Infrastructure Engineer II

Scheduled hours per week: 40

Scheduled months per year: 12

Remote work eligibility: Hybrid

Hiring range: $79,500 to $99,400

Position purpose

Infrastructure Services builds and runs the compute, storage, identity, cloud, container, and high-performance computing platforms that support Dartmouth’s research, teaching, and administrative work. Engineers work in small cross-functional teams and own their platforms end to end, from design and automation through security, operations, and lifecycle.

The Infrastructure Engineer II is a hands-on engineer who builds, secures, and operates these platforms across on-premises and public cloud environments. Security is central to the role: platforms are designed to be secure by default, hardened, kept current, and closely integrated with Information Security monitoring and incident response. The role works independently, leads technical delivery on projects, and mentors less experienced engineers.

Key accountabilities

Infrastructure Operations

• Builds and maintains automation and configuration management for infrastructure platforms, including compute, storage, identity, cloud, container, and research computing platforms.
• Operates and supports research computing environments, including Slurm-based HPC clusters, GPU and AI compute, and research storage.
• Keeps platforms healthy and meeting service objectives through monitoring, capacity planning, patching, and lifecycle management.
• Implements, tests, and maintains backup, disaster recovery, and business continuity capabilities for supported platforms.
• Leads troubleshooting of complex incidents, performs root cause analysis, and drives lasting fixes.
• Maintains infrastructure networking, including VLANs, routing, VPN, and DNS.
• Maintains runbooks, standards, and configuration baselines in version control, and plans changes through change management to minimize disruption.
• Participates in an on-call rotation.

Infrastructure Security

• Implements and maintains infrastructure security controls, including host and network firewalls, network segmentation (e.g., Nutanix Flow), DNS security, and cloud security policies (e.g., AWS security groups and NACLs).
• Hardens systems to security baselines (e.g., CIS Benchmarks) and enforces least-privilege, privileged access, and identity controls on owned platforms.
• Drives vulnerability remediation across owned platforms, prioritized by severity and risk, in partnership with Information Security.
• Integrates platforms with security tooling for logging, monitoring, and endpoint protection (e.g., SIEM, EDR), and supports security incident response and investigation.
• Secures environments that host regulated research and institutional data (e.g., HIPAA, FERPA) and provides evidence for audits and compliance reviews.
• Builds security controls into automation and infrastructure-as-code so they are consistent, repeatable, and auditable.

Project Support

• Leads technical delivery on infrastructure projects, from design and prototyping through production rollout, with security requirements addressed from the start.
• Contributes to platform architecture and technology decisions as a member of a cross-functional platform team.
• Works with application, security, network, and research teams, including faculty and researchers, so solutions fit how services are actually used.
• Provides cost estimates and cost analysis for infrastructure work, helps evaluate vendor solutions, and manages vendor support and SLAs for owned platforms.
• Communicates status, technical decisions, and risks clearly to teammates and stakeholders.

Training and Development

• Builds deep expertise in one or more platform domains and shares it through documentation, code review, and pairing.
• Mentors Infrastructure Engineer I colleagues and supports their growth.
• Stays current on infrastructure and security tools, threats, and practices, and brings forward ideas worth adopting.

Team Culture and Collaboration

• Demonstrates commitment to inclusive practices through day-to-day interactions and team collaboration.
• Engages in opportunities to build awareness and understanding across diverse perspectives.

Required qualifications: education and experience

Bachelors or equivalent combination of education and experience

Required qualifications: skills, knowledge and abilities

• Bachelor’s degree in computer science, information security, or a related field, or an equivalent combination of education and experience
• 4 or more years of experience supporting production infrastructure in enterprise or research computing environments
• Strong Linux and/or Windows systems administration and troubleshooting skills
• Experience automating infrastructure with scripting (e.g., Python, PowerShell, Bash) and infrastructure-as-code tools
• Hands-on experience with one or more of the following: virtualization, public cloud, identity (e.g., Active Directory, Entra ID), containers, or HPC
• Working knowledge of infrastructure security, including system hardening, vulnerability management, access controls, and firewalls
• Working knowledge of networking, including VLANs, routing, and DNS
• Ability to work independently, prioritize, and resolve complex issues with minimal supervision
• Clear written and verbal communication, including explaining technical decisions to non-engineers

Preferred qualifications

• Experience with Ansible/AAP and Terraform or CloudFormation in Git-based workflows and CI/CD pipelines
• Experience with security tooling such as EDR, SIEM, vulnerability scanning, and cloud security posture management
• Familiarity with security frameworks such as NIST 800-53, NIST 800-171, or CIS Controls
• Experience running Kubernetes or other container orchestration platforms in production
• Experience with AWS, Azure, OCI, or Google Cloud
• Experience with Nutanix or VMware virtualization
• Experience with HPC environments, including RHEL, Slurm, Open OnDemand, Apptainer, GPU clusters, and research storage (e.g., VAST, PowerScale, Kerberized NFS)
• Experience designing and testing backup and disaster recovery solutions
• Relevant certifications such as Security+, GIAC (e.g., GSEC, GCIH), RHCSA, AWS or Azure associate-level certifications, or CKA
• Experience in higher education or research environments