Senior IT Security and Network Engineer

Company DescriptionWho We AreAIR Communities is one of the country's largest owners and operators of multifamily housing, managing high-quality properties in major markets. At AIR, we value integrity, respect, collaboration, customer focus, and performance. These values are brought to life by our teammates, who are ultimately responsible for our success. When you join our team, you will work alongside dedicated professionals and have access to meaningful career-development opportunities.We seek motivated professionals who excel in customer service and thrive in a fast-paced, collaborative environment. If you enjoy challenging work, practical problem-solving, and continuous improvement, you may be a strong fit for our team.AIR Communities is seeking a seasoned Senior IT Security and Network Engineer to engineer, operate, and protect our hybrid enterprise environment across corporate offices, multifamily properties, on-premises and cloud infrastructure. This hands-on role is responsible for secure and reliable connectivity, core infrastructure, security operations, and cloud security. The successful candidate will bring strong network and cybersecurity fundamentals together with practical Azure infrastructure and security experience.The engineer will work directly across on-premises and cloud environments to investigate alerts, troubleshoot complex issues, identify gaps in tooling, architecture, setup, configuration, monitoring, and processes, and implement or coordinate sustainable fixes. The role calls for a SOC-oriented mindset that is alert, curious, proactive, and accountable, along with an outgoing and enthusiastic approach to collaboration. This is not an Azure application development or cloud architecture role. It is a network and security engineering role with dedicated responsibility for strengthening cloud as part of AIR Communities' broader hybrid environment.Where You Will WorkThis position is based at our corporate office in the Denver Tech Center. The role is expected to work in the office 4 to 5 days per week, based on business and team needs.Job DescriptionWhat You Will DoNetwork EngineeringEngineer, maintain, and secure network infrastructure across corporate offices, property sites, on-premises environments, and cloud-connected networks, including LAN, WAN, WLAN, VPN, SD-WAN, and cloud connectivity.Configure and support routers, switches, wireless access points, firewalls, load balancers, VPNs, DNS, DHCP, network segmentation, and secure remote connectivity across distributed locations.Support cloud networking capabilities, including virtual networks, subnets, Network Security Groups, route tables, private endpoints, VPN or ExpressRoute connectivity, cloud Firewall, Application Gateway, and network monitoring.Lead or contribute to network upgrades, migrations, troubleshooting, performance optimization, and resiliency improvements across on-premises and cloud-connected environments.Maintain high availability, disaster-recovery readiness, secure connectivity, and consistent network standards across the hybrid environment.Diagnose complex routing, switching, firewall, wireless, DNS, identity, and hybrid-cloud connectivity issues.IT Security and Cloud SecurityImplement and maintain security controls and operational practices across network, endpoint, identity, server, application, SaaS, and cloud environments.Monitor, investigate, prioritize, and respond to security incidents, vulnerabilities, anomalous activity, and emerging threats using a SOC-oriented approach.Operate and improve security technologies such as firewalls, IDS/IPS, endpoint protection, EDR/XDR, vulnerability-management, SIEM/SOAR, CSPM, SSPM, and MDR platforms.Use cloud-native security posture, threat detection, policy, identity and access management, privileged access, secrets management, and logging tools to identify and remediate cloud security and configuration gaps.Validate findings, assess risk and business impact, and address gaps in tooling, configuration, logging, monitoring, access, and operational processes across on-premises and cloud environments.Tune detections, reduce false positives, improve alert coverage, incorporate threat intelligence, and develop practical countermeasures.Support risk assessments, vulnerability reviews, penetration-test remediation, compliance reviews, and control validation across infrastructure, applications, containers, and cloud workloads.Partner with application, data, and business teams to support secure deployments and maintain clear procedures, investigation records, remediation plans, and audit evidence.Core Infrastructure Management and MonitoringAdminister, maintain, and secure physical and virtual infrastructure supporting enterprise operations across on-premises and cloud environments.Support Windows and Linux servers, Active Directory, IDP, DNS, DHCP, certificates, file services, virtualization, storage, backup, and identity-related services.Maintain infrastructure performance, patching, hardening, backup, recovery, capacity, and availability standards.Improve monitoring and centralized logging across networks, servers, cloud resources, applications, and security controls.Identify monitoring gaps, unhealthy configurations, control failures, capacity concerns, and recurring incidents, and implement or coordinate durable fixes.Collaborate with vendors and internal teams to improve monitoring, incident escalation, and operational support.Leadership, Collaboration, and MindsetBring an alert, proactive, hands-on, and ownership-oriented approach to network, infrastructure, and security operations.Build productive relationships with technical teams, business partners, vendors, and leadership through an outgoing, enthusiastic, and service-oriented approach.Communicate risks and technical findings clearly, recommend practical solutions, and follow issues through resolution.Mentor less-experienced engineers and contribute to clear documentation, repeatable processes, and team development.Advise leadership on relevant threats, control gaps, technology trends, and priorities across the hybrid environment.Lead or contribute to cross-functional initiatives that improve network reliability, infrastructure resilience, cloud security, detection capability, and operational maturity.QualificationsBachelor's degree in computer science, information security, engineering, or a related field, or equivalent practical experience.8+ years of combined experience across network engineering, infrastructure operations, and cybersecurity, including hands-on support of distributed or hybrid environments.Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, routing, switching, wireless networking, VPNs, firewalls, load balancing, and network segmentation.Hands-on experience with Cisco Meraki, Palo Alto, Fortinet, or comparable network and security platforms.Experience supporting Windows or Linux infrastructure, Active Directory, identity services, virtualization, storage, backup, patching, and monitoring.Practical experience with Microsoft Azure infrastructure and security, including cloud networking, identity, logging, monitoring, configuration governance, or workload protection.Experience investigating security events and working with one or more of the following: SIEM, EDR/XDR, vulnerability management, CSPM, SSPM, or MDR.Ability to learn unfamiliar environments, ask effective questions, troubleshoot complex issues, collaborate with appropriate teams, and implement sustainable solutions.Working knowledge of Zero Trust principles and frameworks such as NIST Cybersecurity Framework or ISO 27001.Strong written and verbal communication skills, sound judgment, and a collaborative service mindset.Preferred QualificationsExperience operating or securing Azure subscriptions and landing zones using services such as Azure Policy, Defender for Cloud, Sentinel, Entra ID, Conditional Access, PIM, Key Vault, NSGs, Azure Firewall, private endpoints, or centralized logging.Experience supporting hybrid connectivity across corporate, property, data-center, and cloud environments.Experience with MDR platform.Experience with PBX/VoIP and distributed property or branch environments.Familiarity with PowerShell, Azure CLI, Bicep, Terraform, Python, or similar automation used for repeatable administration and control remediation. Automation is a supporting skill for this role.Experience with SaaS security, SSPM, cloud-security posture management, identity-threat detection, or attack-surface reduction.One or more relevant certifications, such as AZ-104, AZ-500, SC-200, CCNP Security, CISSP, CISM, or an equivalent certification.Additional InformationAIR offers attractive total compensation packages designed to recognize and reward performance, including:Expected base salary of $130,000-$160,000, plus an annual target bonus. The final offer will reflect the candidate’s skills and experience as they relate to the role.25% rent discount at an AIR community, subject to rental application requirements and applicable exclusions.Medical, dental, vision, and life-insurance options; HSA/FSA plans; and company-paid short- and long-term disability coverage.401(k) plan with employer contribution.Paid time off, including vacation, sick time, and 11 holidays.Up to 16 weeks of paid parental leave.Tuition assistance and up to 100% reimbursement for job-related certifications and licenses.15 hours of paid time annually for community service.Commuter benefits, pet insurance, consumer discounts, professional development, leadership training, and career-growth opportunities.What You Need to KnowApplications will be reviewed on a rolling basis until the position is filled. Candidates who receive an offer will be required to complete pre-employment screening, including reference checks, employment verification, a criminal background check, and a four-panel drug screening that excludes marijuana testing.AIR values diversity and provides equal employment opportunities to all employees and applicants. AIR prohibits discrimination and harassment based on race, color, religion, age, sex, national origin, disability status, genetics, protected-veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law.Additional InformationWhat We OfferAIR offers attractive total compensation packages designed to recognize and reward performance including:Expected base salary of $130,000-$160,000, plus an annual target bonus. The final offer will reflect the candidate’s skills and experience as they relate to the role.25% Rent Discount at any AIR community (a rental application is required, and certain exclusions apply).Medical, dental, vision, and life insurance options, HSA/FSA plans, short and long-term disability paid by the company.401(k) plan with employer contribution of a 6% match.Paid time off including vacation, sick time, and 14 holidays.Paid parental leave of up to 16 weeks.Tuition assistance program and up to 100% reimbursement for job-related certifications and licenses.15 hours of paid time annually for community service.Commuter benefits and pet insurance.Consumer discounts on various products and services.Opportunities for ongoing professional development, leadership training, and career growth.What You Need to KnowApplication Deadline: The initial deadline for applications is 11/16/2026. Applications submitted after this date may still be considered on a rolling basis until the position/program is filled. We encourage all interested candidates to apply as early as possible. If a final decision has not been made by the initial deadline, subsequent applications will be reviewed as they are received.Candidates extended an offer will be required to undergo pre-employment screening that includes checking references, a four-panel drug screening thatexcludes marijuana testing, employment verification & criminal background check.AIR values diversity and provides equal employment opportunities to all employees and applicants for employment. AIR prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.SummaryType: Full-timeFunction: Information TechnologyExperience level: AssociateIndustry: Real Estate