OverviewThe IT Network and Infrastructure Security Specialist is responsible for the administration, security, and resilience of the organization's network, server, and Microsoft cloud infrastructure. This role ensures secure configuration, monitoring, and maintenance of enterprise IT systems, including firewalls, switches, wireless networks, identity platforms, physical and virtual servers, and cloud environments.
The specialist works closely with IT, infrastructure, and security teams to safeguard systems against threats, maintain high availability, and support security initiatives across the organization. This position requires strong hands-on experience in IT infrastructure administration as well as practical security administration expertise.
This position follows a hybrid schedule, with four days per week in the office and one day working from home.
Essential Responsibilities/DutiesNetwork and Infrastructure Administration - Manage, maintain, and troubleshoot network infrastructure, including switches, routers, firewalls, VPN appliances, and wireless systems.
- Administer Windows and Linux servers, virtualization platforms (VMware / Hyper-V), and enterprise storage solutions.
- Ensure network performance, availability, and uptime through proactive monitoring and maintenance.
- Implement and maintain secure configurations, patching, hardening standards, and baseline system builds.
Security Administration - Manage and monitor security tools, including Identity Management (OKTA), Mobile Device Management (MDM), Remote Monitoring and Management (NinjaOne), firewalls, IDS/IPS, vulnerability scanners, and identity security platforms.
- Assist Security Analysis with SIEM and EDR administration support.
- Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
- Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
- Ensure network segmentation, zero-trust controls, and secure access principles are implemented across environments.
Incident Management and Response - Participate in incident response activities, supporting containment, remediation, and recovery actions.
- Help investigate security alerts, perform triage, and support containment, eradication, and recovery activities.
- Conduct root-cause analysis and contribute to strengthening security controls to reduce recurrence.
- Maintain incident documentation, reporting, and continuous improvement of response processes.
- Collaborate with third-party security partners (SOC/MDR) on detection and mitigation activities.
Risk Management and Compliance - Support risk assessments across network, server, cloud, and identity systems.
- Document, track, and support remediation of risks and vulnerabilities across infrastructure assets. Assist with IT and security policy enforcement, compliance audits, and regulatory alignment (NIST, CIS, SOC 2, GDPR, CCPA).
- Participate in building and maintaining security roadmaps and improvement plans.
Collaboration and Operational Support - Work with IT, cloud, infrastructure, and business units to ensure secure design and implementation of systems.
- Provide reporting on infrastructure health, security posture, patch status, and risk findings.
- Support security awareness initiatives and ensure proper security practices are followed throughout the organization.
Identity and Privileged Account Management - Administer identity and privileged account management using Okta, including lifecycle management, MFA enforcement, role-based access, and privileged identity controls.
- Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
- Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
- Ensure network segmentation, zero-trust controls, and secure access principles are implemented across environments.
QualificationsRequired Qualifications- 7+ years of systems administration experience, including at least 3 years in a senior or lead role.
- Strong hands-on experience administering Microsoft 365, Entra ID, and Intune in a cloud-first environment.
- Working experience with Azure infrastructure as a service (IaaS), including virtual machines, virtual networks, storage, backup, and role-based access control (RBAC).
- Experience with single sign-on (SSO), federation through Okta or a similar platform, and conditional access design.
- Strong PowerShell scripting skills for automation and bulk administration.
- Experience managing endpoints through a remote monitoring and management (RMM) platform, administering mobile devices through an enterprise mobile device management (MDM) platform such as Workspace ONE, and maintaining a structured patch management program.
- Hands-on experience administering enterprise backup and recovery platforms such as Druva or Veeam, including restore testing and disaster recovery planning.
- Working knowledge of endpoint detection and response (EDR) tools, firewalls, and email security, with the ability to support incident response.
- Strong technical documentation skills, including the ability to create clear standard operating procedures (SOPs) and change records that others can follow.
- Ability to communicate calmly, professionally, and discreetly with executives and high-profile clients.
- Willingness to participate in an on-call rotation and respond after hours as needed.
Preferred Qualifications- Microsoft certifications such as MS-102 (Microsoft 365 Administrator), AZ-104 (Azure Administrator), or SC-300 (Identity and Access Administrator).
- Okta Certified Administrator or an equivalent identity platform certification.
- VMware/Omnissa Workspace ONE certification or an equivalent MDM credential.
- Veeam Certified Engineer (VMCE) or an equivalent backup and recovery certification.
- A security certification such as CompTIA Security+ or SSCP.
- Hands-on experience with Workspace ONE MDM, Druva, Veeam, CrowdStrike Falcon, Delinea Secret Server, or NinjaOne.
- Exposure to Microsoft Purview, Microsoft Sentinel, or Azure Front Door/Web Application Firewall (WAF).
- Experience in aviation, financial services, or another regulated industry with strict privacy requirements.
- Familiarity with ITIL practices, change advisory processes, and audit evidence collection.
Additional InformationSalary Range: $85,000 - $93,000
