IT Infrastructure Engineer | Hudson Tunnel Project

Platinum Global Talent Solutions Ltd.; New York (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

Platinum Global Talent Solutions Ltd. in the United States is seeking an IT Infrastructure Engineer to support the Hudson Tunnel Project, a high-profile, cloud-first environment.

You will administer Microsoft 365, endpoint management, networking, and cloud infrastructure, providing Tier 2/3 support and leading security improvements.

Candidate should have 10+ years of hands-on IT infrastructure experience and strong communication to document procedures and collaborate with vendors.

Qualifications

• Over 10 years of experience in IT infrastructure or related hands-on role.
• Strong experience with Microsoft 365 services including Entra ID, Intune, Exchange Online, Teams, SharePoint Online.
• Expertise in Windows 11, device lifecycle management, and endpoint configuration.

Responsibilities

• Administer and maintain systems, cloud services, file services, and infrastructure.
• Provide Tier 2/3 support for complex hardware, software, identity, connectivity, and app issues.
• Manage endpoint and identity with Microsoft Entra ID, Intune, and policy configurations.
• Administer and secure Microsoft 365 services and optimize collaboration across the org.
• Lead security monitoring, patch management, and incident response using standard tools.

Skills

Cloud infrastructure

Microsoft 365 administration

Windows 11 management

End user support

Identity & access management

PowerShell scripting

Networking (Cisco Meraki)

Security monitoring

Documentation

Automation

Education

Bachelor's degree in IT or related field

Tools

NinjaOne

Microsoft Entra ID

Intune

Azure Virtual Desktop

Job description

About the Company & Role

Our client is a leading global consultancy renowned for delivering high-profile, complex, iconic, large-scale capital projects.

We're looking for a dynamic and motivated IT Infrastructure Engineer to join our growing team. In a full-time, permanent role, you will initially be working on the Hudson Tunnel Project. If you're excited to build real world experience in a modern, cloud first environment, this role gives you the foundation to grow fast. You'll serve as a senior technical resource to help maintain, secure, and improve the technology our client relies on every day. This position combines hands-on systems administration, advanced technical support, security operations, and project work across Microsoft 365, endpoint management, networking, and cloud infrastructure.

As the IT Infrastructure Engineer, you will take ownership of complex issues, strengthen operational processes, and identify opportunities to improve reliability, security, and the employee experience. You will be resourceful and analytical, combining independent research, practical experience, and sound judgment to resolve unfamiliar problems.

The busiest rail connection between New York, New Jersey, and the Northeast Corridor, the Hudson Tunnel Project will improve capacity, reliability, and resiliency of commuter and intercity rail transit serving 800,000 daily passengers from Washington, D.C. to New York and New England. This is a milestone project that is slated to receive nearly $12 billion in federal funding, the largest investment in a mass transit project in US history.

This is a great opportunity for someone who enjoys both building technology and helping people use it effectively. Clear communication, thorough documentation, and a service-oriented approach are essential.

What You'll Do:

Systems Administration and Advanced Support

• Administer and maintain the computer systems, cloud services, file services, and supporting infrastructure.
• Provide Tier 2 and Tier 3 support for complex hardware, software, identity, connectivity, and application issues.
• Investigate recurring incidents, identify root causes, and implement lasting improvements.
• Support employee onboarding, role changes, and offboarding through timely device provisioning and access management.
• Coordinate with employees, IT colleagues, and vendors to resolve issues and deliver technology projects.

Endpoint and Identity Management

• Manage Windows 11 endpoints, including deployment, configuration, and provisioning through Microsoft Intune and Windows Autopilot.
• Maintain Dell hardware and other supported devices throughout their lifecycle, including inventory, replacement planning, and secure retirement.
• Administer Microsoft Entra ID, security groups, role-based access, multifactor authentication, and Conditional Access.
• Develop and maintain device compliance policies, configuration profiles, update rings, and application deployments.
• Maintain Group Policy baselines and support the planned transition to modern device management where appropriate.
• Support Apple device enrollment and management through Apple Business Manager and other device management platforms.
• Maintain identity and provisioning integrations with HR systems, such as ADP Workforce Now or Workday, as applicable.

Microsoft 365 Administration

• Administer Exchange Online, Teams, SharePoint Online, OneDrive, and related Microsoft 365 services.
• Manage service configuration, licensing, permissions, and operational health.
• Partner with business stakeholders to improve collaboration, information access, and effective use of Microsoft 365.
• Support the evaluation and governed adoption of Microsoft Copilot, Power Apps, Fabric, and Microsoft Foundry in partnership with relevant business and technical owners.

Networking and Security

• Administer Cisco Meraki infrastructure, including MX security appliances, switches, wireless access points, and cameras.
• Monitor LAN, WAN, wireless, internet, and remote-access services for availability, performance, and security issues.
• Maintain endpoint protection, firewall policies, secure configurations, and vulnerability remediation processes.
• Investigate and respond to security alerts using tools such as Microsoft Defender, Microsoft Sentinel, Cisco Umbrella, and other monitoring platforms.
• Apply least-privilege access and established security baselines across systems and endpoints.
• Help employees recognize phishing attempts, suspicious requests, and other common security threats.

Monitoring, Automation, and Patch Management

• Use NinjaOne to monitor endpoints, manage patches, deploy software, and provide remote support.
• Develop and maintain scripts and automated workflows that reduce repetitive work and improve consistency.
• Establish patch baselines, maintenance windows, remediation procedures, and reporting.
• Connect monitoring and alerting with ticketing processes to support timely investigation and resolution.
• Evaluate changes for operational impact and maintain appropriate testing, documentation, and recovery procedures.

IT Operations and Documentation

• Manage incidents, service requests, and escalations through NinjaOne Ticketing or a comparable IT service management platform.
• Create and maintain standard operating procedures, knowledge base articles, system documentation, and asset records.
• Develop, maintain, and test disaster recovery and business continuity procedures in coordination with business stakeholders.
• Maintain major-incident playbooks, escalation paths, and employee communication procedures.
• Coordinate vendor support, service commitments, renewals, and statements of work for assigned platforms.
• Support Global Relay administration and related retention or archiving requirements in coordination with designated business and compliance owners.

Technical Leadership and Continuous Improvement

• Provide technical guidance and mentorship to junior IT staff.
• Lead assigned infrastructure and service improvement projects from planning through implementation and handoff.
• Evaluate technologies such as Virtual Desktop Infrastructure and Azure Virtual Desktop based on business needs, security, cost, and support requirements.
• Recommend improvements to system reliability, user experience, and IT efficiency.
• Communicate technical risks, options, and recommendations clearly to IT leadership and business stakeholders.

What You Bring:

• At least 10 years of progressively responsible experience in systems administration, IT infrastructure, or a related hands-on technical role.
• Strong experience administering Microsoft 365, including Entra ID, Intune, Exchange Online, Teams, and SharePoint Online.
• Hands-on experience with Windows 11, Windows Autopilot, Dell hardware, endpoint configuration, and device lifecycle management.
• Experience managing Cisco Meraki networking and security infrastructure.
• Strong understanding of identity and access management, Conditional Access, multifactor authentication, security groups, and Group Policy.
• Experience using NinjaOne or a comparable remote monitoring and management platform.
• Experience with endpoint security, security monitoring, patch management, and incident investigation.
• Demonstrated ability to provide Tier 2 and Tier 3 support and troubleshoot complex issues across endpoints, networks, and cloud services.
• Ability to develop and maintain PowerShell scripts or comparable automation.
• Strong documentation, organization, and prioritization skills.
• Ability to explain technical concepts to employees with varying levels of technical knowledge.
• Demonstrated ownership, sound judgment, attention to detail, and effectiveness during service disruptions.

Preferred Qualifications

• Experience with Apple Business Manager, Global Relay, and HR-driven identity or provisioning integrations.
• Experience with Microsoft Sentinel, Microsoft Defender, Cisco Umbrella, or comparable security platforms.
• Experience supporting Microsoft Copilot, Power Apps, Fabric, or Microsoft Foundry.
• Experience implementing or supporting VDI or Azure Virtual Desktop.
• Familiarity with ITIL practices, NIST frameworks, CIS Microsoft 365 Benchmarks, and CISA SCuBA guidance.
• Relevant Microsoft, Cisco, CompTIA, security, or IT service management certifications.
• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.

What Success Looks Like

• Employees receive responsive support and clear communication.
• Systems and endpoints remain secure, reliable, and consistently maintained.
• Access and device provisioning are accurate and timely throughout the employee lifecycle.
• Recurring incidents and manual tasks decrease through root-cause resolution and automation.
• Documentation and recovery procedures remain current and usable.
• Technology projects deliver measurable improvements.

Who You Are

• Proactive: You take initiative and look for ways to help.
• Growth-oriented: You're excited to learn and expand your technical skills.
• Accountable: You take ownership and follow through with care.
• Team-First: You collaborate naturally and support colleagues at all levels.

Why Join Us

You'll join a team that values learning, mentorship, and collaboration. This role gives you the chance to work with modern tools, build further IT skills, and contribute to meaningful projects. If you're eager to grow and ready for a new challenge, we'd love to connect.

Platinum Global Talent Solutions is committed to providing equal employment opportunities to all qualified individuals. We refer candidates based on their qualifications and experience, without regard to race, color, religion, national origin, sex, age, disability, veteran status, or any other legally protected status.