Senior Infrastructure Engineer

Grayson Search Partners; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Grayson Search Partners, LLC is seeking a Senior Infrastructure Engineer to join its San Francisco technology organization. This hands-on role focuses on critical infrastructure, server patching, Azure modernization, networking, and security.

You will work with cybersecurity, cloud, and tech partners to plan and deploy changes with strong change-management practices. The ideal candidate has 8+ years in infrastructure engineering, Windows Server/AD expertise, and Terraform/Azure experience, with

Qualifications

• 8+ years of systems or infra engineering experience.
• 3+ years owning production server environments and patching.
• Experience with Windows Server and AD enterprise upgrades and patching.
• Experience with patch-management tools like Intune / Azure Update Manager.

Responsibilities

• Own routine and emergency server patching and vulnerability remediation.
• Lead infrastructure changes from testing through deployment.
• Collaborate with cybersecurity on remediation and hardening.
• Manage patches/upgrades of Palo Alto firewalls with external partners.
• Deliver Azure changes via Terraform and CI/CD processes.
• Support migration of on-prem to Azure and modernize Windows Server.

Skills

8+ years experience

PowerShell

Onsite SF

Education

Bachelor's degree in a related field

Tools

Terraform

Azure

Palo Alto firewalls

Windows Server

Active Directory

Job description

Our client, a highly respected financial services firm, is seeking a Senior Infrastructure Engineer to join its technology organization in San Francisco.

This is a hands‑on engineering role for someone who can take ownership of critical infrastructure while working closely with cybersecurity, cloud, and technology partners. The position will have significant responsibility for server patching and vulnerability remediation, Azure infrastructure, Windows Server modernization, networking, virtualization, and infrastructure security.

The ideal candidate is an experienced infrastructure engineer who is comfortable operating in a fast‑paced, security‑conscious environment and can independently execute production changes from planning and testing through deployment and remediation verification.

Key Responsibilities

Infrastructure Security & Remediation

• Own routine and emergency server patching, including remediation of critical and actively exploited vulnerabilities.
• Investigate failed or missed patches and drive issues through resolution.
• Implement infrastructure configuration and hardening changes resulting from vulnerability assessments, penetration testing, and security reviews.
• Partner closely with cybersecurity to translate identified vulnerabilities into tested and documented infrastructure changes.
• Manage and support patching and upgrades of Palo Alto Networks firewalls, including coordination with external managed service partners.
• Maintain appropriate vulnerability scanning and agent coverage across the infrastructure environment.
• Deliver Azure infrastructure changes through Terraform and established deployment processes.
• Support the migration of on‑premises infrastructure into Microsoft Azure.
• Modernize Windows Server environments, including upgrades and migrations to Windows Server 2025.
• Administer and support core Microsoft infrastructure services including Active Directory, DHCP, RADIUS, and application servers.
• Support enterprise networking environments, including Cisco switching, VLANs, management access, connectivity, and high‑availability configurations.
• Support virtualization infrastructure, ideally including Nutanix AHV.
• Troubleshoot complex infrastructure issues across cloud, server, networking, and virtualization environments.

Operations & Collaboration

• Serve as a senior infrastructure escalation point for San Francisco and West Coast users.
• Provide infrastructure and security operations coverage during West Coast business hours.
• Assist with incident triage, emergency remediation, platform onboarding, and infrastructure troubleshooting.
• Maintain strong operational documentation, change‑management practices, testing procedures, and rollback plans.
• Collaborate with internal technology teams, security engineers, and strategic third‑party partners.
• Provide technical guidance and mentorship to less‑experienced engineers.

Qualifications

• 8+ years of systems or infrastructure engineering experience.
• At least 3 years of experience owning production server environments, patch management, and privileged infrastructure changes.
• Deep experience with Windows Server and Active Directory, including enterprise upgrades, migrations, and patching.
• Experience with enterprise patch‑management technologies such as ManageEngine, Microsoft Intune, Azure Update Manager, or comparable platforms.
• Hands‑on experience remediating vulnerabilities identified through vulnerability scanning and penetration testing. Tenable experience is highly desirable.
• Practical experience with Microsoft Azure and Terraform, including modifying infrastructure‑as‑code modules and deploying changes through established CI/CD processes.
• Experience migrating on‑premises workloads and servers to Azure.
• Experience administering Palo Alto Networks firewalls, Panorama, and GlobalProtect, including software upgrades.
• Solid understanding of enterprise networking concepts including Cisco switching, VLANs, out‑of‑band management, and high availability.
• Experience with enterprise virtualization environments. Nutanix AHV experience is preferred.
• Strong PowerShell or comparable scripting skills for automation and troubleshooting.
• Demonstrated discipline around production change management, testing, approvals, rollback planning, and documentation.
• Ability to work onsite in San Francisco and provide coverage during West Coast business hours.

Preferred Experience

• Experience working within financial services, asset management, private equity, or another highly security‑conscious environment.
• Familiarity with OpenGear and SD‑WAN technologies.
• Certifications such as CCNA, CCNP, Microsoft Azure, or Nutanix NCP.
• Interest in expanding further into cybersecurity and security operations.

Why This Opportunity?

This position offers the opportunity to take meaningful ownership of infrastructure within a sophisticated financial services environment while working across cloud, cybersecurity, networking, virtualization, and infrastructure modernization.

For an engineer who enjoys being hands‑on but wants broader ownership and exposure to security, this role provides a strong combination of technical depth, autonomy, and long‑term growth potential.