Cybersecurity and Infrastructure Lead

Marquette-Alger RESA•Marquette, MI

1d•$93,917 - $115,506

About The Position

The Cybersecurity and Infrastructure Lead leads infrastructure and cybersecurity implementation across Marquette-Alger RESA and partner districts. Reporting to the Chief Technology Officer (CTO), this role executes high-priority infrastructure projects and security protocols in alignment with departmental strategic planning. The Lead supports application rollouts and facility expansions while ensuring the integrity and resilience of the network environment, including accountability for SOC 2 compliance and audit readiness across in-scope systems. The role also provides expert-level end-user support, with its primary focus on delivering and maintaining enterprise-level technology systems. This full-time, 12-month, non-union position requires maintaining confidentiality of agency, district, student, and staff information. Occasional regional travel using a personal vehicle and occasional overnight travel downstate may be required. The position is compensated according to the Marquette-Alger RESA Non-Affiliated Salary Schedule.

Requirements

At least five years of hands-on information technology experience, specifically in Windows server management and maintaining LAN/WAN/WLAN environments.
Proficiency using computers and software, including Microsoft Office Suite, and familiarity with data formats such as XML.
Ability to establish and maintain positive relationships, collaborate, and solve problems with diverse partners and stakeholders.
Excellent interpersonal, verbal, and written communication skills.
Ability to learn new technical skills quickly and independently.
Ability to analyze needs and problems and develop procedures to address them.
Ability to work cooperatively with others and as part of a team.
Self-directed approach and ability to meet timelines.
Ability to serve students, staff, and the public pleasantly and efficiently.
Ability to orchestrate multiple activities and projects while maintaining proactive communication with stakeholders.
Ability to address issues fairly, treat diverse populations and personalities with dignity and respect, and act ethically.
Ability to work in a fast-paced environment while remaining flexible.
Must maintain confidentiality of agency and LEA affairs, including privileged and sensitive student and staff information.
Must have regular and reliable attendance, performance, and the physical ability to perform the job.
Regular ability to sit or stand for extended periods and to walk, bend, and reach to inspect hardware or network infrastructure.
Frequent use of hands and fingers to operate computer keyboards and specialized technical tools.
Occasional ability to lift, carry, or move hardware weighing up to 35 pounds.
Ability to read technical manuals and monitors and communicate clearly in person or through digital platforms, including in environments with moderate ambient noise.

Nice To Haves

Bachelor’s degree in technology, computer science, computer information systems, or a related field, or an equivalent combination of significant education, training, certifications, and experience.
Server+, Network+, CCNA, MCP, or similar certifications.
Experience supporting SOC 2 audits or comparable compliance frameworks such as ISO 27001 or NIST, including evidence collection and control documentation.
Compliance- or audit-related certifications such as CISA, CISM, or equivalent.
Prior experience in a local school district, ISD, or RESA.
Experience with VxRail high-availability clusters.
Experience with Veeam backup solutions.
Experience with Aruba, Cisco, or Meraki networking platforms.
Experience with Intune, Mosyle, and FileWave deployment tools.

Responsibilities

Execute infrastructure and security work according to priorities approved by the CTO and department planning.
Install and manage Windows and Linux servers, including Active Directory, DNS/DHCP, NPS, Azure AD Connect, and NTFS permissions.
Manage hybrid environments, including users, computers, and Group Policies across Active Directory, Entra ID (Azure), and Google Workspace.
Implement and maintain physical and virtual technologies, including VMware, vCenter/vSAN, and high-availability clusters.
Configure and manage enterprise networking, including WAN/LAN/WLAN, routers, firewalls, and wireless platforms.
Manage switches, firmware, VLANs, routing protocols, and redundancy to maintain network integrity.
Oversee lifecycle management of physical and virtual servers and SAN infrastructure, including upgrades and security patches.
Implement and manage system backup solutions to support business continuity.
Deploy CIS Critical Security Controls and other industry-standard cybersecurity practices to protect agency systems.
Design and manage security solutions, including network security assessments, audits, and monitoring for suspicious activity.
Assist department leadership with incident response planning, documentation, and procedures.
Conduct security reviews of new and existing systems to assess alignment with departmental security priorities.
Maintain and monitor network logs to support threat visibility and response.
Provide employee training on cybersecurity best practices and organizational security awareness.
Automate Windows and macOS operating system and software deployment.
Administer Google Workspace for Education and Microsoft 365.
Manage physical security and communications systems, including door access controls, surveillance systems, and the RESA telephone/E911 system.
Provide expert-level customer service and troubleshoot hardware, software, and network issues for staff and classroom environments.
Maintain documentation of configurations, inventory, and projects to support effective and scalable technology services.
Maintain professional competence through ongoing education about statutes, regulations, and IT standards.
Support agency adherence to SOC 2 Trust Services Criteria across in-scope systems and infrastructure.
Implement and maintain technical controls mapped to SOC 2 requirements, including access controls, logical and physical security, change management, and system monitoring.
Prepare, organize, and maintain evidence, control documentation, and system descriptions for SOC 2 audit readiness and reviews.
Collaborate with the CTO and department leadership to develop, document, and enforce information security policies and procedures aligned with SOC 2 control objectives.
Conduct periodic control testing and self-assessments to verify control effectiveness and identify remediation needs.
Track and remediate audit findings, control gaps, and exceptions within established timelines, documenting corrective actions.
Maintain audit trails, access logs, and monitoring records to demonstrate ongoing SOC 2 compliance.
Support vendor and third-party risk management, including review of subservice organization SOC reports and vendor security posture.
Contribute to change management processes to ensure system modifications are authorized, tested, documented, and reviewed in accordance with SOC 2 requirements.
Coordinate with department leadership during SOC 2 examinations to facilitate auditor requests and timely responses.
Perform other duties as assigned to support the department and partner districts.