Join Our Team as an IT Infrastructure & Security Manager (Remote - USA)
About Us
Infusion for Health is a premier, referral-based infusion center serving patients across California, Arizona, Nevada, Washington, Colorado, and Missouri. Our unique centers feature private, comfortable rooms for a personalized patient experience. We are committed to delivering exceptional infusion therapy in a patient-focused, compassionate environment, supported by a team of skilled professionals.
Why Infusion for Health?
- Patient-Centered Care: Our mission is to provide top-notch service and clinical care in a comfortable setting.
- Growth Opportunities: As we continue to expand, we offer opportunities for career advancement and professional development.
- Supportive Environment: Join a team where your expertise is valued, and you can make a real difference in patients' lives.
Job Overview
This role owns day-to-day security posture, identity hygiene, and compliance readiness across a multi-site healthcare environment (Microsoft 365, Entra ID, Azure, on-prem Active Directory, and site firewalls). The work is hands-on and includes directing and independently verifying work performed by an outsourced IT partner and offshore resources. This is a remote role in the USA; PST hours highly preferred.
Compensation: $85,000-$100,000/year DOE
Duties and Responsibilities
- Own identity and access hygiene, including a working joiner/mover/leaver process, elimination of stale and orphaned accounts, and scheduled rotation of admin and service account credentials.
- Document, approve, and technically enforce security policies across the environment using Group Policy, Intune, and Conditional Access, in support of HIPAA security requirements.
- Maintain 100% MFA and Conditional Access coverage for users and administrators.
- Administer and monitor Microsoft Defender (XDR and/or Defender for Office 365) and at least one SIEM platform; oversee related email protection controls (including DMARC/SPF/DKIM).
- Ensure server and domain controller patching cadence is met and backups are verified.
- Build and run SOC 2 Type II evidence collection as a repeatable process and keep the organization on track for attestation.
- Deliver a monthly security posture report to the CIO covering open risks, aging remediation, and audit readiness.
- Hold the IT partner and offshore resources accountable for SLA performance; independently verify completed work and conduct third-party access reviews.
- Supervise network-related work as needed (site firewalls, VPN/SD-WAN, VLANs, DNS).
- Follow through on aging remediation items and communicate risk clearly to non-technical leaders.
Experience
Required
- 5+ years administering Microsoft environments at multi-site scale, including Entra ID/Azure, Microsoft 365, on-prem Active Directory and Group Policy, and Intune
- Hands-on experience with Microsoft Defender (XDR and/or Defender for Office 365) and at least one SIEM platform
- Practical network competence with firewalls, VPN/SD-WAN, VLANs, and DNS, with the ability to supervise a network engineer
- Direct experience producing evidence for a SOC 2, HITRUST, or comparable audit
- Strong PowerShell skills for automation and auditing
- Clear communication with non-technical stakeholders and a demonstrated ability to hold vendors accountable
- Comfort being hands-on while also directing and verifying others' work
Highly Preferred
- Healthcare industry experience and familiarity with HIPAA security requirements
- Certifications such as SC-200, AZ-500, Security+, or CISSP
- Experience supervising or working within a managed service provider (MSP) delivery model
Monday to Friday