Sr Infrastructure Engineer

Boys & Girls Clubs of America; Atlanta (GA); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Total rewards package

Job summary

Boys & Girls Clubs of America is seeking a Sr Infrastructure Engineer to design, deploy, and operate a hybrid cloud and on-premises infrastructure in our Atlanta office. You will own Azure, Microsoft 365, and network platforms to support secure, scalable services for a nationwide youth program.

The role demands strong engineering discipline, experience with Azure, AD/Entra ID, Exchange Online, and a focus on reliability, security, and cost efficiency within a mission-driven nonprofit environment.

Qualifications

• Bachelor's degree in IT or related field preferred.
• Minimum of five years of progressive experience in enterprise infrastructure engineering, systems administration, or related technology roles.
• Experience with Microsoft 365, identity management, security design and operations.
• Strong understanding of hybrid cloud and on-premises infrastructure and AD/Microsoft Entra ID.

Responsibilities

• Design, implement, and maintain scalable, secure infrastructure across Azure and on-prem environments.
• Manage Azure services, compute, storage, networking, and identity-integrated platforms.
• Design, implement, and maintain hybrid directory and identity infrastructure (AD and Entra ID).
• Engineer and maintain Microsoft 365 messaging infrastructure (Exchange Online) and mail flow governance.
• Design and manage hybrid connectivity between Azure and on-prem environments; support network platforms.

Skills

Azure infrastructure

Microsoft 365/Exchange Online

Mail flow & security

Hybrid infrastructure

Networking fundamentals

Monitoring & performance

Automation scripting (PowerShell)

Troubleshooting complex infra/massges

Endpoint security & vulnerability mgmt

Education

Bachelor's degree in IT/CS or related field

Tools

PowerShell

Infrastructure as Code concepts

IaC tooling (e.g., ARM/Bicep)

Job description

Overview

Join Our Team as Sr Infrastructure Engineer

Boys & Girls Clubs of America is the nation's premier youth development organization. Our programs, training and services impact nearly 4 million children and teens every year. We are always looking for qualified professionals with a passion for improving young lives, as a member of our national staff. We have strongvalues, and offer great benefitsto allow our employees to maintain work/life balance.

LOCATION: This position is on-site, office-based in Atlanta, GA (hybrid model - 3 days remote / 2 days in office- Tuesday & Wednesday)

Role Summary

Responsible for the design, implementation, operation, and continuous optimization of the organization’s hybrid technology infrastructure. This includes a primary focus on Microsoft Azure cloud services, Microsoft 365 messaging platforms, and supporting on-premises systems and enterprise network platforms, This role provides end-to-end ownership across the infrastructure lifecycle, ensuring platforms are secure, reliable, scalable, and aligned with business and operational needs. The position integrates cloud infrastructure, messaging and collaboration services, and network connectivity to deliver seamless and resilient technology capabilities. The role requires a balance of technical depth, operational accountability, and continuous improvement, contributing to a stable, modernized, and secure infrastructure environment that supports organizational growth and communication effectiveness.

Responsibilities

What You'll Do

Infrastructure Design & Engineering

• Design, implement, and maintain scalable and secure infrastructure solutions across Azure and on-premises environments
• Develop and evolve infrastructure architecture aligned to reliability, performance, and business continuity objectives
• Apply cloud-first principles while supporting hybrid infrastructure requirements
• Design, implement, and maintain hybrid directory and identity infrastructure, including on-premises Active Directory and Microsoft Entra ID, to support secure, scalable, and highly available authentication and access services

Cloud Platform Management (Azure)

• Engineer, manage, and optimize Azure services including compute, storage, networking, and identity-integrated platforms
• Improve performance, scalability, and cost efficiency of cloud environments
• Implement automation and repeatable deployment practices where appropriate.

Messaging & Collaboration Platform Engineering

• Engineer and maintain Microsoft 365 messaging infrastructure, including Exchange Online, mail flow, and platform performance
• Design and manage secure and reliable email routing, filtering, and policy enforcement (e.g., anti-phish, transport rules, conditional access impacts)
• Ensure the availability, security, and integrity of enterprise messaging services across the organization
• Support enterprise communication initiatives (e.g., large-scale campaigns, system-generated messaging) through platform configuration, governance, and delivery optimization
• Monitor and continuously improve messaging reliability, deliverability, and protection posture

Hybrid Connectivity & Network Integration

• Design, implement, and support hybrid connectivity between Azure and on-premises environments (e.g., VPN, routing, segmentation)
• Support and optimize enterprise network platforms (including switching, routing, and firewall technologies such as Juniper)
• Ensure network performance and design enable reliable application access and consistent end-user experience

Infrastructure Operations & Support

• Monitor infrastructure health, performance, and capacity across cloud, messaging, and on-prem environments
• Respond to incidents and service disruptions with timely resolution and root cause analysis
• Maintain accurate and current operational documentation, standards, and processes
• Maintain the operational health, availability, and replication integrity of Active Directory services
• Maintain the operational health, availability, and performance of hybrid identity services, including Active Directory domain controllers, replication, and integration with Microsoft Entra ID

Security & Compliance

• Implement and maintain infrastructure and messaging platforms aligned to organizational security policies and standards.
• Apply secure configuration practices across cloud, messaging, and network environments.
• Implement, maintain, and optimize infrastructure security technologies supporting organizational security objectives, including endpoint protection, vulnerability management, and security monitoring platforms.
• Monitor infrastructure security health and findings, collaborate with security and operational teams to investigate issues, and remediate vulnerabilities and misconfigurations within established service levels.
• Identify and remediate vulnerabilities and risks in a timely manner.
• Implement and enforce secure identity and directory configurations across Active Directory and Microsoft Entra ID, including alignment to least-privilege access, modern authentication, and organizational security standards.

Reliability, Resilience & Disaster Recovery

• Design and validate high availability and disaster recovery capabilities across infrastructure and messaging platforms
• Ensure systems align with defined recovery objectives and business continuity needs
• Continuously improve resilience through testing and optimization
• Develop and oversee enterprise data protection, backup, and retention capabilities that support organizational resilience, continuity, and compliance objectives

Continuous Improvement & Modernization

• Identify opportunities to modernize legacy systems and improve infrastructure and messaging platform efficiency
• Drive optimization initiatives for performance, cost, and technical debt reduction
• Stay current with emerging technologies and recommend appropriate adoption

Collaboration & Delivery

• Partner with application teams, security, and vendors to deliver infrastructure and messaging solutions aligned to business needs
• Communicate technical concepts, risks, and solutions in a clear and actionable manner
• Deliver projects and infrastructure changes with predictable, high-quality outcomes

CORE COMPETENCIES

• Ownership and accountability from initial identification through successful resolution.
• Critical thinking, sound judgment, and structured problem-solving to complex, cross-functional issues.
• Approaches complex problems methodically, separates symptoms from underlying causes, tests assumptions, and develops sustainable solutions rather than temporary fixes.
• Communicates risks, recommendations, decisions, and status clearly to both technical and non-technical stakeholders.
• Collaborates effectively across teams and builds productive relationships with internal partners and vendors.
• Prioritizes work according to business impact, operational risk, security, and organizational objectives.
• Plans and executes work with consistency, attention to detail, and dependable follow-through.
• Identifies opportunities for continuous improvement and supports practical, sustainable modernization.
• Documents, decisions, processes, and solutions clearly, and promotes knowledge sharing.
• Demonstrates professional integrity, transparency, curiosity, and a commitment to continuous learning.

SUCCESS MEASURES

Availability & Reliability

• Infrastructure and messaging services consistently meet uptime and availability expectations
• Critical incidents are minimized and resolved within acceptable timeframes

Performance & User Experience

• Cloud, network, and messaging services perform reliably, supporting a consistent end-user experience

• Email delivery, access, and communication services operate without recurring disruption

Security & Risk Reduction

• Messaging, identity, network, and infrastructure platforms align with organizational security standards and demonstrate measurable risk reduction.

• Security technologies are effectively deployed, monitored, and maintained across supported platforms.

• Vulnerabilities, misconfigurations, and security findings are remediated within established timelines.
• Infrastructure security posture improves through continuous monitoring, assessment, and corrective action.

Infrastructure & Platform Optimization

• Cloud and messaging platforms are optimized for performance, scalability, and cost efficiency
• Legacy systems are modernized or decommissioned as appropriate

Operational Effectiveness

• Monitoring, alerting, and documentation are complete and actively used
• Recurring issues are reduced through root cause resolution and process improvement

Network & Connectivity Effectiveness

• Hybrid connectivity is stable, secure, and reliable

• Enterprise network platforms operate with minimal unplanned disruption

Delivery & Execution

• Infrastructure and messaging initiatives are delivered on time with minimal business disruption

• Stakeholders have confidence in execution quality and predictability

Qualifications

SKILLS

• Microsoft Azure infrastructure services (compute, storage, networking)
• Microsoft 365 / Exchange Online administration and architecture
• Mail flow design, email security, and messaging governance
• Hybrid infrastructure and connectivity design
• Networking fundamentals (routing, switching, firewalls, segmentation)
• Infrastructure monitoring and performance management
• Automation and scripting (PowerShell, Infrastructure-as-Code concepts)
• Troubleshooting complex infrastructure and messaging issues
• Endpoint security, vulnerability management, and security monitoring platforms

KNOWLEDGE & ABILITIES

• Strong understanding of cloud architecture principles and hybrid infrastructure models
• Knowledge of enterprise messaging platforms and secure email practices
• Understanding of how network and identity impact messaging and application access
• Ability to design for high availability, performance, and security across multiple platforms
• Ability to troubleshoot complex, cross-domain issues (cloud, network, messaging)
• Ability to communicate technical concepts clearly to technical and non-technical stakeholders
• Ability to balance operational responsibilities with project delivery and optimization efforts
• Commitment to continuous learning and staying current with evolving technologies

EDUCATION & EXPERIENCES

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Computer Engineering, or a related field preferred.
• Equivalent combinations of education, technical certifications, and directly related professional experience will be considered.
• Minimum of five (5) years of experience of progressive experience in enterprise infrastructure engineering, systems administration, or related technology roles including Cloud services, Microsoft 365, identity management, security design and operations, as well as project and task management.

COMPENSATION

The salary range for this role is $120,000.00 to $140,000.00. BGCA takes into consideration a combination of a candidate’s education, training and experience, as well as the position’s scope and complexity, the discretion and latitude required for the role and other external and internal data when establishing a salary level. We are highly invested in every employee’s total well-being and offer a substantial and comprehensive total rewards package.