IT Infrastructure Manager

Infrastructure, Cloud, Endpoints, and End User Technology

Rose Paving LLC

About the Role

Rose Paving is a nationwide commercial paving company in an active period of growth and acquisition. Our IT environment is a modern Microsoft centric stack that includes Azure, Entra ID, Intune, Teams Phone, Fortinet, and CrowdStrike, supporting a growing portfolio of offices, field operations, and recently acquired entities. The environment is being actively built, integrated, automated, and matured.

We are seeking an IT Infrastructure Manager who is deeply technical, remains hands on with the platform, and wants the autonomy to operate an environment to a high standard. This role owns infrastructure, cloud services, endpoints, networking, voice, and end user support, and sets the operational bar for the team responsible for delivering it.

This is a strong fit for a technologist who enjoys staying current on the Microsoft ecosystem, has clear opinions on identity and endpoint architecture, uses scripting and automation as a default rather than a last resort, and wants meaningful input on architecture and strategy.

Core Responsibilities

Infrastructure and Cloud Operations

• Azure and Microsoft 365: Own the daily administration and ongoing maturity of Entra ID, Exchange Online, SharePoint Online, OneDrive, Teams, and Azure infrastructure, including storage accounts, identity integrations, networking, and policy.
• Endpoint management: Lead the Windows endpoint platform end to end using Intune, Autopilot, compliance policies, application deployment, update rings, and full device lifecycle management.
• Networking: Manage Fortinet firewalls, SD WAN, site to site VPN, wireless, and WAN connectivity across headquarters, regional offices, and satellite locations.
• Voice and telecom: Administer Microsoft Teams Phone, DID assignments, call queues, auto attendants, and the associated carrier relationships.
• Backup and disaster recovery: Own Druva backup and recovery, business continuity planning, and the runbooks and testing required to validate readiness.
• Monitoring and observability: Use LogicMonitor and complementary tooling to ensure infrastructure issues are detected and addressed before they impact users.

Team Leadership and Service Delivery

• Manage and mentor the infrastructure and end user support team, establishing clear standards for technical depth, ticket quality, and customer experience.
• Own the service desk operation in SolarWinds Service Desk (Samanage), including SLAs, queue management, routing, reporting, and continuous improvement.
• Develop and maintain the playbooks, standards, and documentation that allow the team to scale as the organization grows.
• Serve as the escalation point for major incidents and high visibility outages, providing calm, technical, and clear communication under pressure.

Onboarding, Offboarding, and Identity Operations

• Drive the joiner, mover, and leaver process, including account provisioning, group and license assignment, hardware imaging and deployment, and clean offboarding with equipment recovery.
• Coordinate identity, permissions, and Azure storage integrations with the teams that own Business Central, Dynamics 365 Sales, and Power Platform.
• Continue to extend the existing PowerShell and Azure Automation footprint to reduce manual effort across recurring administrative tasks.

Security and Compliance Partnership

• Partner with security leadership on Conditional Access, Microsoft Defender, CrowdStrike Falcon Complete, email security, and KnowBe4 awareness training.
• Ensure endpoint, identity, and infrastructure configurations align with security policy in practice, not only in documentation.
• Support audit and compliance activities by providing the evidence, exports, and reports required.

Modernization and Strategic Projects

• Contribute to enterprise initiatives in AI enablement, automation, M&A integration, and infrastructure modernization.
• Evaluate new tools and platforms with appropriate diligence, balancing innovation with stability and total cost of ownership.
• Identify opportunities for operational improvement and bring forward recommendations supported by data and clear reasoning.

Scope and Platform Boundaries

This role is not directly responsible for the functional ownership, administration, development, or architecture of Microsoft Business Central, Dynamics 365 Sales (XRM), or Power Platform application development. Those platforms are managed by dedicated business systems leadership and external consulting partners.

This role will, however, support the operational dependencies that keep those platforms running effectively, including:

• User provisioning and deprovisioning across all platforms
• Identity, group, and permissions coordination
• Azure storage and file integrations
• Underlying infrastructure availability and performance
• Endpoint, access, and SaaS integration troubleshooting

Technology Environment

The IT ecosystem includes the following platforms and services:

• Cloud and identity: Microsoft 365 (E3 and E5), Azure, Entra ID, Conditional Access, SharePoint Online, OneDrive, Azure Storage Accounts
• Endpoints: Microsoft Intune, Autopilot, Windows 11, Microsoft Defender
• Networking: Fortinet firewalls and SD WAN across multiple locations
• Voice and mobile: Microsoft Teams Phone, Verizon and AT&T carrier services, Brightfin mobile lifecycle management
• Security: CrowdStrike Falcon Complete, Microsoft Defender suite, KnowBe4
• Backup and monitoring: Druva for backup and disaster recovery, LogicMonitor
• Service and support: SolarWinds Service Desk (Samanage), NinjaRMM
• Physical and print: Verkada cameras, Konica and HP print infrastructure
• Adjacent platforms: Microsoft Business Central, Dynamics 365 Sales, Power Platform (operationally supported, not owned)

Required Qualifications

• Seven or more years of progressive IT experience, including direct management or technical lead responsibility.
• Deep, hands-on Microsoft 365 administration across Exchange Online, Teams, SharePoint, OneDrive, and Entra ID, with proficiency in PowerShell and Microsoft Graph rather than reliance on admin portals alone.
• Strong Azure administration experience, including IAM, storage, networking fundamentals, policy, and cost management.
• Real world Intune and Autopilot experience deploying and managing Windows fleets at scale.
• Solid networking fundamentals across routing, switching, wireless, VPN, and firewall administration. Fortinet experience is strongly preferred.
• Demonstrated ownership of backup, disaster recovery, and business continuity in a production environment.
• Experience supporting nationwide or multi location organizations with a mix of corporate users and field or operational staff.
• Strong troubleshooting capabilities across infrastructure, identity, endpoints, cloud services, and SaaS platforms.
• Excellent written and verbal communication skills, with the ability to adjust tone and detail level for both executive and operational audiences.
• Ability to operate independently, prioritize across competing demands, and consistently follow through to completion.

Preferred Experience

• Strong PowerShell, scripting, and automation experience, including Azure Automation, Microsoft Graph, and scheduled runbooks.
• Experience integrating acquired companies into a parent Microsoft 365 and Azure tenant.
• Hands on Teams Phone administration, including DID management, call routing, and carrier coordination.
• Familiarity with HR driven user provisioning systems such as NIM, Tools4Ever, or similar platforms integrated with Paycom or comparable HRIS tools.
• Practical experience deploying AI tooling in an enterprise context, including Microsoft Copilot, automation workflows, and knowledge retrieval.

Education and Certifications

A Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field is preferred. Equivalent professional experience will be strongly considered.

Any of the following certifications are considered a plus:

• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Endpoint Administrator Associate
• Microsoft Certified: Modern Desktop Administrator Associate
• Microsoft 365 Certified: Enterprise Administrator Expert
• CompTIA Network and Security
• Fortinet NSE certifications
• ITIL Foundation
• VMware, Cisco, or other cloud and infrastructure certifications

Why Rose Paving

• Meaningful ownership. This role directly operates the environment, sets the technical standards, and contributes to architecture and strategy decisions.
• Modern technology stack. A Microsoft first cloud environment with active investment in automation, security, and AI capabilities.
• Pace and variety. Ongoing M&A activity, new locations, new platforms, and a steady stream of meaningful technical challenges.
• A team that builds. A culture that values scripting, documentation, and automation as core engineering practices.
• Direct access to leadership. Close working relationships with senior IT and executive leadership, with a clear path for well-reasoned ideas to move forward.

Position Details

This is a full-time leadership role supporting Rose Paving's continued growth, operational scalability, and enterprise technology modernization. The ideal candidate is technical, organized, security aware, and energized by balancing leadership responsibilities with hands on execution.