Senior Infrastructure Engineer
Summary
Owns the design, security, and support of the enterprise network and core infrastructure for a commercial P&C insurer — LAN/WAN/SD-WAN, firewalls, VPNs, wireless, Windows Server, Active Directory, Entra ID, Microsoft 365, and Azure hybrid cloud. Serves as Level 3 escalation lead, drives infrastructure projects, and sets engineering standards.
With Xcelerate29, HDI is shaping its future by becoming a Trusted Global Player, achieving Next-level Excellence, and building a Forward-thinking Organisation. This direction helps HDI Global lead the profitable growth game as a globally connected business, raise the bar every day through stronger underwriting, claims, and investment performance, and win tomorrow by starting today with a lean, fast, resilient, and future-ready organisation. Together, these priorities support profitable growth, sustainable profitability, global consistency, digital transformation, AI acceleration, smart cost leadership, and stronger collaboration across teams and markets. They also reflect our focus on being a workplace of choice by building a future-ready workforce where people learn, grow, adapt to technology change, and contribute to long-term success.
- Design, implement, administer, and support enterprise LAN, WAN, SD-WAN, and wireless network infrastructure.
- Configure and troubleshoot routers, switches, wireless access points, firewalls, and network appliances.
- Support routing, switching, VLANs, network segmentation, NAT, DNS, DHCP, QoS, and TCP/IP services.
- Manage site-to-site VPNs, remote-access VPNs, internet connectivity, and hybrid cloud networking.
- Maintain resilient and redundant connectivity across office, data center, and cloud environments.
- Coordinate with internet service providers, telecommunications carriers, and third-party vendors.
- Lead network deployments for office openings, relocations, expansions, and infrastructure refreshes.
- Maintain network diagrams, IP addressing documentation, firewall standards, and configuration records.
- Administer enterprise firewalls, VPN configurations, security policies, certificates, and high-availability solutions.
- Implement secure network segmentation across users, servers, management networks, and business systems.
- Review and maintain firewall rules to ensure appropriate access controls.
- Partner with Information Security to implement network security standards and remediate vulnerabilities.
- Support secure internet access, remote connectivity, and zero-trust networking initiatives.
- Maintain network appliance configuration backups and validate recovery procedures.
- Monitor network logs and alerts to identify performance issues, anomalies, and potential security threats.
- Ensure network changes comply with established security and change management processes.
- Design and support connectivity between office locations, data centers, Microsoft Azure, and third-party environments.
- Support Azure networking components including virtual networks, subnets, network security groups, VPN gateways, DNS, routing, private endpoints, and VNet peering.
- Troubleshoot connectivity between cloud-hosted and on-premises resources.
- Maintain secure routing and segmentation across hybrid environments.
- Support Azure infrastructure and networking projects.
- Provide support for AWS connectivity and integrations as required.
- Administer and support Windows Server environments and supporting infrastructure services.
- Manage Active Directory, Group Policy, DNS, DHCP, certificate services, and identity-related technologies.
- Troubleshoot authentication, access, name resolution, and server connectivity issues.
- Support virtualization platforms, server operating systems, storage infrastructure, and monitoring tools.
- Maintain secure administrative access to infrastructure systems and platforms.
- Assist with server lifecycle management, upgrades, migrations, patching, and system refresh initiatives.
- Coordinate support activities with vendors, managed service providers, and technology partners.
- Support Microsoft Entra ID, hybrid identity environments, directory synchronization, and authentication services.
- Troubleshoot identity, access, and authentication-related issues.
- Manage role-based access, service accounts, group memberships, and enterprise application integrations.
- Support privileged access management and identity security initiatives.
- Maintain technical documentation related to identity architecture and authentication processes.
- Provide advanced support for Microsoft 365 services and related infrastructure integrations.
- Troubleshoot complex Exchange Online, Microsoft Teams, SharePoint Online, OneDrive, and authentication issues.
- Support mail flow, DNS records, certificate management, federation services, and connectivity requirements.
- Collaborate with endpoint and service delivery teams to resolve complex Microsoft 365 incidents.
- Support Microsoft 365 enhancements, migrations, and platform improvements as needed.
- Serve as the primary Level 3 escalation resource for complex network and infrastructure issues.
- Lead technical response efforts during high-impact outages and critical incidents.
- Perform root cause analysis and implement long-term corrective actions.
- Coordinate with service delivery teams, information security, vendors, carriers, and business stakeholders during major incidents.
- Communicate technical status updates, risks, and business impacts to leadership and stakeholders.
- Develop knowledge articles and troubleshooting procedures to improve operational support capabilities.
- Participate in on-call and escalation rotations as required.
- Define and maintain infrastructure and network engineering standards.
- Create and maintain technical documentation, configuration standards, network diagrams, operating procedures, and disaster recovery runbooks.
- Establish standards for naming conventions, network addressing, segmentation, monitoring, and configuration management.
- Ensure infrastructure changes follow approved change management processes.
- Maintain documentation required for operational support, audits, compliance, and disaster recovery planning.
- Evaluate technical solutions for security, scalability, resilience, cost-effectiveness, and operational supportability.
- Mentor junior engineers and technical support staff on networking and infrastructure best practices.
- Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or a related field, or equivalent combination of education and experience.
- Five or more years of progressive experience in network engineering, infrastructure engineering, or related technical roles.
- Strong hands-on experience supporting enterprise multi-site network environments.
- Advanced knowledge of:
- TCP/IP networking and subnetting
- Routing and switching technologies
- VLANs and network segmentation
- Enterprise firewall administration
- Site-to-site and remote-access VPNs
- Wireless networking technologies
- DNS and DHCP services
- NAT and access control policies
- Network monitoring and packet analysis tools
- Experience troubleshooting complex infrastructure and network incidents.
- Experience supporting Windows Server, Active Directory, Group Policy, and core infrastructure services.
- Working knowledge of Microsoft Entra ID and Microsoft 365 environments.
- Experience supporting Azure networking and hybrid cloud connectivity.
- Experience working with internet service providers, telecommunications carriers, vendors, and managed service providers.
- Experience developing network diagrams, technical standards, implementation plans, and recovery documentation.
- Proven experience leading infrastructure projects and implementing changes within production environments.
- Strong analytical, troubleshooting, organizational, and problem-solving skills.
- Excellent written and verbal communication skills.
- CCNA, CCNP, or equivalent networking certification.
- Microsoft Azure networking or infrastructure certification.
- Experience with Fortinet, Ubiquiti/UniFi, Meraki, or similar enterprise networking platforms.
- Experience with Zscaler, Secure Access Service Edge (SASE), or zero-trust networking solutions.
- Experience supporting infrastructure within regulated, financial services, or insurance environments.
- Experience leading office buildouts, network refresh initiatives, firewall migrations, and multi-site connectivity projects.
Compensation and Benefits:
Base salary range for this position is $125,000–$165,000 plus eligibility for a performance-based annual bonus. Actual compensation will be based on experience, education, and geographic location. We offer a competitive benefits package, including: 401(k) with company match, Paid Time Off, Sick Leave, Medical, Health Reimbursement Arrangement (HRA), Telemedicine, Wellness Program, Employee Assistance Program (EAP), Dental, Vision, Accident & Critical Illness Insurance, Flexible Spending Account (FSA), Dependent Care FSA, Group and Voluntary Life Insurance, Short- and Long-Term Disability, Pet Insurance, Transit and Parking benefits.
Skills
- Active Directory
- AI
- Authentication
- Automation
- AWS
- Azure
- Ccna
- CCNP
- Cisco Meraki
- Cloud
- Corrective Action
- DHCP
- DNS
- Entra ID
- Firewall
- Fortinet
- Microsoft Exchange
- Network Security
- Networking
- Onedrive
- QoS
- Root Cause Analysis
- Sase
- SD-WAN
- SharePoint
- TCP/IP
- Virtualization
- VLAN
- VPN
- WAN
- Windows Server
- Zero Trust
- Zscaler