IT Infrastructure Lead

Windows on Washington; Washington (Washington County); Hybrid; USD 135,000 - 150,000; Full time

Benefits offered by this job

Comprehensive benefits

401K

Parental leave

Travel reimbursement

Job summary

Mosaic Service Partners in the United States is seeking an IT Infrastructure Lead to own the enterprise technology foundation and enable scalable growth across acquired brands. This hands-on role drives Day 1 through Day 90 integration, including firewall handoffs, DNS control, and cloud governance, reporting to the VP of Technology.

The position is hybrid in Washington, DC, with travel as needed. You will standardize identity, endpoint, and the Microsoft 365 estate, manage MSP and security

Qualifications

• 5+ years in IT infrastructure, end‑user services, or IT operations with hands‑on ownership.
• Experience standardizing fragmented, multi‑site IT environments across brands.
• Deep hands‑on command of Microsoft 365 components (Entra ID, Exchange Online, Intune).
• Experience standardizing and governing an M365 estate at the tenant level: SharePoint/OneDrive, Teams provisioning, licensing.
• Proven ownership of an MSP relationship with clear SLAs and outcomes.
• Working security fluency: access controls, email authentication (SPF, DKIM, DMARC).

Responsibilities

• Own IT integration for every acquisition with Day 1–Day 90 playbooks.
• Set and enforce the Mosaic identity and endpoint baseline.
• Standardize and govern the Microsoft 365 estate across tenants.
• Assess and remediate inherited environments and security gaps.
• Manage MSP and security partners to ensure standards and outcomes.
• Run onboarding, offboarding, and end‑user support across brands.

Skills

Microsoft 365

Entra ID

Exchange Online

Intune

Active Directory

Endpoint management

MFA & identity

Networking basics

Tools

SharePoint

OneDrive

Teams

DNS management

Cloud governance tools

Job description

IT Infrastructure Lead

Washington, DC. Hybrid Schedule

JOB DESCRIPTION:

Mosaic Service Partners is seeking an IT Infrastructure Lead to own the enterprise technology foundation that lets the platform scale. This role owns Mosaic’s infrastructure, identity, endpoint, collaboration platform, support, cloud governance, and the managed-service-provider relationship end to end. The center of gravity is acquisition integration: most brands Mosaic acquires arrive with fragmented, inherited environments, and this role turns them into a single secure, standardized, scalable estate.

Reporting to the VP of Technology, this person owns the IT side of every deal and sets the standard for how HQ and field technologyoperateacross all brands. They set direction on where Mosaic’s IT needs togo and dothe hands‑on work to get there. The right person is equally comfortable authoring a Day 1 through Day 90 integration plan and getting on a call to transferfirewalladministration, billing, and DNS control off an outgoing MSP before the cutover window closes.

This is a hands‑on, individual‑contributor role today. You own the outcomes and do the work directly, without a team beneath you. As Mosaic scales, the role is built to grow into a people leader who sets direction and, in time, builds and leads a team. The role offers deep exposure to post‑acquisition integration, enterprise systems, and IT strategy in a PE‑backed, multi‑brand platform, with meaningful ownership and a clear growth path as Mosaic scales.

KEY RESPONSIBILITIES

• Own IT integration for every acquisition. Build and run a repeatable Day 1 through Day 90 playbook spanning diligence, access and admin transition, onboarding, support routing, device standards, and escalation. Preserve business continuity at close while migrating eachacquiredbrand onto Mosaic standards.

• Set and enforce the Mosaic identity and endpoint baseline. Define one standard for identity, MFA, device management, and endpoint protection, and migrate active users and company-managed devices across all brand partners onto it.

• Standardize and govern the Microsoft 365 estate. Own tenant strategy and consolidation, SharePoint and OneDrive architecture, Teams provisioning, external‑sharing and data‑loss policy, and licensing, so Mosaic stores, shares, andsecuresbusiness data one governed way.

• Assess and remediate inherited environments. Separate immediate security and access risks from longer‑term cleanup, then drive fixes to completion. Recent deals required transferring admin across 25‑plus systems, decommissioning end‑of-life servers,consolidatingstray domains, and closing MFA and email‑authentication gaps (SPF, DKIM, DMARC).

• Manage the MSP and security partners. HoldCloudITand security vendors to clear standards, SLAs, and escalation paths, diagnose whether failures stem from vendor capability or weak internal ownership, and decide when to improve, supplement, or replace.

• Run onboarding, offboarding, and end‑user support. Own accounts, access, permissions, and devices across brands,operateresponsive support without becoming a field bottleneck, and drive root‑cause fixes over repeat tickets.

• Govern theinfrastructureestate. Maintain one reliable source of truth for users, devices, licenses, SaaS, domains, DNS, and cloud accounts; govern production cloud for ownership, access, logging, monitoring, and cost; and set practical guardrails for approved AI and SaaS tools to curb sprawl without slowing the business.

• Support HQ and the field directly. Provide hands‑on HQ support, including office A/V and conference‑room reliability, and travel to brand partners that lack local IT coverage to resolve issues and reinforce standards.

• Perform other duties as assigned or needed.

WHAT SUCCESS LOOKS LIKE

• Every acquisition is integrated into Mosaic’s IT quickly and securely, with minimal disruption to field operations, revenue, or EBITDA.

• All brand partnersoperateon a single Mosaic standard for identity, MFA, endpoint protection, and the M365 collaboration and file environment, with critical security and access gaps closed.

• The MSP is held to clear standards and measurable outcomes, and Mosaic drives its own decisions rather than defaulting tovendorquality.

• Employees across brands, in the field and at HQ, work without technology friction.

• Each integration becomes more repeatable and predictable as playbooks and execution discipline mature.

REQUIRED QUALIFICATIONS

• 5+ years in IT infrastructure, end‑user services, or IT operations, including hands‑on individual‑contributor ownership rather than pure people management.

• Demonstrated experience standardizing a fragmented, multi‑site IT environment across locations or business units atdifferent levelsof maturity.

• Deep hands‑on command of Microsoft 365 (Entra ID, Exchange Online, Intune), Active Directory, endpoint and device management, MFA and identity, and core networking.

• Experience standardizing and governing an M365 estate at the tenant level: SharePoint and OneDrive architecture, Teams and site provisioning, external‑sharing and data‑loss policy, license optimization, and tenant‑to‑tenant migration or consolidation across acquisitions.

• Proven ownership of an MSP relationship, ideally including an MSSP, witha track recordof holding partners accountable to SLAs and outcomes.

• Working security fluency: access controls, endpoint security, email authentication (SPF, DKIM, DMARC), phishing and cyber hygiene, and incident escalation, without needing to be a dedicated security engineer.

• Strongexecutiondiscipline and comfortoperatingin ambiguous, fast‑moving environments without heavy structure or templates.

• High integrity, ownership, and follow‑through, with the credibility to earn trust from non‑technical operators and field leaders.

• Hybrid role based in Washington, DC, within‑office presence to support HQ and vendors, plus travel to brand partners as needed.

PREFERRED QUALIFICATIONS

• Experience supporting IT in multi‑site, field‑intensive businesses such as home services, healthcare services, or multi‑site retail.

• Exposure toprivate equity‑backed environments, post‑merger integration, or high‑growth operating models.

• Track recordrunning system migrations, tenant consolidations, carve‑outs, office moves, or other majorenvironmenttransitions.

• Working knowledge of domain, DNS, and website administration.

COMPENSATION

• Base salary range of $135,000 to $150,000, plus a performance‑based annual bonus. Actual compensation depends on skills, experience, qualifications, and location.

• Travel reimbursement for approved business travel.

• Comprehensive benefits package including health, dental, vision, life insurance, and disability coverage, plus 401K and parental leave.

• Opportunities for career growth and advancement as Mosaic continues to scale.

ABOUT MOSAIC SERVICE PARTNERS

Mosaic Service Partners is a national platform backed by Alpine Investors that partners with exceptional residential window and door replacement providers across the United States. The platform helps regional businesses scale by investing in technology, expanding marketing and sales capabilities, and attracting and developing top talent. Guided by a people‑first philosophy, Mosaic supports its partners in delivering exceptional service to homeowners while building enduring, market‑leading businesses. For more information, visit mosaicservicepartners.com.

DIVERSITY, EQUITY, & INCLUSION

At Mosaic, we believe a focus on diversity, equity, and inclusion (“DE&I”) is integral to hiring exceptional people and creating enduring businesses. To inspire growth at our company, we strive to create an organization where every individual is celebrated, heard, valued, and empowered to reach their full potential. These beliefs and actions are true to ourPeopleFirstphilosophy, which is rooted in how we invest, hire, and show up day in and day out. We will continuously look for ways to improve and evolve in our ever‑changing world, and we are committed to ensuring Mosaic is one of the best places to work for all by creating diverse teams, strengthening our culture of inclusion, and giving everyone an equitable opportunity to succeed.

Mosaic Service Partners is proud to be an Equal Opportunity and Affiantive Action Employer. We evaluate qualified applicants without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age, physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law.