Enterprise Endpoint Infrastructure Administrator

Overview

ABOUT THE POSITION

Location: Massachusetts Office Locations preferred

The Enterprise Infrastructure and Endpoint Administrator is responsible for managing and optimizing endpoint devices and core operational infrastructure, ensuring consistent performance, robust security, and seamless integration across systems. This role involves overseeing endpoint lifecycles, developing policies, ensuring compliance with VHB endpoint standards, and collaborating across IT teams to support organizational goals. The individual is expected to be automation-oriented, seeking opportunities to incorporate automation into processes wherever possible.

Key Responsibilities:

Endpoint Management:

• Oversee the lifecycle management of core infrastructure endpoints, such as servers and services, ensuring efficient deployment, maintenance, and retirement.
• Guide the governance and core administrative functions through design and management of policies for user-based endpoints, including laptops and mobile devices, ensuring compliance with security baselines and organizational needs. Policy engines include Group Policy, Microsoft Intune, and other related or similar tools.

Application Deployment:

• Participate in application deployment at scale, collaborating with application asset managers, application packagers, and application subject matter experts to ensure consistent, reliable, and timely deployment of applications to endpoints.

On-Premises Infrastructure Management:

• Manage physical and virtual servers, storage, and network components within IT-controlled facilities and datacenters.
• Strengthen core infrastructure principles, including DRAS, storage solutions, LAN/WAN configurations, and perimeter security (firewalls).

Cloud Infrastructure Administration:

• Partner with the cloud team to support and drive core infrastructure technical needs.
• Deploy, configure, and manage cloud-based services and infrastructure as needed, ensuring integration with on-premises systems.

Hybrid Environment Strategy:

• Develop strategies for hybrid cloud/on-premises environments to optimize performance and cost.
• Implement security measures across both cloud and on-premises systems.

Disaster Recovery and Business Continuity:

• Design and implement disaster recovery plans encompassing both cloud and on-premises systems.
• Regularly test and update recovery procedures.

Security Collaboration:

• Collaborate with the Security Operations department to ensure compliance with endpoint security standards and support modern, passwordless authentication methods including Windows Hello for Business, FIDO2, certificate-based authentication and Microsoft Authenticator.

Automation Initiatives:

• Identify and implement automation opportunities to streamline processes and improve efficiency across endpoint and infrastructure management.

Minimum Qualifications:

• 5-7 years of IT systems engineering experience
• BS in Computer Science or related discipline
• Applicants must be legally authorized to work for VHB in the U.S. without employer sponsorship.

Technical Expertise:

• Expertise in Microsoft Windows Client, Windows Server, Active Directory and PowerShell
• Expertise in Microsoft endpoint management tooling including Microsoft Configuration Manager (formerly SCCM), Microsoft Intune, and Windows Autopilot.
• Proficiency in on-premises infrastructure technologies, including hypervisors, DRAS, storage solutions, LAN/WAN configurations, and perimeter security (firewalls).
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) for integration purposes.

Security and Compliance:

• Familiarity with zero-trust principles and their application in endpoint hardening.
• Proficiency with hybrid-joined and Entra-joined endpoint trust scenarios and related technologies such as Entra Cloud Kerberos.
• Experience with Active Directory Certificate Services and certificate-based authentication (802.1x) 

Automation:

• Strong working knowledge of automation tools and strategies.
• Ability to drive and implement automation initiatives related to endpoint and infrastructure management.

Soft Skills:

• Strong troubleshooting skills and problem-solving orientation.
• Strong collaboration and communication skills.
• Adaptability, leadership, and strategic thinking.

Professional Development:

• Opportunities for certifications in relevant technologies alongside traditional IT certifications.

We are VHB! We’re an inspired and innovative team of engineers, scientists, planners, and designers who partner with clients in the transportation, real estate, institutional, and energy industries, as well as federal, state, and local governments. Our work helps improve mobility, enhance communities, and contribute to economic vitality. We do this while balancing development and infrastructure needs with stewardship of our environment. 

Our people make us great! VHB provides a differentiating employee experience, which includes: 

• Diverse and inclusive culture of collaboration and innovation
• Opportunity to work on complex, transformational projects
• Community and social responsibility as sustainable stewards
• Focus on learning, development, and career growth
• Best-in-class benefits, including flexible, hybrid workplace  

We are consistently rated one of the top AEC firms to work for across our 30+ offices on the East Coast. We’re growing, and we hope you’ll join us! 

VHB is a proud Equal Opportunity Employer. Since our founding, we have intentionally fostered a culture of inclusion and belonging, supported by deep-rooted core values, one of which is diversity. Qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sex, sexual orientation, gender identity/expression, national origin, disability, protected veteran status, or other characteristics protected by law.

#LI-KW1

#LI-Hybrid