Sr. Infrastructure Engineer

· Design, maintain, and automate workstation/laptop builds and imaging using modern tools (Microsoft Intune, Windows Autopilot, MDT, SCCM).

· Manage device enrollment, configuration profiles, compliance policies, app deployment/protection, and patching across Windows, iOS, Android, and Mac devices.

· Oversee endpoint security baselines, conditional access, and integration with Microsoft Defender for Endpoint. Design and oversee core M365 tenant configurations: licensing, security/compliance policies, and identity management (Entra ID/Azure AD integration).

· Design and oversee Microsoft Teams: policies, channels, guest access, meetings/calling, and app integrations.

· Design and oversee Exchange Online: mailbox management, distribution groups, email flow rules, anti-spam/quarantine, and transport rules.

· Own core AD/Entra ID governance: user provisioning/deprovisioning automation, group policies, delegated rights models, and synchronization.

· Implement and maintain least-privilege access (RBAC) for support teams and end-users.

· Develop and maintain PowerShell scripts, Microsoft Graph API workflows, and automation for provisioning, reporting, and remediation for endpoints.

· Monitor endpoint health, performance, and compliance; troubleshoot issues and drive proactive improvements.

· Partner with the larger Infrastructure Team to provide escalation support, delegated access (e.g., Intune Help Desk roles), and self-service tools.

· Partner with Network team on endpoint-network integration (e.g., Wi-Fi profiles, VPN configs).

· Document processes, create runbooks, and train teams on new standards.

· Ensure endpoint and collaboration configs meet security best practices and regulatory needs (e.g., food safety compliance, data protection).

· Participate in audits, vulnerability remediation, and incident response for managed devices/tenants.

· Bachelor's degree in Computer Science, Information Technology or related field, or equivalent experience.

· 4+ years of hands-on experience administering Microsoft 365, Intune, Entra ID/Azure AD, Teams, SCCM, and Exchange Online in an enterprise environment.

· Experience with endpoint management in multi-site or manufacturing settings preferred.

· Deep expertise in Microsoft Intune and SCCM (device management, compliance, Autopilot).

· Strong knowledge of M365 admin center, PowerShell, Microsoft Graph API, and RBAC/conditional access.

· Proficiency in Active Directory/Entra ID, Exchange Online, Teams administration.

· Familiarity with endpoint security tools (Defender, BitLocker, etc.).

· Experience with automation/scripting and modern deployment strategies.

At fairlife, we believe in better — and that includes how we support our people. We offer a comprehensive suite of benefits and wellbeing resources designed to support you physically, emotionally, socially, and financially, both in and out of work.

· Comprehensive medical, dental, and vision coverage, effective day one!

· Supplemental health plans (hospital indemnity, accident, and critical illness insurance)

· Paid Time Off to recharge and support work-life balance

· Paid parental leave & adoption assistance (up to $10,000)

· Parental support & family care benefits, including childcare resources and lactation support

· 401(k) to support retirement planning with up to 9% in employer match

· Wellness reimbursement (up to $500 for qualified wellbeing expenses)

· Employee Assistance Program (EAP) for emotional wellbeing and work-life support

· Company-paid life insurance and short-term disability

· Employer HSA funding (for HDHP participants)

· Tuition reimbursement (up to $10,000) and student loan repayment ($200/month)

· Learning & development programs to unlock your full potential

· Rewards & recognition, matching gifts, free product, and Business Resource Groups

fairlife’s nour!sh program is designed to meet you where you are — supporting your individual wellbeing journey while enabling you to do your best work every day.