NOTE TO APPLICANTS: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future
POSITION SUMMARY:Milliman Global Corporate Services (GCS) is seeking an experienced Infrastructure Engineer to join a team of engineers. This role is responsible for the engineering, administration, maintenance, and continuous improvement of Milliman's infrastructure platforms that protect and enable Milliman's enterprise environment. This includes network technology such as firewalls, remote access solutions, identity-related infrastructure, and cloud-connected services. The role partners closely with Security, Cloud, and Infrastructure teams to deliver secure, reliable, and scalable technology services.
This role reports to the GCS IT Manager of Infrastructure.
RESPONSIBILITIES:- Infrastructure Engineering: Provide guidance and implement system changes within Milliman's data centers, network architecture, and enterprise platforms.
- Infrastructure Monitoring: Monitor infrastructure and network systems and the environment for misconfigurations, using existing tools and operational processes to improve system visibility, support timely remediation, and escalate concerns to appropriate teams.
- Firewall Administration: With guidance from the Security team, administer and optimize firewall systems, web gateways, segmentation tools, and remote access technologies; manage and troubleshoot rule sets, ACLs, policy changes, and continuously improve network security controls as guided by Security.
- Support Remote Access & Zero Trust: With guidance form the Security team, implement and administer secure remote access systems, VPN options, and Zero Trust Network Access (ZTNA) capabilities that enforce least-privilege access based on user roles and business needs.
- Vulnerability & Configuration Management: Implement vulnerability remediation, system hardening, and secure configuration baselines for operating systems, virtual machines, network devices, and other infrastructure components.
- Stakeholder Partnership: Collaborate with the greater GCS IT team, GCS IS team, practice IT teams and application owners to provide guidance and deliver secure-by-default system patterns without blocking delivery.
- Compliance, Risk & Documentation: Support Security and Compliance teams by maintaining infrastructure systems, assisting with audit evidence gatherings, participating in control validation and risk assessments, addressing remediation items, and maintaining infrastructure documentation related to how systems adhere to security standards, defined system configurations, and operational procedures.
SKILLS & QUALIFICATIONS REQUIRED:- The ideal candidate must have 5+ years of experience in network infrastructure, systems engineering, or a related role with a security focus.
- The ideal candidate must have 3+ years of hands-on experience securing enterprise infrastructure, including servers, data centers, firewalls, network controls, identity systems, and cloud-connected environments.
- The ideal candidate must have previous experience with proxy technologies, VPN options, secure remote access, and Zero Trust Network Access (ZTNA) solutions.
- The ideal candidate must have previous experience implementing, administering, troubleshooting, and optimizing firewall ACLs, access control solutions, and network proxy platforms.
- The ideal candidate must have previous experience with vulnerability management and remediation processes for Windows and/or Linux operating systems.
- Must have working knowledge of identity and access management principles, including least privilege, MFA, privileged access controls, and role-based access.
- Must have strong analytical, troubleshooting, and verbal and written skills, with the ability to translate security risks into practical technical actions.
- Must be willing to travel to data centers.
SKILLS & QUALIFICATIONS PREFERRED: - Experience with system logging, EDR, orchestration and automation, IDS/IPS, and observability platforms such as Splunk, Grafana, or LogicMonitor.
- Understanding security frameworks and standards.
- Experience with major firewall vendors such as Cisco, Checkpoint, Fortinet, and Palo Alto.
- Ability to work evening and weekend hours as needed or directed.
LOCATION:- This is a remote role. This job posting is expected to close on October 20th, 2026
COMPENSATION:Remote Language: The overall range for this role is $93,700 - $177,675.
For candidates residing in:
- Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of Columbia the range is $107,755 - $177,675.
- All other locations the range is $93,700 - $154,500.
A combination of factors will be considered, including, but not limited to, education, relevant work experience, qualifications, skills, certifications, etc.
BENEFITS:We offer a comprehensive benefits package designed to support employees' health, financial security, and well-being. Benefits include:
- Medical, Dental and Vision - Coverage for employees, dependents, and domestic partners.
- Employee Assistance Program (EAP) - Confidential support for personal and work-related challenges.
- 401(k) Plan - Includes a company matching program and profit-sharing contributions.
- Discretionary Bonus Program - Recognizing employee contributions.
- Flexible Spending Accounts (FSA) - Pre-tax savings for dependent care, transportation, and eligible medical expenses.
- Paid Time Off (PTO) - Begins accruing on the first day of work. Full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis.
- Holidays - A minimum of 10 paid holidays per year.
- Family Building Benefits - Includes adoption and fertility assistance.
- Paid Parental Leave - 11 weeks of paid leave for employees who meet eligibility criteria.
- Life Insurance & AD&D - 100% of premiums covered by Milliman.
- Short-Term and Long-Term Disability - Fully paid by Milliman.
#LI-REMOTE | #LI-HM1
