Engineer II, Infrastructure

Forbes is an iconic global media brand that has symbolized success for over a century. Fueled by journalism that informs and inspires, Forbes spotlights the doers and doings shaping industries, achieving success and making an impact on the world. Forbes connects and convenes the most influential communities ranging from billionaires, business leaders and rising entrepreneurs to creators and innovators. The Forbes brand reaches more than 140 million people monthly worldwide through its trusted journalism, signature ForbesLive events and 49 licensed local editions in 81 countries.Forbes is seeking an Engineer II, Infrastructure. This is an experienced individual contributor role responsible for designing, implementing, and supporting Forbes' corporate technology infrastructure across a remote and hybrid workforce. That includes email security, endpoint management, identity services, collaboration platforms, cloud infrastructure, and core enterprise systems. This role handles technical escalations for complex issues, owns projects end to end, and reports to the Principal Manager, Corporate Solutions.Email security is a core focus of this role. The right candidate has strong hands-on experience with an enterprise email security platform such as Mimecast or Proofpoint and owns Forbes' email protection posture end to end. Mimecast is Forbes' current platform.A hybrid schedule with a minimum of three in-person days per week at our Jersey City, NJ headquarters is expected.Responsibilities:Email securityAdminister the email security gateway (Mimecast, Proofpoint, or the like), including email security policies, threat protection, URL and attachment protection, spam filtering, impersonation and phishing protection, and secure messaging.Maintain SPF, DKIM, and DMARC standards and improve email deliverability and anti-spoofing defenses.Investigate and remediate phishing, business email compromise, and impersonation attempts.Lead email security awareness efforts and phishing simulations with Cybersecurity.Infrastructure, endpoint, and identityServe as a technical escalation point for complex endpoint, identity, and access issues.Manage endpoints with Microsoft Intune and Jamf Pro across Windows and macOS, including zero-touch Windows provisioning with Windows Autopilot.Manage identity and access through Okta, Microsoft Entra ID, and Active Directory, including lifecycle, MFA, and group-based access.Maintain endpoint security with CrowdStrike, Okta Verify, and similar tools.Build standardized device configurations, policies, and compliance baselines.Support security audits and access reviews with Cybersecurity.Collaboration and supportSupport Microsoft 365, Google Workspace, Slack, Zoom, and SharePoint.Troubleshoot hardware, software, networking, and video conferencing across Windows and macOS.Maintain conference room technology, including Zoom Rooms, displays, cameras, and control systems.Write and maintain documentation, runbooks, and knowledge base articles.Mentor junior staff and provide technical guidance.Balance day-to-day support with longer-term projects and platform improvements.Participate in an after-hours and weekend on-call rotation as needed for critical incidents or projects.The ideal candidate:5+ years in Corporate IT, Endpoint Engineering, or Infrastructure roles.3+ years of hands-on Mimecast administration, or a comparable gateway such as Proofpoint or Microsoft Defender for Office 365.Strong email security background, including SPF, DKIM, DMARC, anti-phishing, and threat response.Hands-on experience with Microsoft Intune, Windows Autopilot, and Jamf Pro.Deep knowledge of Windows and macOS administration.Experience with Okta, Microsoft Entra ID, and Active Directory.Solid understanding of endpoint security tooling (CrowdStrike or equivalent).Proficiency with Microsoft 365, Google Workspace, Zoom, and SharePoint.Working knowledge of networking fundamentals: Wi-Fi, DNS, DHCP, and VPNs.Ability to work independently and balance support work with projects.Strong documentation and communication skills.Ability to regularly lift and carry objects weighing between 20 and 30 pounds.Certifications in email security, endpoint management, Microsoft 365, or Okta (preferred).Experience with email gateway migrations (preferred).Scripting experience such as PowerShell or Python (preferred).The annual base salary range for this role is $105,000 - $120,000Forbes has estimated the compensation range set forth above in good faith. The compensation range is what we believe we will offer, and ultimately pay, a successful candidate. In determining this range, we consider the experience, level of education (if applicable to the role), knowledge, skills, and abilities required to be had by a successful candidate as well as the budget and the company’s pay rates, generally. This said, we may have to make changes to our compensation estimates and job descriptions from time to time and we expressly reserve the right to do so. Should we make any such changes, this advertisement will be revised to reflect such revisions. We encourage you to occasionally re-visit this advertisement to ensure that you are abreast of any changes. Thank you for your interest in joining Forbes!#LI-Hybrid#LI-RLThis role may evolve over time. While this job description outlines the primary responsibilities, additional duties may be assigned as business needs change. Forbes aims to offer employees the flexibility they need in order to be successful. Some positions may require candidates to be based in a specific location for consideration while some roles may be fully remote (within the U.S.) if it aligns with the needs of the position. This position is only open to candidates residing in California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Maine, Maryland, Massachusetts, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas, & Washington. Due to business operations and compliance requirements, we are unable to consider applicants based outside these states at this time.Forbes is an equal opportunity employer.Staff and Applicant Privacy NoticeNotice of E-Verify Participation