About The Role

You know the moment a project becomes real: the maintenance window is booked, the client is watching, and the cutover either works or it doesn't. If you're the engineer who plans it, runs it, and owns the outcome — this role was built for you.

Frontline is a Los Angeles managed service provider with 15+ years in business, 53+ five-star Google reviews, and annual recognition as a top MSP in LA (Channel Futures MSP 501, Expertise.com, CloudTango). Our clients run media production studios, law firms, manufacturers, nonprofits, medical practices, and even an amusement park on the Santa Monica Pier. Their infrastructure projects are yours to deliver.

What you'll do

You'll lead client infrastructure projects end to end — scoping alongside our vCIO team, building the project plan, executing the technical work hands-on, and communicating with the client from kickoff through sign-off. This is a doing role, not a delegating role. A typical quarter looks like the work our senior engineers delivered over the past 18 months:

Server and virtualization projects — ESXi-to-Hyper-V migrations, Windows Server 2025 domain controller modernization, physical server replacements, and storage expansions (Synology, datastore offload and cleanup)
Network refreshes — firewall replacements and HA pairs (Fortinet Security Fabric), switch replacements (FortiSwitch, Ubiquiti, Meraki, Juniper environments), wireless refreshes including outdoor AP deployments, and structured cabling for office build-outs and moves
Cloud and Microsoft 365 projects — on-prem-to-cloud migrations, Azure decommissions, mail migrations (Barracuda to M365, tenant-to-tenant), M365 hardening with Intune, Conditional Access, and Autopilot workstation rollouts
Line-of-business application projects — server migrations and upgrades for FileMaker, QuickBooks, Sage, and Business Central environments
Client onboarding and offboarding — standing up new managed clients on our stack and cleanly transitioning departing ones
VoIP and connectivity — RingCentral migrations, number porting, ISP and Starlink deployments

Between projects, you'll serve as an L3 escalation point for our service desk and help run down NOC, SOC, and backup alerts (PRTG, Datto EDR, Datto BCDR, Veeam, Augmentt) when your eyes are the right eyes.

5+ years in systems or network engineering, with at least 2 years at an MSP or in a multi-client environment
A track record of personally leading infrastructure projects — migrations, refreshes, upgrades — from plan to completion
Deep hands-on experience with Windows Server, Active Directory, and Hyper-V or VMware
Strong Microsoft 365 administration: Exchange Online and SharePoint migrations, Intune/Autopilot, Conditional Access, Entra ID
Comfortable supporting macOS alongside Windows — several of our media and production clients run mixed environments
Firewall and switching configuration experience (Fortinet strongly preferred; Meraki, Ubiquiti, or SonicWall also valued), including VLANs and site-to-site VPNs
Clear, calm client communication — you set expectations, keep people informed, and never let a client wonder what's happening
Valid California driver's license and reliable transportation — this is an on-site role with regular travel to client sites across LA County
Availability for scheduled evening or weekend maintenance windows for production cutovers

Nice to have

Experience with Datto RMM/BCDR, Autotask, IT Glue, or the broader Kaseya stack
PRTG or similar network monitoring
RingCentral or VoIP migration experience
Certifications: Fortinet NSE/FCP, Microsoft (MS-102, AZ-104, AZ-305), CCNA, or VMware VCP
Experience supporting media and entertainment production environments (shared storage, editing workflows)
Health, vision, and dental coverage
401(k) with company matching
Three weeks PTO plus all major bank holidays
Certification reimbursement and training & development programs
Frequent company lunches, a fully stocked kitchen, and a team culture clients know by name