Infrastructure Security and Systems Administrator

Kresge Foundation•Troy, MI

8d•Hybrid

About The Position

The Infrastructure Security and Systems Administrator is responsible for protecting and maintaining the organization’s technology environment through the monitoring, analysis, and response to cybersecurity threats and incidents. This role supports the stability, security, and performance of the network, server, and infrastructure environment, leveraging knowledge of networking principles and Microsoft Azure server technologies. Working closely with the organization’s Managed Services Provider (MSP) and cybersecurity leadership, the position helps reduce the organization’s attack surface by identifying and remediating vulnerabilities, implementing security controls, and supporting ongoing infrastructure operations. The role also contributes to the planning and execution of cybersecurity initiatives, infrastructure improvements, and technology projects to enhance the organization’s overall security posture and operational reliability.

Requirements

Knowledge and use of powershell, preferred.
Advanced technical knowledge of windows operating systems and infrastructure. This includes software and server communications. In addition, the ability to make OS-level modifications in areas such as the Registry, File system, and other operation-level modifications.
Advanced technical knowledge of protocols they use to communicate. This also includes knowledge of network ports, how they operate, and what specific ones typically do.
Knowledge of remote access methods on a Windows network, such as hidden UNC paths to hard drives and remote access into a machine.
Knowledge of network methods, such as SSH
Knowledge of how Windows manages clients on the network, including DNS server, DHCP server, Windows trust relationships, and Windows Groups\Account Management on local and domain level.
Excellent communication skills with the ability to clearly articulate technical information to both technical and non-technical stakeholders.
Proven ability to remain composed and effectively manage stress during high-pressure situations and security incidents.
Strong analytical skills with the ability to perform detailed gap analysis and address vulnerabilities and inefficiencies.
Work performed onsite in Troy and Detroit, Michigan.

Nice To Haves

Bachelor’s degree in Information Technology, Computer Science, or related field (preferred).
One to two years knowledge of security, network, and infrastructure management in Azure/Entra.
ISC2 certification or other security certification, preferred.

Responsibilities

Analyze scan results of organization systems and cloud environments, beyond the monthly requirement, as needed.
Plan, track, and solve remediation of different vulnerabilities within the network on PCs and Servers, including service packs and application updates.
Monitor, investigate, and respond to security risks involving organizational AI tools and services, including misuse, data exposure, and manipulation of AI inputs or outputs that could impact confidentiality, integrity, or availability.
Improve and automate existing vulnerability management systems where available and provide technical support for vulnerability management projects.
Use ticketing systems to implement fixes using change control methodology.
Make necessary changes in client PCs to eliminate vulnerabilities, such as registry entries or file deletions.
Work with internal IT team and partners to effectively implement remediations using their tools if necessary or to bring awareness to partners.
Work with cybersecurity lead to resolve information security incidents, including targeted threats and internal incidents.
Develop and/or maintain documentation regarding threat management, including guidelines, policies and procedures.
Provide recommendations for improving security and risk management.
Conduct periodic reviews of our infrastructure tooling containing compliance and security modules, taking the suggestions for furthering our compliance and security.
Coordinate and oversee annual penetration testing and develop exercises, working closely with external vendors to plan, execute, and evaluate test results. Analyze findings and facilitate the timely remediation of identified vulnerabilities and gaps.
Assist in coordination of audits and cyber insurance reviews, and implement recommendations given in the findings and reports.
Communicate the risks of identified vulnerabilities and recommend security controls to mitigate them.
Stay current with the latest cybersecurity trends, threats, and technologies.
Other cybersecurity duties and assistance as needed.
Primarily responsible for continuous reliable network connectivity, including resolving network failures and troubleshooting issues.
Perform Upgrades and Maintenance of network and firewall equipment, working with our MSP to determine where they can assist.
Work with our MSP to support or configure hardware and Azure-based networks, local area networks (LAN’s), wide area networks (WANs) and network segments and servers.
Ensure and uninterrupted internet connection and manage cloud email systems for sending and receiving emails.
Maintain internal IT infrastructure-related documentation.
Provide oversight and communication to the MSP responsible for our Azure server environment. This includes reviewing requests, periodic architecture and compliance reviews, and coordinating updates to the environment.
Perform duties in the environment that accommodate people-based change management, working collaboratively with the IT team, the MSP, and with the users of the foundation.
Implement, support, and update data and server backup and recovery plan.
Perform other IT duties and assistance as needed.