• Automate repeatable administration using secure, version‑controlled scripts or infrastructure‑as‑code with peer review, monitoring, documentation, and rollback.
• Lead network restructuring, server upgrades, identity modernization, cloud migrations, backup modernization, and reliability projects; manage technical partners and require design, as‑built documentation, testing, and knowledge transfer.
• Provide Level 2/3 escalation, root‑cause analysis, major‑incident support, vulnerability remediation, and short‑term service‑desk backup without becoming the routine frontline queue.

Qualifications

Required Qualifications

• 5+ years of progressive infrastructure, systems, cloud, network, or identity engineering experience, including production ownership and complex troubleshooting.
• Strong experience with Active Directory, Entra ID, Microsoft 365, Windows Server, virtualization, DNS/DHCP, backup/recovery, TCP/IP, VLANs, routing, VPN, wireless, and cloud administration.
• Experience planning and executing upgrades, migrations, change windows, testing, rollback, monitoring, documentation, and vendor escalations.
• Proficiency with PowerShell or comparable automation and a sound understanding of least privilege, hardening, logging, vulnerability remediation, and business continuity.
• Ability to participate in scheduled after‑hours maintenance and critical incident response.

Preferred Qualifications

• Experience with Azure and AWS, hybrid identity, Intune, firewalls, infrastructure‑as‑code, multi‑site networks, immutable backup, and regulated environments.
• Relevant Microsoft, Azure, AWS, Cisco/Aruba/Fortinet, VMware/Hyper‑V, or backup‑platform certification.
• Experience directing MSPs or professional‑services partners and transferring solutions into operations.

Working Conditions

This role may require scheduled after‑hours work, participation in incident response, and local travel as stated above. Duties may evolve with business needs. Reasonable accommodations will be provided in accordance with applicable requirements.