Senior Infrastructure Security Engineer

AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a Senior Infrastructure Security Engineer responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution. The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls. Job Requirements: Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure securityMicrosoft, Azure, infrastructure, or security certifications are desired; CISSP or a comparable security certification a plusDemonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft AzureUndergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experienceWorking knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controlsHighly proficient in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skillsExperience with tools such as SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desiredAbility to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providersAvailability to work outside of normal business hours as required in order to participate in on-call support and scheduled implementations, maintenance, and remediationExperience responding to high-priority incidents, communicate operational risk, and follow change, incident, access-management, and segregation-of-duties controls AEGIS Core Competencies: Collaborative Communications and Behavior: Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplaceInitiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholdersQuality-Focused: Demonstrates a solution-focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomesService-Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers Essential Job Functions: Systems, Cloud, Identity & Endpoint AdministrationAdminister and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructureAdminister Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controlsAdminister Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurationsAdminister Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channelsImplement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards Vulnerability Management, Security Operations & Incident Response Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediationMaintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilitiesCoordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actionsMaintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication Network Security, Automation & Operational SupportAdminister and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changesDevelop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operationsOwn production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automationMonitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issuesPreserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures Project & Vendor ManagementCoordinate implementation and operational activities with technology vendors, consultants, and managed service providersSupport infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations www.aegislink.com EOE AEGIS Insurance Services, Inc. participates in E-Verify We expect to pay a starting salary between $185,000 and $225,000. An applicant’s placement within this range is based on their individual qualifications and professional experience. In addition to base salary, AEGIS employees are eligible to participate in the Company’s annual incentive program, with competitive awards based on corporate and individual performance.In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits: Health & Wellness: Medical, dental, vision, mental health support and employee assistance programsRetirement: 401(k) with matching contributionIncome Protection: Life, disability, accident and critical illness insuranceTime Off: Vacation days, sick days, holidays and family/military leave optionsOther: Commuter benefits, pet insurance, hybrid work scheduleGrowth: Tuition assistance and professional development opportunities