Key Responsibilities
Systems and Infrastructure Engineering
1. Design, implement, administer, and support enterprise server infrastructure across on-premises, virtual, cloud, and hybrid environments.
2. Administer Windows Server, Active Directory, Group Policy, DNS, file services, and related infrastructure.
3. Troubleshoot complex server, operating system, authentication, application, connectivity, and infrastructure issues.
4. Monitor availability, performance, capacity, and reliability; recommend and implement improvements.
5. Support upgrades, migrations, infrastructure modernization, and technology replacement initiatives, including VMware-to-Azure Local activities.
6. Maintain configuration standards, operating procedures, and technical documentation.
Identity and Access Management
1. Administer Microsoft Entra ID and on-premises Active Directory in a hybrid identity environment.
2. Design, deploy, and tune Conditional Access policies for device compliance, location, MFA, and phishing-resistant authentication.
3. Investigate high-risk sign-ins and potential account compromise.
4. Support hybrid Entra join and troubleshoot Primary Refresh Token and Service Connection Point issues.
5. Support Okta and other third-party identity federation and application integrations.
6. Manage AD delegation and least-privilege permissions for service accounts and automation.
7. Resolve complex authentication, authorization, identity, and remote-access issues.
Microsoft 365, Cloud, and Endpoint Engineering
1. Administer Exchange Online, SharePoint Online, Microsoft Teams, OneDrive, and their associated security controls.
2. Support Azure and Azure Local environments, including security configuration and post-migration validation.
3. Administer Intune, enterprise Group Policy, endpoint compliance, and security baselines.
4. Manage endpoint technologies including SentinelOne and Tanium.
5. Develop and maintain Windows workstation and server hardening standards.
6. Review configurations such as LDAP signing, password policies, and authentication settings.
7. Manage Office update channels and deployments through Group Policy, Intune, registry settings, and Tanium.
Security Monitoring and Incident Response
1. Operate and maintain SIEM, EDR, and monitoring technologies, including SentinelOne and Darktrace.
2. Onboard security log sources across identity, endpoints, cloud, and enterprise applications.
3. Build and maintain custom parsers, sensors, and detection logic aligned with MITRE ATT&CK.
4. Triage alerts, investigate incidents, and participate in containment, remediation, and recovery.
5. Monitor security-agent health and coverage and improve investigation workflows.
Vulnerability Management and Network Security
1. Support vulnerability scanning and remediation using Qualys.
2. Review findings, prioritize remediation, and coordinate fixes with Infrastructure, Network, Application, and security teams.
3. Develop server and operating system security standards and validate remediation.
4. Support Zscaler, secure web gateway configurations, traffic capture, and network security sensors.
5. Review segmentation and infrastructure changes for security impact.
Automation, Projects, and Vendor Coordination
1. Build PowerShell automation across AD, Azure, Exchange Online, SharePoint Online, DNS, endpoints, and other infrastructure services.
2. Develop scheduled reporting for compliance, vulnerability management, identity risk, and operations.
3. Automate repetitive administrative, account-management, and alert-handling tasks.
4. Serve as a senior technical resource for cloud, infrastructure, and security projects.
5. Coordinate with vendors and service providers, including Okta, Tanium, Zscaler, Qualys, SentinelOne, and Darktrace.
6. Participate in technology evaluations, proof-of-concepts, deployments, office buildouts, and internal knowledge-sharing.
Required Qualifications
1. Bachelor’s degree in IT, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
2. 7+ years of progressively responsible systems, infrastructure, security, or infrastructure-security engineering experience.
3. Strong hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Entra ID, Microsoft 365, Intune, and Azure.
4. Strong understanding of hybrid identity, authentication, least privilege, Conditional Access, and MFA.
5. Practical experience with endpoint security, security monitoring, vulnerability management, incident response, and infrastructure hardening.
6. Strong PowerShell scripting and automation skills.
7. Ability to troubleshoot enterprise issues spanning servers, identity, endpoints, cloud services, applications, and security tools.
8. Clear communication, documentation, independent prioritization, and collaboration skills.
Preferred Qualifications
1. Azure Local/Azure Stack HCI and VMware-to-Azure Local migration experience.
2. Hands-on experience with SentinelOne, Darktrace, Tanium, Qualys, Zscaler, and/or Okta.
3. SIEM and EDR administration, security-log ingestion, and detection engineering.
4. Familiarity with MITRE ATT&CK.
5. Cloud or infrastructure migration experience and automated operational reporting.
6. CISSP, GIAC, Microsoft, Azure, cloud-security, or other relevant ce
