Senior Infrastructure Engineer

Senior Infrastructure Engineer

At Carriage Services, we are united by our purpose of creating premier experiences through innovation, empowered partnership, and elevated service. As a member of our team, you’ll join a dynamic community dedicated to setting new standards in the Funeral and Cemetery profession. Join us on this exciting journey as we continue to shape the future of our industry. Carriage Services is an equal opportunity employer.

The Senior Infrastructure Engineer is the senior technical authority for the infrastructure side of the combined department. This role owns the design and integrity of the server, virtualization, storage, cloud, and identity environments, and carries direct responsibility for the largest body of inflight infrastructure work, including the Data Center Refresh and the ongoing maturation of the Azure and on-premises footprint.

The Senior Infrastructure Engineer serves as the primary point of delegation for infrastructure, database, security, and blended junior work. The position is built so the department operates as a layered organization rather than a flat one, giving senior staff the authority to be a team lead, A high degree of identity management and cloud management expertise is essential, as identity and cloud sit at the center of both the current roadmap and the future state of the department.

Compensation: $130k+ (Bonus and Benefits)

Job Type: FT

Location: Houston Support Center

Responsibilities

• Own the design of server, virtualization, storage, and cloud infrastructure across the data center, headquarters, and field footprint.
• Serve as the technical lead for the execution of the Data Center Refresh.
• Establish and enforce standards for the on-premises and Azure environments.
• Own backup, recovery, and resilience architecture across the entire footprint.
• Serve as the senior owner of identity architecture across Entra ID, Active Directory, and the hybrid identity model.
• Define and govern identity lifecycle, provisioning, deprovisioning, and access standards across the organization.
• Lead conditional access, privileged identity, and authentication policy in partnership with the Security Engineer.
• Drive identity automation through Intune and Entra, including device identity and certificate-based access models.
• Own the integrity of the identity foundation that downstream cloud and security controls depend on.
• Own the design, governance, and ongoing optimization of the Azure environment.
• Lead the strategy for cloud workload placement, including the domain controller posture and warm standby model.
• Establish cloud cost governance, tagging, and resource standards.
• Define cloud security baselines and ensure alignment with the broader security program.
• Guide the continued shift toward an Azure-primary posture where it serves resilience and operational goals.
• Serve as the primary delegate for systems, security, and junior infrastructure workstreams.
• Balance workload across direct reports and act as the first technical escalation point for their areas.
• Mentor junior staff and contribute to a culture that pairs deep specialization with cross-team collaboration.

Requirements

• Deep expertise in identity management across Entra ID and Active Directory in a hybrid model.
• Working command of endpoint and identity tooling, including Intune and Entra automation.
• Strong cloud management experience, with demonstrated ownership of an Azure environment at scale.
• Proven experience leading or mentoring technical staff, with the maturity to manage a multi-disciplinary team.
• Extensive hands-on experience designing and operating enterprise servers, virtualization, and storage environments.
• Strong grasp of backup, recovery, and resilience design across on-premises and cloud.
• Experience with certificate-based authentication and Cloud NAC concepts.
• Familiarity with multi-site operations spanning a data center, headquarters, and a large field footprint.
• Relevant certifications across Microsoft identity, Azure, and infrastructure disciplines.
• Exposure to security operations and a working relationship with SOC or MSSP models.

Physical Requirements

• Primarily works in an office environment, with extended periods of sitting and working on a computer.
• Occasional standing, walking, stooping, kneeling, bending, or reaching to install, service, or inspect equipment in data center and server-room environments.
• Ability to frequently lift up to 25 pounds and occasionally move up to 50 pounds of IT equipment (e.g., servers, network hardware), with or without assistance.
• Occasional travel between the data center, headquarters, and field locations as needed.