POSITION SUMMARY: The IT Systems Engineer & Security Specialist builds, configures, maintains, and improves Pogue's core technology environment • servers, cloud, identity, network, and endpoints • to defined standards, while contributing strong, practical security skills across the estate. Reporting to the Director of Infrastructure & Security, this engineer keeps systems reliable, secure, and well-documented across offices and jobsites.
On security, this engineer is Pogue's hands-on specialist during an interim period • standing up and strengthening the security posture and risk-reduction work now, with strategic risk ownership transitioning to a dedicated Security Owner as that role is filled. The focus is on implementing and maintaining strong security controls, not carrying sole responsibility for security strategy or risk acceptance.
EXPERIENCE: - 7+ years of systems/infrastructure engineering in a multi-site Microsoft environment spanning on-premises and cloud
- Deep Microsoft Azure and Entra ID experience
- 3+ years of hands-on security operations.
EDUCATION: - Bachelor's degree in Computer Science, Information Technology, or similar experience.
PRIMARY RESPONSIBILITIES: Systems & Infrastructure Engineering: - Build, configure, maintain, and improve servers, virtualization, storage, cloud (Azure), identity (Entra ID), Intune, and network to defined standards.
- Monitor infrastructure health and resolve performance, availability, and capacity issues.
- Execute infrastructure changes through change management, with rollback paths and clear documentation.
- Identify technical debt and single points of failure; contribute to modernization and automation.
Security Specialist Support (Interim): - Help stand up and strengthen Pogue's security posture and risk-reduction work • applying least privilege, segmentation, hardening, logging, and identity-first configuration in daily engineering • until a dedicated Security Owner is hired.
- Remediate open Microsoft 365 baseline controls and support progress toward NIST CSF 2.0.
- Operate and maintain the security stack • Defendify, CrowdStrike, Netwrix, Microsoft Defender/Purview, MFA, Conditional Access.
- Perform vulnerability remediation across the environment and support incident response • containment, evidence preservation, and post-incident follow-up.
- Produce security evidence for audits, cyber-insurance questionnaires, and customer/supplier prequalification.
Standards, Documentation & Vendor Coordination: - Maintain accurate documentation • configurations, runbooks, diagrams, and dependency notes.
- Contribute to infrastructure, cloud, identity, and network standards within architecture guardrails set by the Director.
- Coordinate technical cases with infrastructure and security vendors; validate recommendations before implementation.
- Support backup, DR, and resilience execution against defined RTO/RPO targets.
Service & Escalation Support: - Serve as the Tier 3 escalation point for complex server, identity, M365, cloud, network, and infrastructure problems.
- Provide technical guidance to helpdesk, endpoint, and field support staff; convert recurring issues into standards and reduce repeat escalations.
REQUIRED SKILLS: - 7+ years as a systems / infrastructure engineer building and maintaining multi-site Microsoft environments across on-premises and cloud.
- Deep, hands-on expertise with Microsoft Azure and Entra ID, plus Microsoft 365 and Intune.
- Strong skills across servers, virtualization, storage, and network (routing/switching, firewalls, VLANs, VPN).
- 3+ years of practical security experience: least privilege, MFA/Conditional Access, vulnerability remediation, and incident-response support, with working familiarity of a control framework (NIST CSF 2.0 or CIS).
PREFERRED SKILLS: - Hands-on time with a modern security stack such as Defendify, CrowdStrike, Netwrix, or Microsoft Defender/Purview.
- Network hardware experience with Ubiquiti/UniFi.
- Relevant certifications • Microsoft Azure Administrator (AZ-104), Identity & Access Administrator (SC-300), Security Operations Analyst (SC-200), or CompTIA Security+.
