Infrastructure Engineer II

Not a Union Position SEIU Level Not an SEIU Position FLSA Status Exempt Employment Category Regular Full Time Scheduled Months per Year 12 Scheduled Hours per Week 40 Location of Position Hanover, NH 4 Currier Place, Remote Work Eligibility? Hybrid Is this a term position? No If yes, length of term in months. NA Is this a grant funded position? No Position Purpose Infrastructure Services builds and runs the compute, storage, identity, cloud, container, and high-performance computing platforms that support Dartmouth's research, teaching, and administrative work. Engineers work in small cross-functional teams and own their platforms end to end, from design and automation through security, operations, and lifecycle. The Infrastructure Engineer II is a hands-on engineer who builds, secures, and operates these platforms across on-premises and public cloud environments. Security is central to the role: platforms are designed to be secure by default, hardened, kept current, and closely integrated with Information Security monitoring and incident response. The role works independently, leads technical delivery on projects, and mentors less experienced engineers. Required Qualifications - Education and Yrs Exp Bachelors or equivalent combination of education and experience Required Qualifications - Skills, Knowledge and Abilities Bachelor's degree in computer science, information security, or a related field, or an equivalent combination of education and experience 4 or more years of experience supporting production infrastructure in enterprise or research computing environments Strong Linux and/or Windows systems administration and troubleshooting skills Experience automating infrastructure with scripting (e.g., Python, PowerShell, Bash) and infrastructure-as-code tools Hands-on experience with one or more of the following: virtualization, public cloud, identity (e.g., Active Directory, Entra ID), containers, or HPC Working knowledge of infrastructure security, including system hardening, vulnerability management, access controls, and firewalls Working knowledge of networking, including VLANs, routing, and DNS Ability to work independently, prioritize, and resolve complex issues with minimal supervision Clear written and verbal communication, including explaining technical decisions to non-engineers Preferred Qualifications Experience with Ansible/AAP and Terraform or CloudFormation in Git-based workflows and CI/CD pipelines Experience with security tooling such as EDR, SIEM, vulnerability scanning, and cloud security posture management Familiarity with security frameworks such as NIST 800-53, NIST 800-171, or CIS Controls Experience running Kubernetes or other container orchestration platforms in production Experience with AWS, Azure, OCI, or Google Cloud Experience with Nutanix or VMware virtualization Experience with HPC environments, including RHEL, Slurm, Open OnDemand, Apptainer, GPU clusters, and research storage (e.g., VAST, PowerScale, Kerberized NFS) Experience designing and testing backup and disaster recovery solutions Relevant certifications such as Security+, GIAC (e.g., GSEC, GCIH), RHCSA, AWS or Azure associate-level certifications, or CKA Experience in higher education or research environments Department Contact for Recruitment Inquiries Elijah Gagne Department Contact Phone Number 603-646-9650 Department Contact for Cover Letter and Title Elijah Gagne Equal Opportunity Employer Dartmouth College is an equal opportunity employer under federal law. We prohibit discrimination on the basis of race, color, religion, sex, age, national origin, sexual orientation, gender identity or expression, disability, veteran status, marital status, or any other legally protected status. Applications are welcome from all. Background Check Employment in this position is contingent upon consent to and successful completion of a pre-employment background check, which may include a criminal background check, reference checks, verification of work history, conduct review, and verification of any required academic credentials, licenses, and/or certifications, with results acceptable to Dartmouth College. A criminal conviction will not automatically disqualify an applicant from employment. Background check information will be used in a confidential, non-discriminatory manner consistent with state and federal law. Is driving a vehicle (e.g. Dartmouth vehicle or off road vehicle, rental car, personal car) an essential function of this job? Not an essential function Special Instructions to Applicants Dartmouth College has a Tobacco-Free Policy. Smoking and the use of tobacco-based products (including smokeless tobacco) are prohibited in all facilities, grounds, vehicles or other areas owned, operated or occupied by Dartmouth College with no exceptions. For details, please see our policy. https://policies.dartmouth.edu/policy/tobacco-free-policy Quick Link https://searchjobs.dartmouth.edu/postings/87752 Description Infrastructure Operations Builds and maintains automation and configuration management for infrastructure platforms, including compute, storage, identity, cloud, container, and research computing platforms. Operates and supports research computing environments, including Slurm-based HPC clusters, GPU and AI compute, and research storage. Keeps platforms healthy and meeting service objectives through monitoring, capacity planning, patching, and lifecycle management. Implements, tests, and maintains backup, disaster recovery, and business continuity capabilities for supported platforms. Leads troubleshooting of complex incidents, performs root cause analysis, and drives lasting fixes. Maintains infrastructure networking, including VLANs, routing, VPN, and DNS. Maintains runbooks, standards, and configuration baselines in version control, and plans changes through change management to minimize disruption. Participates in an on-call rotation. Percentage Of Time 35% Description Infrastructure Security Implements and maintains infrastructure security controls, including host and network firewalls, network segmentation (e.g., Nutanix Flow), DNS security, and cloud security policies (e.g., AWS security groups and NACLs). Hardens systems to security baselines (e.g., CIS Benchmarks) and enforces least-privilege, privileged access, and identity controls on owned platforms. Drives vulnerability remediation across owned platforms, prioritized by severity and risk, in partnership with Information Security. Integrates platforms with security tooling for logging, monitoring, and endpoint protection (e.g., SIEM, EDR), and supports security incident response and investigation. Secures environments that host regulated research and institutional data (e.g., HIPAA, FERPA) and provides evidence for audits and compliance reviews. Builds security controls into automation and infrastructure-as-code so they are consistent, repeatable, and auditable. Percentage Of Time 25% Description Project Support Leads technical delivery on infrastructure projects, from design and prototyping through production rollout, with security requirements addressed from the start. Contributes to platform architecture and technology decisions as a member of a cross-functional platform team. Works with application, security, network, and research teams, including faculty and researchers, so solutions fit how services are actually used. Provides cost estimates and cost analysis for infrastructure work, helps evaluate vendor solutions, and manages vendor support and SLAs for owned platforms. Communicates status, technical decisions, and risks clearly to teammates and stakeholders. Percentage Of Time 25% Description Training and Development Builds deep expertise in one or more platform domains and shares it through documentation, code review, and pairing. Mentors Infrastructure Engineer I colleagues and supports their growth. Stays current on infrastructure and security tools, threats, and practices, and brings forward ideas worth adopting. Percentage Of Time 10% Description Team Culture and Collaboration Demonstrates commitment to inclusive practices through day-to-day interactions and team collaboration. Engages in opportunities to build awareness and understanding across diverse perspectives. Percentage Of Time 5% Demonstrates professionalism and collegiality through actions, interactions, and communications with others appropriate to an environment that is welcoming to all. Performs other duties as assigned.