Lead Infrastructure Engineer

Description

The company is a performance-driven organisation where engineers work on technically interesting problems in a climate of mutual trust.

The Infrastructure Engineering team sets technical direction, lifecycle plans, standards and project delivery for Active Directory, Windows Server, VMware virtualization, Citrix and virtual desktop services, storage, NAS, backup, disaster recovery, and the security and cyber-recovery capabilities that go with them.

This role reports to the Global Infrastructure Engineering Manager. It is a hands-on technical leadership position, not a people-management one. You will set architecture direction, make complex technical decisions, guide a distributed team, and turn business demand into a deliverable roadmap and delivery plan. You do not need to be the deepest expert on every platform, but you must bring the domain knowledge together into one coherent Infrastructure Engineering service.

The role is hybrid and based in Buffalo, NY, with regular onsite presence at the corporate headquarters in East Aurora, New York, as company requirements dictate.

Responsibilities

• Own the technical roadmap, reference architecture, engineering standards and lifecycle strategy for all Infrastructure Engineering platforms.
• Set technical direction for Active Directory, Windows Server, VMware, Citrix, privileged administration and infrastructure resilience.
• Assess modernization options, architecture trade-offs, technical debt, security risk, capacity, supportability and overall operational impact.
• Create design reviews, architecture decision records, technical standards and reusable engineering patterns.
• Provide senior escalation support for complex cross-platform issues and major incidents.
• Coach engineers through design, troubleshooting, implementation, documentation and handover to operations, and reduce reliance on single individuals through hands-on knowledge transfer.
• Hold hands-on ownership of the global Active Directory estate and related Windows infrastructure, covering forests, domains, DNS, Group Policy, LDAP, Kerberos, replication, delegation and domain controller lifecycle.
• Design authentication, authorization and privileged administration models that meet corporate security and compliance requirements.
• Lead Active Directory modernization, optimization, technical debt reduction and recovery-readiness work.
• Define Windows Server engineering standards, OS lifecycle plans, CIS-aligned hardening and remediation priorities.
• Work with Cyber Security and Infrastructure Operations on identity controls, vulnerability remediation, audit evidence and resilient management environments.
• Act as the Infrastructure Engineering technical authority for Citrix and virtual desktop and application services.
• Lead the architecture, modernization, security, resilience, performance and lifecycle management of Citrix environments.
• Define technical patterns for new Citrix use cases, virtual desktop infrastructure, application delivery, graphics-enabled workloads, remote access and end-user experience.
• Lead complex Citrix design and build work, including assessments, architecture reviews, capacity planning, resilience, documentation and handover to operations.
• Coordinate with business, application, security, network and operations stakeholders so Citrix solutions are secure, supportable and matched to demand.
• Lead architecture across VMware and other virtualization platforms, storage, NAS, backup, disaster recovery and cyber-recovery services, covering lifecycle, resilience, capacity, availability and modernization.
• Lead the technical integration of infrastructure services across Active Directory, Windows, Citrix, virtualization, storage, backup, networking and recovery.
• Support disaster recovery and cyber-resiliency design, recovery testing, recovery environments, data protection and continuity planning.
• Guide server hosting, data center migration, M&A and wider infrastructure transformation where several domains are involved.
• Work alongside specialist engineers on implementation while remaining accountable for cross-domain design, technical risk and delivery quality.
• Turn business demand, technical risk, lifecycle needs and security priorities into a clear multi-PI Infrastructure Engineering roadmap.
• Lead technical planning for Program Increment work, covering scope, sequencing, dependencies, effort assumptions, risk and capacity trade-offs.
• Keep Infrastructure Engineering work in Azure DevOps technically sound: structure features and backlog items, clarify acceptance criteria, map dependencies, review progress and clear blockers.
• Coordinate engineering resources across Active Directory, Citrix, virtualization, Windows, Linux, storage, NAS, backup, disaster recovery, operations and partner teams to deliver committed work.
• Give leadership and stakeholders concise updates on technical status, risks, decisions and roadmap recommendations.

Requirements

• A bachelor's degree in computer science, information technology, engineering or a related technical field, or equivalent relevant experience.
• At least 8 years of progressively responsible enterprise infrastructure engineering experience in complex, global environments.
• Proven technical leadership across several infrastructure domains, including architecture decisions, design governance, project delivery and technical mentoring.
• Advanced Active Directory engineering experience in global multi-domain or multi-forest environments, including DNS, Group Policy, authentication protocols, domain controller lifecycle, security and recovery.
• Citrix engineering and architecture experience supporting enterprise virtual application and desktop environments.
• Strong Windows Server engineering and architecture background, including OS lifecycle, hardening, automation and troubleshooting.
• Strong experience with VMware vSphere or comparable enterprise virtualization platforms, including availability, lifecycle, capacity and recovery.
• Working knowledge of enterprise storage, NAS, backup, disaster recovery and cyber-recovery practices, with the ability to lead cross-domain architecture and delivery discussions.
• Experience designing secure infrastructure, privileged and tiered administration, and CIS-aligned hardening.
• Hands-on PowerShell automation experience. Experience with APIs, Ansible, Terraform or similar automation and Infrastructure as Code practices is desirable.
• Experience with backup, disaster recovery, cyber recovery or business continuity design.
• Strong communication, documentation, stakeholder management and structured problem-solving skills.
• Preferred: experience with Citrix Virtual Apps and Desktops, Citrix DaaS, Citrix ADC, virtual GPU workloads or equivalent enterprise end-user computing technologies.
• Preferred: experience supporting mergers and acquisitions, data center migrations, OT infrastructure or regulated, compliance-sensitive environments.
• Preferred: experience working within ITIL, Agile, SAFe or similar delivery practices.
• Preferred: relevant Microsoft, VMware, Citrix, security or cloud certifications.

Conditions

Buffalo, NY. Base salary range $130,000.00 to $170,000.00 per year.

The range is the low and high end of the company's salary band for this position in this location. Actual pay depends on factors such as location, experience and performance. The range is one part of total compensation, which may also include annual bonuses, an employee stock purchase plan, an open paid time off policy and region-specific benefits.

This position requires access to U.S. export-controlled information.

Agency submissions are accepted only from partners invited by the Talent Acquisition Team who have signed terms in place beforehand. Resumes sent directly to any the company employee or affiliate will not qualify for a fee and become the company property.

Benefits

• Competitive pay package with bonus opportunities, a matching 401k, and the option to join the Employee Stock Purchase Plan (select locations), Flexible Spending Account and Health Savings Account.
• Flexible paid time off, holidays and a parental leave programme.
• Comprehensive medical, dental, vision, life and disability insurance, an Employee Assistance Plan and other supplemental cover.
• Tuition assistance, mentoring and coaching, leadership development and other personal growth programmes.
• A warm, respectful, family-like culture built on twelve core values, with several employee-led Resource Groups open to everyone.