IT Infrastructure and Security Engineer

Infrastructure & Cybersecurity Operations Engineer

About the Role

This role is responsible for the reliability, security, and modernization of enterprise infrastructure across on‑premises and cloud environments. You will manage core systems, support disaster recovery and business continuity, and play a hands-on role in cybersecurity operations for a hybrid IT environment.

Responsibilities

Infrastructure Operations

• Administer and maintain Windows Server and Linux (SUSE Linux Enterprise Server) systems across on‑premises and cloud environments.
• Manage VMware vSphere/ESXi platforms, including provisioning, patching, performance monitoring, and capacity planning.
• Administer Active Directory environments, including user and group management, Group Policy design and troubleshooting, DNS, DHCP, certificate services, and domain trust and migration activities.
• Manage Microsoft Azure IaaS and PaaS resources, including virtual machines, networking, storage, and Entra ID (Azure AD) identity services.
• Administer Microsoft 365 tenant operations, including Exchange Online, Microsoft Intune endpoint management, and Entra ID conditional access.
• Manage enterprise backup and disaster recovery solutions (e.g., Veeam), including job configuration, retention policies, backup verification, and regular disaster recovery testing and documentation.
• Support disaster recovery replication and failover operations to ensure business continuity across primary and secondary data centers.
• Maintain and support file, print, and application server infrastructure across multiple geographic locations.
• Develop and maintain PowerShell scripts and automation to improve operational efficiency, monitoring, and reporting.
• Participate in infrastructure initiatives such as server migrations, platform upgrades, and data center operations.

Cybersecurity Operations

• Implement and enforce security policies related to patch management, endpoint protection, email security, DNS security, and application control.
• Monitor, analyze, triage, and remediate security alerts from MDR and SIEM platforms, escalating to managed SOC partners as needed.
• Administer and maintain security tooling, including EDR/XDR platforms, vulnerability scanners, email and DNS security solutions, application control, and privileged access tools.
• Conduct vulnerability assessments and coordinate remediation efforts based on risk and business impact.
• Investigate and respond to security incidents, ensuring timely containment, root cause analysis, and recovery.
• Design and implement security controls for hybrid cloud environments, including identity protection and conditional access policies.
• Serve as the technical liaison with managed firewall, network, and MDR/SOC providers.
• Support compliance with security frameworks such as NIST CSF and CIS Controls, including internal audits and documentation.
• Manage privileged access management solutions, including secure remote access and credential vaulting.
• Stay current on emerging security threats and technologies and recommend improvements to the organization’s security posture.
• Support security awareness initiatives and provide guidance to end users on security best practices.

Minimum Qualifications

• Experience administering Windows Server (2016/2019/2022) and Linux systems (SUSE or RHEL preferred).
• Strong experience with Active Directory, including Group Policy, DNS, DHCP, and multi-domain or cross-forest environments.
• Experience managing VMware vSphere/ESXi in an enterprise environment.
• Experience administering Microsoft 365 and Azure, including Entra ID, Intune, Exchange Online, and Azure IaaS services.
• Experience with enterprise backup and disaster recovery solutions (e.g., Veeam, Zerto, or equivalent).
• Proficiency with PowerShell scripting for automation, reporting, and system administration.
• Experience with patch management and software deployment tools.
• Cybersecurity operations experience, including vulnerability management and incident response.
• Working knowledge of security frameworks such as NIST CSF or CIS Controls.
• Understanding of networking fundamentals, including TCP/IP, VLANs, VPNs, routing, switching, and firewall concepts.
• Strong communication, documentation, and change management skills.
• Ability to work independently, manage competing priorities, and support both infrastructure and security responsibilities.