job purpose: The Sr. Infrastructure Engineer will focus on Microsoft & Endpoint and will own the development, governance, standardization, and administration of fairlife's endpoint devices, Microsoft’s endpoint focused solutions, and all software/services focused on endpoint administration. Reporting directly to the Director of IT, this role centralizes foundational Microsoft technologies (Intune, Active Directory/Entra ID, Teams, Exchange Online, etc.) to ensure consistent, secure, and efficient device management and user productivity across all sites. This position supports fairlife's growth by enabling rapid onboarding, focused support/admin roles and reducing risks.

This is a high-impact role in a dynamic environment—perfect for someone passionate about Microsoft and their cloud technologies, automation, and building reliable systems in a fast-paced environment.

responsibilities: 

· Design, maintain, and automate workstation/laptop builds and imaging using modern tools (Microsoft Intune, Windows Autopilot, MDT, SCCM).

· Manage device enrollment, configuration profiles, compliance policies, app deployment/protection, and patching across Windows, iOS, Android, and Mac devices.

· Oversee endpoint security baselines, conditional access, and integration with Microsoft Defender for Endpoint. Design and oversee core M365 tenant configurations: licensing, security/compliance policies, and identity management (Entra ID/Azure AD integration).

· Design and oversee Microsoft Teams: policies, channels, guest access, meetings/calling, and app integrations.

· Design and oversee Exchange Online: mailbox management, distribution groups, email flow rules, anti-spam/quarantine, and transport rules.

· Own core AD/Entra ID governance: user provisioning/deprovisioning automation, group policies, delegated rights models, and synchronization.

· Implement and maintain least-privilege access (RBAC) for support teams and end-users.

· Develop and maintain PowerShell scripts, Microsoft Graph API workflows, and automation for provisioning, reporting, and remediation for endpoints.

· Monitor endpoint health, performance, and compliance; troubleshoot issues and drive proactive improvements.

· Partner with the larger Infrastructure Team to provide escalation support, delegated access (e.g., Intune Help Desk roles), and self-service tools.

· Partner with Network team on endpoint-network integration (e.g., Wi-Fi profiles, VPN configs).

· Document processes, create runbooks, and train teams on new standards.

· Ensure endpoint and collaboration configs meet security best practices and regulatory needs (e.g., food safety compliance, data protection).

· Participate in audits, vulnerability remediation, and incident response for managed devices/tenants.

skills/qualifications required: 

· Bachelor's degree in Computer Science, Information Technology or related field, or equivalent experience.

· 4+ years of hands-on experience administering Microsoft 365, Intune, Entra ID/Azure AD, Teams, SCCM, and Exchange Online in an enterprise environment.

· Experience with endpoint management in multi-site or manufacturing settings preferred.

· Deep expertise in Microsoft Intune and SCCM (device management, compliance, Autopilot).

· Strong knowledge of M365 admin center, PowerShell, Microsoft Graph API, and RBAC/conditional access.

· Proficiency in Active Directory/Entra ID, Exchange Online, Teams administration.

· Familiarity with endpoint security tools (Defender, BitLocker, etc.).

· Experience with automation/scripting and modern deployment strategies.

how fairlife nourishes you:

At fairlife, we believe in better — and that includes how we support our people. We offer a comprehensive suite of benefits and wellbeing resources designed to support you physically, emotionally, socially, and financially, both in and out of work.

· Comprehensive medical, dental, and vision coverage, effective day one!

· Supplemental health plans (hospital indemnity, accident, and critical illness insurance)

· Paid Time Off to recharge and support work-life balance

· Paid parental leave & adoption assistance (up to $10,000)

· Parental support & family care benefits, including childcare resources and lactation support

· 401(k) to support retirement planning with up to 9% in employer match

· Wellness reimbursement (up to $500 for qualified wellbeing expenses)

· Employee Assistance Program (EAP) for emotional wellbeing and work-life support

· Company-paid life insurance and short-term disability

· Employer HSA funding (for HDHP participants)

· Tuition reimbursement (up to $10,000) and student loan repayment ($200/month)

· Learning & development programs to unlock your full potential

· Rewards & recognition, matching gifts, free product, and Business Resource Groups

fairlife’s nour!sh program is designed to meet you where you are — supporting your individual wellbeing journey while enabling you to do your best work every day.

position location: Chicago, IL

reports to: Director, Infrastructure & Services

travel requirements: 25%

salary range: $115,000 - $135,000

exempt/nonexempt: Exempt

#LI-BB1