IT Infrastructure Engineer

Description

• Lead projects with other Infrastructure staff as support.
• Participate in on-call support for critical infrastructure and security support, if applicable.
• Design, deploy, manage, and maintain on-premises and cloud-based (Azure preferred) infrastructure components, including servers (Windows Server), virtualization platforms, storage, and networking equipment.
• Operate and maintain Microsoft Sentinel (SIEM/SOAR) for security monitoring, threat detection, analysis, and incident response. Develop and tune detection rules, analytics, and response playbooks.
• Implement solutions that incorporate backup, disaster recovery, and business continuity principals.
• Introduce ideas and advocate for improvement of Infrastructure team’s processes
• Create and maintain comprehensive documentation for infrastructure design, security configurations, and operational procedures.
• Active participation in Infrastructure projects, including project management of small to medium-sized projects.
• Ensure the reliability, availability, and performance of critical IT systems through monitoring, maintenance, and troubleshooting.
• Respond to security incidents, perform root cause analysis, and implement corrective actions.\
• Configure, manage, and optimize the Microsoft Defender suite (including Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender Vulnerability Management) to protect endpoints, identities, and cloud resources.
• Act as support on Infrastructure projects led by other team members.
• Respond to and implement changes/improvements based on security assessments, vulnerability scanning, and penetration testing results.
• Administer and maintain Active Directory / Microsoft Entra ID environments, including identity lifecycle and conditional access.
• Provide technical expertise and support to other IT staff and end-users on infrastructure and security-related matters.

Requirements

• Experience with Microsoft Azure IaaS and PaaS services.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, OR equivalent practical experience.
• Proven, hands-on experience implementing and managing security solutions within the Microsoft ecosystem, specifically:
• Strong communication and interpersonal skills, with the ability to explain complex technical concepts to diverse audiences.
• Familiarity with compliance frameworks (e.g., NIST, ISO 27001, GDPR).
• Microsoft Sentinel: Experience with log ingestion, KQL query writing, analytics rule creation, incident investigation, and SOAR playbook development/management.
• Excellent troubleshooting, analytical, and problem-solving skills.
• 5+ years of experience in IT infrastructure engineering/administration, including hands-on experience with Windows Server, Active Directory/Entra ID, networking (TCP/IP, DNS, DHCP, VPNs, Firewalls, routing, switching), and virtualization.
• Ability to work independently and as part of a team in a fast-paced environment.
• Microsoft Defender Suite: Demonstrable experience with configuration, policy management, and alert triage across various Defender components (Endpoint, Identity, etc.).
• Relevant industry certifications (e.g., Microsoft Certified: Security Operations Analyst Associate (SC-200), Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft Certified: Azure Security Engineer Associate (AZ-500), Microsoft 365 Certified: Security Administrator Associate (MS-500), CompTIA Security+, CISSP).
• Strong understanding of core information security principles (e.g., least privilege, defense-in-depth, privileged identity management, privileged access management, incident response lifecycle).
• Experience with scripting languages, particularly PowerShell, for automation and administration.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance