Infrastructure Security Engineer

Position Title and Summary IT Network Engineer Security Operations – Durham, NC (On-site) Bell and Howell delivers technology‑driven Automation Services and Automation Solutions that help businesses optimize performance, reduce downtime, and improve customer experiences. Applicants must be legally authorized to work in the United States without current or future employer sponsorship. The Company does not provide employment‑based visa or Green Card sponsorship for this position. Position Summary We are seeking a skilled and proactive IT Network Engineer to support and secure the technology infrastructure of an 800‑employee, multi‑office organization. This role will focus heavily on monitoring, maintaining, and improving the company’s infrastructure security stack while ensuring reliable network performance across all locations. Key Responsibilities Monitor and maintain enterprise network infrastructure across multiple office locations. Support and administer the organization’s infrastructure security stack, including: Endpoint management platforms Endpoint detection and response (EDR) tools Email security and filtering solutions Secure Access Service Edge (SASE) technologies Firewall and threat prevention systems Identity and access security monitoring Monitor and investigate Microsoft Entra ID risky sign‑ins, risky users, impossible travel events, MFA anomalies, and identity protection alerts. Respond to security alerts and suspicious authentication activity by coordinating remediation efforts, account protection, and incident escalation. Support Microsoft Intune device management and Windows Autopilot deployment processes for endpoint provisioning and compliance. Assist with endpoint configuration profiles, device compliance policies, application deployment, and endpoint security baselines within Intune. Investigate and respond to network and security alerts, incidents, and vulnerabilities. Assist with deployment, configuration, patching, and maintenance of security and networking systems. Monitor system health, logs, and performance metrics to identify risks or operational issues. Support endpoint compliance, patch management, and software deployment processes. Collaborate with cybersecurity teams to improve threat detection and incident response capabilities. Maintain network documentation, diagrams, configurations, and operational procedures. Participate in infrastructure projects, upgrades, and office expansion initiatives. Assist with disaster recovery, business continuity, and system resiliency efforts. Provide Tier 2/3 support for escalated networking and security‑related issues. Stay informed on emerging cybersecurity threats, vulnerabilities, and industry best practices. Required Qualifications Bachelor’s degree in Information Technology, Computer Science, Network Engineering, or related field preferred. 5+ years of experience in network engineering, infrastructure support, or systems/security administration. Experience or exposure to: ManageEngine Endpoint Central Microsoft Intune and Windows Autopilot Check Point Microsoft Entra ID Identity Protection and risky login monitoring SASE platforms Email filtering/security solutions Endpoint Detection & Response (EDR) software Understanding of TCP/IP, DNS, DHCP, VLANs, VPNs, routing, and switching. Experience supporting enterprise firewalls, network monitoring, and security tools. Familiarity with Microsoft 365 administration, Conditional Access policies, MFA, identity security concepts, and endpoint management best practices. Strong troubleshooting and analytical skills. Ability to prioritize tasks and respond effectively in a fast‑paced environment. Excellent written and verbal communication skills. Preferred Qualifications Experience in a multi‑site enterprise environment. Exposure to SIEM platforms and centralized log monitoring. Familiarity with cloud networking and hybrid environments. Industry certifications such as: CompTIA Network+ Security+ CCNA Check Point certifications Microsoft certifications (Entra ID / Azure / Intune / Security) Experience with scripting or automation tools (PowerShell, Python, etc.) is a plus. Key Skills Network Monitoring & Troubleshooting Infrastructure Security Identity & Access Management Entra ID Risk Detection & Response Microsoft Intune & Windows Autopilot Endpoint Management Threat Detection & Response VPN & Remote Access Technologies Firewall Administration Patch Management Security Incident Response Documentation & Process Improvement Work Environment Hybrid or onsite depending on business needs. Occasional after‑hours support for maintenance windows or critical incidents. Some travel between office locations may be required. What Success Looks Like Stable and secure network operations across all offices. Rapid response and remediation of infrastructure and identity security issues. Improved visibility into endpoint, identity, and network health. Strong collaboration between IT operations and cybersecurity teams. Reduced downtime and proactive identification of risks and vulnerabilities. Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. EEO Statement Bell and Howell is an Equal Opportunity Employer. It is company policy to administer employment based solely on an individual’s qualifications, ability and performance without regard to race, color, religion, gender identity, sex (including pregnancy, lactation, childbirth or related medical conditions), sexual orientation, age, national origin or ancestry, physical or mental disability, genetic information (including testing and characteristics), veteran status, uniformed servicemember status, marital status, or any other characteristic protected by federal, state or local law. #J-18808-Ljbffr Bell and Howell