Senior IT Systems & Infrastructure Engineer (Cloud, Security & AI)

About the Role

ITCS is a South Florida managed services provider that designs and supports custom IT solutions for our clients rather than a one-size-fits-all menu. We are looking for a Senior Systems & Infrastructure Engineer we can point at any project or client environment and trust to own it end to end: networking, on-premise and cloud infrastructure, cybersecurity, Microsoft 365/Azure, and AI.

Our clients are increasingly asking us for AI solutions, and we want this engineer to help lead that practice alongside traditional infrastructure work.

This is a true generalist-at-a-senior-level position. One week you may be redesigning a client's network and firewall stack, the next migrating on-premise servers to Azure, then leading a security hardening project, then scoping and rolling out Microsoft Copilot or a custom AI workflow for a client, then building an automation that saves the team hours.

You will take projects from scoping and design through implementation and documentation, while also serving as the Tier 3 escalation point for our support team.

Location requirement

This position is primarily work-from-home with onsite visits to clients throughout Fort Lauderdale, Boca Raton, and West Palm Beach. Candidates must already reside in our service area and have reliable transportation.

What You Will Do

• Lead client infrastructure projects from planning and design through implementation, cutover, and documentation.
• Design, deploy, and support network environments: firewalls, Layer 3 switching, routing, VLANs, VPN (site-to-site and remote access), Wi-Fi, and SD-WAN.
• Build and manage Windows Server environments (2019 through 2025), Active Directory, Group Policy, DNS/DHCP, certificate services, clustering, and virtualization.
• Architect and execute cloud projects in Microsoft Azure and Microsoft 365, including on-prem-to-Azure migrations, Entra ID, Intune, Conditional Access, and email migrations from other platforms to Microsoft 365.
• Implement and maintain security controls across client environments: EDR/MDR, SIEM, Zero Trust access (e.g., Zscaler), MFA/SSO (SAML/OIDC), vulnerability remediation, email security, and backup and disaster recovery.
• Serve as the Tier 3 escalation point for the support desk, resolving complex issues and mentoring Tier 1 and Tier 2 technicians.
• Help build and deliver our AI services practice: meet with clients to identify practical AI use cases, assess data readiness and governance, and scope, pilot, and deploy solutions such as Microsoft 365 Copilot, Copilot Studio agents, AI-powered automation and workflow tools, and secure use of ChatGPT/Claude-type assistants.
• Advise clients on responsible AI adoption: data access and permissions, information protection and DLP, acceptable-use policies, and keeping client data out of unmanaged AI tools.
• Automate recurring work with PowerShell and AI-assisted tooling; use AI tools daily for scripting, log and data analysis, documentation, and proactive maintenance.
• Communicate directly with client stakeholders, from end users to executives, via phone, email, and in person. Explain issues and resolutions clearly and provide professional recommendations.
• Document everything: tickets, resolutions, runbooks, network diagrams, and client inventory records in our PSA/RMM and documentation platforms.
• Contribute to standards, process improvements, and the technology roadmap for both ITCS and our clients.
• Participate in a scheduled on-call rotation; occasional evening or weekend work for maintenance windows and project cutovers.

Required Skills and Experience

We expect a strong, hands-on foundation in each of the five areas below. You do not need to be the deepest specialist in every one, but you must be able to take ownership of a project in any of them.

• Experience: 7+ years in IT infrastructure/systems engineering, with at least 3 years at a Tier 3 or project-lead level. MSP experience strongly preferred.
• Networking: Proven hands-on experience designing, configuring, and troubleshooting firewalls, Layer 3 switches, routing, VLANs, VPNs, and wireless. Comfortable with packet captures and root-cause network troubleshooting. Experience with at least one major platform (Fortinet, Cisco/Meraki, SonicWall, Palo Alto, Ubiquiti, or similar).
• Infrastructure: Expert in Windows Server 2019–2025, Active Directory, Group Policy, DNS/DHCP, certificate authorities, server clustering, and storage. Working experience with Hyper-V and/or VMware. Experience with backup and disaster recovery platforms and tested recovery procedures.
• Cybersecurity: Practical experience implementing security controls: EDR/MDR (e.g., Arctic Wolf, SentinelOne, Huntress), Zero Trust/SASE (e.g., Zscaler), MFA and SSO/SAML, Conditional Access, email security, patch and vulnerability management, and security baselines (CIS/NIST). Able to lead incident response and client security assessments.
• Cloud: Strong experience with Microsoft Azure infrastructure and networking (VNets, NSGs, VPN gateways, VMs, Azure Files, backup) and Microsoft 365 administration (Exchange Online, SharePoint/OneDrive, Teams, Entra ID, Intune). Experience performing on-prem-to-Azure and email-platform-to-M365 migrations. Exposure to AWS and Google Workspace.
• AI and Automation: Demonstrated use of AI tools (e.g., Microsoft Copilot, ChatGPT, Claude, or similar) in daily engineering work: scripting, troubleshooting, log/data analysis, documentation, and automation. Hands-on experience deploying at least one AI solution in a business environment, such as Microsoft 365 Copilot, Copilot Studio or other agent builders, or AI-driven workflow automation, including the data governance and licensing work that goes with it. Able to explain AI capabilities and limitations clearly to non-technical clients and translate business problems into practical, secure AI use cases. Strong PowerShell skills (creating, modifying, and executing scripts).
• Professional: Excellent written and verbal communication with both technical and non-technical audiences, including executives. Patient, professional, and personable with end users. Strong project management, time management, and documentation habits. Able to work independently without onsite supervision and to prioritize multiple concurrent projects.
• Logistics: Reside in the Fort Lauderdale / Boca Raton / West Palm Beach area with reliable transportation and the ability to travel locally as needed. Available for scheduled on-call and occasional after-hours work. Must be able to pass a Florida Department of Law Enforcement (FDLE) background check.

Preferred Qualifications

• Certifications such as Microsoft AZ-104 / AZ-305 / SC-300, CCNA / CCNP, Fortinet NSE 4+, CompTIA Security+ / CySA+, or CISSP.
• Experience with Microsoft SQL Server, Linux, and macOS in a managed environment.
• Experience with compliance frameworks relevant to our clients (HIPAA, PCI-DSS, NIST CSF, CIS Controls, cyber-insurance requirements).
• Experience with PSA/RMM and documentation platforms (e.g., ConnectWise, Datto/Autotask, NinjaOne, IT Glue, Hudu).
• Experience building Copilot Studio agents, Power Automate / n8n / Zapier AI workflows, or lightweight integrations with OpenAI, Anthropic, or Azure OpenAI APIs.
• Experience with Microsoft Purview, sensitivity labels, and DLP as they relate to Copilot and AI readiness.
• Microsoft AI certifications (AI-900, AI-102) or equivalent.

Pay: $110,000.00 - $145,000.00 per year

Benefits:

• Health insurance
• Retirement plan

Work Location: Hybrid remote in Fort Lauderdale, FL 33301