Infrastructure Engineer

POSITION PURPOSE: The Infrastructure Engineer is responsible for the administration, configuration, and maintenance of El Pollo Loco’s hybrid IT environment as the company transitions from a traditional datacenter model toward a cloud-native AWS architecture. This role is central to EPL’s cloud-first replatforming initiative — supporting the migration of workloads from the colocation datacenter in Irvine to AWS managed and serverless services, while ensuring the stability of on-premises systems during the transition. The Infrastructure Engineer owns day-to-day operations across cloud infrastructure (AWS), virtualization (VMware), networking (Meraki, Palo Alto, NSX), systems administration, and restaurant connectivity, and will play a hands-on role in driving the decommissioning of legacy datacenter infrastructure as workloads migrate to the cloud. ESSENTIAL DUTIES AND RESPONSIBILITIES: Administer and evolve EPL’s AWS environment, including compute (EC2, Lambda), databases (Aurora, RDS, DynamoDB), networking (VPC, Transit Gateway), storage (S3), identity (IAM), and cost management (Cost Explorer, Savings Plans), ensuring scalability, security, and optimal performance. Support the active migration of datacenter workloads to AWS-native managed and serverless services, working closely with cloud architects and managed service partners on assessment findings and implementation; participate in colo-exit sequencing, workload dependency mapping, and cutover coordination. Implement and maintain AWS Landing Zone / Control Tower multi-account structure as EPL’s cloud foundation matures; manage IaC tooling (CloudFormation / Terraform) and CI/CD pipelines supporting infrastructure deployments. Evaluate and recommend AI and automation tooling on AWS (e.g., Bedrock, Lambda-based automation) in support of EPL’s AI adoption roadmap. Administer VMware vSphere/vCenter environment, including virtual machine lifecycle, resource allocation, NSX network virtualization, and high availability configurations through the active decommission phase. Own all aspects of EPL’s colocation facility environment, including physical SQL Server clusters, virtual machines, file servers, storage, network hardware, power and cooling awareness, vendor coordination, and physical access management; support Cohesity backup and disaster recovery operations, ensuring RPO/RTO targets are met for all critical workloads until fully migrated to cloud-native alternatives; partner with the colo facility on escalations, maintenance windows, and capacity planning. Administer enterprise networking infrastructure including Meraki SD-WAN/wireless across the Support Center and 500+ restaurant locations, Palo Alto firewalls, and Prisma (PaloAlto) SASE platform; maintain site-to-site VPN connectivity between restaurant locations, the colocation facility, and AWS. Administer Active Directory (multi-domain), Azure AD / Entra ID, and OneLogin SSO, including user provisioning, Group Policy, and SCIM/AD sync; manage Microsoft Office 365 tenant administration including Exchange Online, Teams, SharePoint, and licensing; administer Mimecast email security platform in coordination with the Information Security team. Oversee endpoint management platforms including Ivanti (MobileIron) MDM and Atera, ensuring device compliance, patching, and remote support capabilities across corporate and restaurant endpoints; administer restaurant-facing systems including POS connectivity and store communications infrastructure. Maintain infrastructure monitoring via SolarWinds HCO; create and maintain detailed technical documentation for all systems, migration runbooks, and operational procedures; provide after-hours on-call support for critical infrastructure incidents. Collaborate with the Sr. Manager of Information Security and cybersecurity team to ensure infrastructure changes meet security and compliance requirements (PCI DSS, SOX); assist with New Restaurant Opening (NRO) IT infrastructure buildouts in c…