fairlife, LLC is a Chicago-based nutrition company that creates great-tasting, nutrition-rich and dairy products to nourish consumers. With over $3B in annual retail sales, fairlife’s portfolio of delicious, lactose-free, real dairy products includes: fairlife® ultra-filtered milk; Core Power® High Protein Shakes, a sports nutrition drink to support post-workout recovery; fairlife® nutrition plan™, a nutrition shake to support the journey to better health. A wholly owned subsidiary of The Coca-Cola company, fairlife, LLC has been recognized by both Fast Company and Nielsen for its industry leading innovation. To learn more about fairlife and its complete line of products, please visit fairlife.com. job purpose: The Sr. Infrastructure Engineer will focus on Microsoft & Endpoint and will own the development, governance, standardization, and administration of fairlife's endpoint devices, Microsoft’s endpoint focused solutions, and all software/services focused on endpoint administration. Reporting directly to the Director of IT, this role centralizes foundational Microsoft technologies (Intune, Active Directory/Entra ID, Teams, Exchange Online, etc.) to ensure consistent, secure, and efficient device management and user productivity across all sites. This position supports fairlife's growth by enabling rapid onboarding, focused support/admin roles and reducing risks. This is a high-impact role in a dynamic environment—perfect for someone passionate about Microsoft and their cloud technologies, automation, and building reliable systems in a fast-paced environment.   responsibilities:  · Design, maintain, and automate workstation/laptop builds and imaging using modern tools (Microsoft Intune, Windows Autopilot, MDT, SCCM). · Manage device enrollment, configuration profiles, compliance policies, app deployment/protection, and patching across Windows, iOS, Android, and Mac devices. · Oversee endpoint security baselines, conditional access, and integration with Microsoft Defender for Endpoint. Design and oversee core M365 tenant configurations: licensing, security/compliance policies, and identity management (Entra ID/Azure AD integration). · Design and oversee Microsoft Teams: policies, channels, guest access, meetings/calling, and app integrations. · Design and oversee Exchange Online: mailbox management, distribution groups, email flow rules, anti-spam/quarantine, and transport rules. · Own core AD/Entra ID governance: user provisioning/deprovisioning automation, group policies, delegated rights models, and synchronization. · Implement and maintain least-privilege access (RBAC) for support teams and end-users. · Develop and maintain PowerShell scripts, Microsoft Graph API workflows, and automation for provisioning, reporting, and remediation for endpoints. · Monitor endpoint health, performance, and compliance; troubleshoot issues and drive proactive improvements. · Partner with the larger Infrastructure Team to provide escalation support, delegated access (e.g., Intune Help Desk roles), and self-service tools. · Partner with Network team on endpoint-network integration (e.g., Wi-Fi profiles, VPN configs). · Document processes, create runbooks, and train teams on new standards. · Ensure endpoint and collaboration configs meet security best practices and regulatory needs (e.g., food safety compliance, data protection). · Participate in audits, vulnerability remediation, and incident response for managed devices/tenants.   skills/qualifications required:  · Bachelor's degree in Computer Science, Information Technology or related field, or equivalent experience. · 4+ years of hands-on experience administering Microsoft 365, Intune, Entra ID/Azure AD, Teams, SCCM, and Exchange Online in an enterprise environment. · Experience with endpoint management in multi-site or manufacturing settings preferred. · Deep expertise in Microsoft Intune and SCCM (device management, compliance, Autopilot). · Strong knowledge of M365 admin center, PowerShell, Microsoft Graph API, and RBAC/conditional access. · Proficiency in Active Directory/Entra ID, Exchange Online, Teams administration. · Familiarity with endpoint security tools (Defender, BitLocker, etc.). · Experience with automation/scripting and modern deployment strategies.   how fairlife nourishes you: At fairlife, we believe in better — and that includes how we support our people. We offer a comprehensive suite of benefits and wellbeing resources designed to support you physically, emotionally, socially, and financially, both in and out of work. · Comprehensive medical, dental, and vision coverage, effective day one! · Supplemental health plans (hospital indemnity, accident, and critical illness insurance) · Paid Time Off to recharge and support work-life balance · Paid parental leave & adoption assistance (up to $10,000) · Parental support & family care benefits, including childcare resources and lactation support · 401(k) to support retirement planning with up to 9% in employer match · Wellness reimbursement (up to $500 for qualified wellbeing expenses) · Employee Assistance Program (EAP) for emotional wellbeing and work-life support · Company-paid life insurance and short-term disability · Employer HSA funding (for HDHP participants) · Tuition reimbursement (up to $10,000) and student loan repayment ($200/month) · Learning & development programs to unlock your full potential · Rewards & recognition, matching gifts, free product, and Business Resource Groups fairlife’s nour!sh program is designed to meet you where you are — supporting your individual wellbeing journey while enabling you to do your best work every day.   position location: Chicago, IL reports to: Director, Infrastructure & Services travel requirements: 25% salary range: $115,000 - $135,000 exempt/nonexempt: Exempt #LI-BB1 *Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered. Base pay range: $115,000—$135,000 USD fairlife, LLC is an equal opportunity employer. We do not discriminate on the basis of race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. All qualified applicants and employees will be given equal opportunity. Selection decisions are based on job-related factors. In addition to its nondiscrimination commitment, the Company will also provide reasonable accommodation of qualified individuals with known disabilities unless doing so would impose an undue hardship on the Company. If you have a disability and would like to request accommodation in order to apply for a position with us, please email [email protected]. For Recruitment Agencies At fairlife, we manage the majority of our hiring internally through our dedicated Talent Acquisition team, which is actively engaged in direct candidate sourcing. Most of our roles are filled through applications submitted via our careers site or through direct outreach by our team. As our recruitment is primarily handled in-house, we work only occasionally with external agencies, and only those on our existing, pre-approved vendor list. At this time, we are not reviewing or expanding that list. Unsolicited resumes or submissions from external agencies not authorized by our Talent Acquisition team will be considered direct candidate applications. As such, fairlife will not assume responsibility for any placement fees associated with these submissions.