Security Engineer Infrastructure

Security Engineer – Infrastructure

Under the supervision of the Security Manager, the Security Engineer – Infrastructure is responsible for supporting the security and compliance of the firm's infrastructure, including networks, servers, workstations, and telecommunications systems. This role works closely with Information Technology teams to ensure all infrastructure components meet firm, industry, and ISO 27001 security standards. The Security Engineer reviews and secures infrastructure, develops risk mitigation strategies, and contributes to enterprise-wide security projects and initiatives. Responsibilities include serving as a key resource for consulting on security matters, maintaining access controls, and addressing escalations related to security audits, incident response, and internal security concerns. The Security Engineer also participates in the design, implementation, and support of LAN/WAN, remote access, IDS/IPS, PKI, and firewall/unified threat management systems, as well as Identity & Access Management, Endpoint Security Management, Domain Management, and DNS Management. The Security Engineer is also a contributing member of the Cybersecurity Incident Response Team (CIRT).

Manage and maintain the organization's Public Key Infrastructure (PKI) systems, ensuring secure encryption, certificate management, and cryptographic key life cycle processes are in place and operating. Deploy, manage, and maintain firewalls, including Firewall-as-a-Service (FWaaS), Unified Threat Management (UTM) solutions, and Secure Web Gateways (SWG), to secure network traffic and enforce firm security policies. Serve as a primary escalation point for security incidents and audits, leading or assisting in the development of mitigation strategies, post-incident reviews, and compliance reviews to ensure ongoing ISO 27001 adherence.

Bachelor's degree in Computer Science, Business, Engineering, or a related field; or equivalent work experience is required. CISSP certification or progress toward CISSP certification is preferred. Proven background in applying advanced IT security concepts and extensive understanding of contemporary hardware and software architectures in a multi-site, mission-critical environment.