Description

Key Responsibilities

Systems & Infrastructure Engineering

• Design, implement, administer, maintain, and support enterprise server infrastructure across on-premises, virtual, cloud, and hybrid environments.
• Administer Microsoft Windows Server environments and core infrastructure services including Active Directory, Group Policy, DNS, file services, and related enterprise technologies.
• Troubleshoot complex server, operating system, authentication, application, connectivity, and infrastructure issues.
• Monitor system availability, performance, capacity, and reliability and proactively identify opportunities for improvement.
• Participate in infrastructure lifecycle management, including upgrades, migrations, platform modernization, and technology replacement initiatives.
• Support cloud and virtualization initiatives, including migrations from VMware environments to Azure Local.
• Develop and maintain technical documentation, configuration standards, operating procedures, and support documentation.

Identity & Access Management

• Administer Microsoft Entra ID and on-premises Active Directory in a hybrid identity environment.
• Design, deploy, maintain, and tune Conditional Access policies covering device compliance, location restrictions, multifactor authentication, and phishing-resistant MFA.
• Investigate and remediate high-risk sign-ins and potential compromised-account exposure.
• Manage hybrid Entra join for workstations and servers, including PRT and SCP troubleshooting.
• Support third-party identity federation, including Okta and enterprise application identity integrations.
• Administer Active Directory delegation and least-privilege permissions for service accounts and automation platforms.
• Troubleshoot complex authentication, authorization, identity, and remote-access issues.

Microsoft 365 & Cloud Engineering

• Administer and support Microsoft 365 services, including Exchange Online, SharePoint Online, Microsoft Teams, and OneDrive.
• Administer security controls and configurations across Microsoft 365 services.
• Support Microsoft Azure and Azure Local environments and associated security configurations.
• Participate in VMware-to-Azure Local migration activities, including post-migration validation and cleanup.
• Evaluate technical and security risks associated with cloud adoption and third-party SaaS integrations.
• Manage Microsoft Office update channels and deployment through technologies including Group Policy, Intune, registry configuration, and Tanium.

Endpoint Management & Infrastructure Security

• Administer Group Policy at enterprise scale for endpoint configuration and security baselines.
• Administer Microsoft Intune for device management, policy enforcement, and compliance.
• Manage endpoint management and security technologies including SentinelOne and Tanium.
• Develop, implement, and maintain Windows workstation and server hardening standards.
• Review and audit infrastructure security configurations, including LDAP signing, password policies, and authentication settings.
• Troubleshoot endpoint, authentication, remote-access, and security-agent issues.
• Partner with other IT teams to identify and remediate infrastructure security weaknesses.

Security Monitoring, Detection & Incident Response

• Operate and maintain enterprise SIEM and EDR technologies, including SentinelOne and Darktrace.
• Onboard and manage security log sources across identity, endpoint, cloud, and enterprise applications.
• Build and maintain custom parsers and sensors for security log ingestion.
• Develop and maintain security detection logic aligned with MITRE ATT&CK.
• Triage security alerts and investigate potential security incidents.
• Participate in containment, remediation, and recovery activities.
• Monitor endpoint security-agent health and coverage across the enterprise.
• Identify opportunities to improve incident-response workflows and reduce repetitive manual investigation.

Vulnerability Management & Security Hardening

• Support enterprise vulnerability scanning and remediation activities using Qualys.
• Review identified vulnerabilities and coordinate remediation with Infrastructure, Network, Application, and other technical teams.
• Develop and maintain server and operating-system security standards.
• Validate security configurations and assist with remediation of identified weaknesses.
• Work with Information Security and Infrastructure teams to continually strengthen the organization’s security posture.

Network Security

• Support network security technologies, including Zscaler and secure web gateway configurations.
• Support traffic-capture and monitoring infrastructure associated with network security sensors.
• Review network segmentation and infrastructure designs for potential security impacts.
• Collaborate with Network Engineering and Information Security teams during troubleshooting and security investigations.

Automation & Reporting

• Develop PowerShell automation supporting Active Directory, Azure, Exchange Online, SharePoint Online, DNS, endpoints, and other infrastructure services.
• Develop scheduled and unattended reporting for compliance, vulnerability management, identity risk, and operational requirements.
• Automate repetitive account-management, administrative, and alert-handling activities.
• Identify opportunities to eliminate manual processes through secure and reliable automation.
• Standardize repeatable operational processes to improve consistency and efficiency.

Project & Vendor Management

• Serve as a senior technical resource for infrastructure, cloud, security, and technology modernization projects.
• Coordinate technical activities with technology vendors, consultants, and managed service providers.
• Work with enterprise technology vendors including Okta, Tanium, Zscaler, Qualys, SentinelOne, and Darktrace.
• Participate in security and infrastructure technology evaluations, proof-of-concepts, deployments, and ongoing optimization.
• Participate in office buildout initiatives involving network infrastructure, user equipment, collaboration systems, and supporting technologies.
• Deliver internal knowledge-sharing and technical enablement sessions.

Required Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 7+ years of progressively responsible experience in systems engineering, security engineering, infrastructure engineering, or infrastructure security.
• Strong hands-on experience with Microsoft Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Intune, and Azure.
• Strong knowledge of hybrid identity and authentication technologies.
• Experience with endpoint security, vulnerability management, security monitoring, and infrastructure hardening.
• Strong PowerShell scripting and automation skills.
• Experience troubleshooting complex enterprise issues spanning servers, identity, endpoints, cloud services, applications, and security platforms.
• Strong understanding of least privilege, Conditional Access, MFA, endpoint security, vulnerability management, and security-hardening practices.
• Strong written and verbal communication skills with the ability to communicate technical information clearly.
• Ability to independently manage priorities while collaborating with technical teams, business stakeholders, vendors, and service providers.

Preferred Qualifications

• Experience with Microsoft Azure Local/Azure Stack HCI.
• Experience with SentinelOne, Darktrace, Tanium, Qualys, Zscaler, and/or Okta.
• Experience supporting hybrid Microsoft environments.
• Experience with SIEM and EDR administration.
• Familiarity with MITRE ATT&CK and security detection engineering.
• Experience with cloud and infrastructure migrations.
• Experience developing automation and unattended operational reporting.
• CISSP certification preferred.
• GIAC incident-handling, cloud-security, Microsoft, Azure, or other relevant technical certifications are a plus.

Core Competencies

• Systems Engineering
• Security Engineering
• Microsoft 365 & Azure
• Active Directory & Entra ID
• Identity & Access Management
• Endpoint Management & Security
• Infrastructure Security
• Security Monitoring & Incident Response
• Vulnerability Management
• PowerShell & Automation
• Technical Troubleshooting
• Project Implementation
• Vendor Management
• Technical Documentation
• Cross-Functional Collaboration

Working Expectations

• Participate in on-call or after-hours support as required.
• Support scheduled implementations, upgrades, maintenance, and security remediation outside normal business hours when necessary.
• Respond to high-priority infrastructure and security incidents.
• Provide senior-level escalation support for both systems and security-related issues.
• Balance day-to-day operational responsibilities with project and security initiatives.
• Maintain clear communication with technical teams, management, vendors, and affected stakeholders

Key Skills

Education

Bachelor's degree