Lead Systems Infrastructure Engineer

Travel + Leisure Co

Confirmed live today High trust
Remote

Quick summary

Work type
Remote
Location
Florida
Employment
Full-time
Posted
8 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $159k
$102k $233k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $144,350–$174,600.

Based on 240 similar postings.

Employer

About Travel + Leisure Co

Travel + Leisure Co. is the world’s leading membership and leisure travel company offering vacation ownership, travel membership, and exchange programs.

View all roles at Travel + Leisure Co

At a glance

TL;DR · Lead Systems Infrastructure Engineer

JOB TITLE: Lead Systems Infrastructure Engineer The Lead Systems Infrastructure Engineer serves as the subject matter expert for enterprise Active Directory, DDI, and Certificate Services infrastructure. This role involves engineering and operating a secure, highly available environment by managing multi-forest Active Directory designs, DNS, DHCP, and IP address management. The engineer will build automation for account lifecycles, certificate issuance, and DDI workflows to reduce manual effort. Key technologies include Windows Server, VMware ESXi, SCCM, and automation tools like PowerShell, Python, and Ansible. Responsibilities include leading migrations, defining technical standards, and mentoring engineers while ensuring compliance with SOX, PCI, and PII requirements. The position solves complex infrastructure problems by providing high-level technical direction and serving as the final internal escalation point for critical directory and certificate services issues.

What you'll do

  • Manage the day-to-day engineering, administration, and support of the enterprise Active Directory environment.
  • Engineer and maintain enterprise DNS, DHCP, and IP address management (DDI) services.
  • Administer the Public Key Infrastructure (PKI), including certificate authority hierarchy and lifecycle management.
  • Develop automation for AD, DDI, and PKI operations using scripting, APIs, or orchestration tools.
  • Lead the technical planning and execution of infrastructure projects like domain migrations and PKI modernization.
  • Serve as the final internal escalation point for complex technical incidents and perform root cause analysis.
  • Define infrastructure standards, security hardening practices, and compliance requirements for SOX, PCI, and PII.
  • Mentor engineers through design discussions, troubleshooting, peer reviews, and knowledge-sharing sessions.

What we're looking for

  • Minimum of 15 years of experience in enterprise IT infrastructure engineering or administration in a mid-size to large environment.
  • Minimum of 11 years of hands-on experience designing, administering, and securing Active Directory environments, including multi-forest and multi-domain architectures.
  • Minimum of 8 years of hands-on experience designing and administering enterprise DNS, DHCP, and IP address management (DDI) services.
  • Minimum of 8 years of hands-on experience designing and administering enterprise PKI / Certificate Services, including certificate authority hierarchy and certificate lifecycle management.
  • Experience automating Active Directory, DDI, and PKI administration using scripting, APIs, or orchestration tools.
  • Working knowledge of broader WINTEL infrastructure, including Windows Server, virtualization, storage, or endpoint platforms.
  • Experience leading enterprise Active Directory, DDI, or Certificate Services projects and mentoring engineers on technical standards.
  • Bachelor's degree in Computer Science, Information Technology, Engineering, or a related technical field (preferred); equivalent professional experience accepted.

More like this

Similar roles

Domain Services Engineer

General Dynamics

Springfield, VA +1 62 days ago $125,800–$170,200
Active Directory Cisco ISE DNS DHCP IPAM 802.1X RADIUS PowerShell Python Bash Perl LDAP PKI Azure AD Entra ID Group Policy Objects Hybrid Cloud Zero Trust Network Architecture SIEM
5+ yrs exp

Lead Infrastructure Engineer

JPMorgan Chase

Plano, TX +3 25 days ago
AWS Python Infrastructure as Code Linux Windows Snowflake Databricks Tableau SAML OIDC DNS TLS IAM SRE Monitoring Logging Networking Storage Engineering Active Directory
5+ yrs exp

Lead Infrastructure Engineer

JPMorgan Chase

San Francisco, CA 62 days ago
BGP OSPF Cisco Arista Fortinet Python L2/L3 Switching Routing VLANs STP LACP Port-channels Networking Automation Infrastructure Engineering Storage Engineering Databases Network Migration
5+ yrs exp

Lead Infrastructure Engineer

JPMorgan Chase

Tampa, FL 32 days ago
Azure Terraform Bicep CI/CD ExpressRoute VPN Virtual WAN BGP Azure Monitor Log Analytics Network Watcher Application Insights AKS Service Bus Event Hubs Git Mainframe Modernization Infrastructure as Code DNS Private Link
10+ yrs exp

Lead Infrastructure Engineer

JPMorgan Chase

Houston, TX +1 30 days ago
Routing and Switching LAN/WAN Data Center Networking Wireless Network Security Load Balancing Proxy Optical Transport Cisco ASR VXLAN Cisco ACI Arista Fabric Fortinet Check Point F5 LTM Wireshark cPacket Splunk SevOne ThousandEyes Python Ansible Linux Multicast Low-latency Networking Version Control
5+ yrs exp