Infrastructure Security Engineer

The Information Technologies (IT) Security and Infrastructure Administrator is responsible for the design, implementation, administration, and security of the organization's IT infrastructure, cloud environments, and network systems. This role ensures system availability, data integrity, security enforcement, and efficient IT operations while also providing hands-on workstation setup, hardware installation, and end-user support and training. Responsible for designing, building, maintaining, and continuously developing the organizations IT architecture. Ongoing responsibilities include administration, enhancements, and security improvements as technology and business needs evolve. Responsible for ensuring the security of systems and data, including monitoring access controls, investigating anomalies, and enforcing IT security best practices.

Systems & Cloud Infrastructure Administration

Manage and maintain Windows Server, Windows Workstations, Linux, and macOS environments.Administer Azure cloud infrastructure, including virtual machines, networking, security policies, and backup solutions.Oversee Microsoft 365, Teams, and Teams Voice, ensuring secure and reliable enterprise communication.Deploy and maintain Hyper-V virtualization, optimizing performance and availability.Administer database systems (MSSQL, PostgreSQL), ensuring performance, security, and access control.

Network Security & Infrastructure Management

Design, implement, and manage enterprise network infrastructure, including firewalls, routers, switches, and VPNs.Configure and maintain Azure networking, VPNs (L2TP/IPSec), DNS management, and inter-site connectivity.Implement VLAN segmentation and Wi-Fi security policies.Perform network traffic analysis and threat detection.

Identity & Access Management (IAM) & Compliance

Administer Active Directory (AD) & Azure AD (Entra ID), managing authentication and access policies.Enforce role-based access controls (RBAC), Multi-Factor Authentication (MFA), and Conditional Access policies.Conduct regular access audits and reviews to ensure compliance with security policies.Monitor authentication logs and system activity to detect potential unauthorized access.

Endpoint Security & Threat Management

Deploy and manage Intune-based device compliance policies, ensuring secure endpoint configurations.Administer Microsoft Defender for Endpoint and Microsoft Security Center for proactive threat detection and mitigation.Enforce BitLocker and FileVault encryption, USB/media restrictions, and endpoint protection policies.Ensure automated patch management for OS and third-party applications. Incident Response, Security Monitoring, & Compliance Investigate system anomalies, security events, and access patterns to maintain security and compliance.Respond to security threats, unauthorized access attempts, and system vulnerabilities.Ensure IT security policies are enforced to protect company assets, prevent data loss, and maintain compliance.

Backup, Disaster Recovery, & Business Continuity

Deploy and manage Azure Backup & Recovery, database backups, and disaster recovery solutions for Cloud Systems.Deploy backups and disaster recovery solutions for on-prem systems and services.Conduct business continuity planning and failover testing to ensure IT resilience.

Infrastructure Automation & Optimization

Implement templates for infrastructure automation.Develop automation scripts (Bash, PowerShell, Python) to improve security and efficiency.

Hands-On Workstation Setup & Hardware Installation

Set up and configure workstations, peripherals, and mobile devices for end-users.Install and test hardware components (HDDs, SSDs, RAM, monitors, network devices, etc.).Ensure all devices comply with security standards, access policies, and company configurations.

End-User IT Support & Training

Provide technical support for IT-related issues, including hardware, software, and security concerns.Train users on best practices for security, data protection, and proper system usage. Authorization & Compliance:
Responsible for ensuring the security, integrity, and appropriate use of company systems, networks, and data. Activities related to system monitoring, reviewing access controls, and investigating technical issues are conducted to support IT security, operational efficiency, and business continuity. All actions are performed in alignment with company policies, industry best practices, and regulatory compliance requirements.Other duties as assigned.

Education

Bachelors degree in computer science or engineering with any IT certification and a minimum of three (3) years relevant work experience, or an equivalent combination of education/certification and experience.

Experience & Competencies

Technologically savvy, and profound knowledge of computer and hardware systems. Extensive experience (minimum five years) managing enterprise IT infrastructure, security, networking, and cloud environments.Strong expertise in Azure, Microsoft 365, Intune, and Defender for Endpoint.Proficiency in Active Directory, Azure AD, IAM policies, and authentication controls.Hands-on experience with workstation setup, hardware installation, and peripheral troubleshooting.Experience providing end-user support and IT training to ensure proper system usage and security awareness.Strong background in networking technologies, VPNs, firewalls, and traffic analysis.Proficiency in automation scripting (PowerShell, Python, Bash, Terraform, Ansible, etc.).Ability to assess and mitigate security risks while enforcing IT security best practices.Well-developed oral and written communication.Knowledge of system security.

Physical Requirements / Abilities

Ability to walk and stand for extended periods of time 40% of the time.Ability to reach with hands and arms frequently.Hand and finger dexterity to handle or feel objects frequently.Good vision and ability to decipher depth.Ability to bend, stoop, and kneel on occasion.Ability to climb stairs.

Travel:

May travel 5% of time to our other location (Las Vegas, NV.)

Compensation details: 123000-125000 Yearly Salary

PIa16f4a318992-26289-41418285