IT Infrastructure and Security Manager

Infusion4Health Inc• US,

2d•$85,000 - $100,000•Remote

About The Position

This role owns day-to-day security posture, identity hygiene, and compliance readiness across a multi-site healthcare environment (Microsoft 365, Entra ID, Azure, on-prem Active Directory, and site firewalls). The work is hands-on and includes directing and independently verifying work performed by an outsourced IT partner and offshore resources. This is a remote role in the USA; PST hours highly preferred.

Requirements

5+ years administering Microsoft environments at multi-site scale, including Entra ID/Azure, Microsoft 365, on-prem Active Directory and Group Policy, and Intune
Hands-on experience with Microsoft Defender (XDR and/or Defender for Office 365) and at least one SIEM platform
Practical network competence with firewalls, VPN/SD-WAN, VLANs, and DNS, with the ability to supervise a network engineer
Direct experience producing evidence for a SOC 2, HITRUST, or comparable audit
Strong PowerShell skills for automation and auditing
Clear communication with non-technical stakeholders and a demonstrated ability to hold vendors accountable
Comfort being hands-on while also directing and verifying others’ work

Nice To Haves

Healthcare industry experience and familiarity with HIPAA security requirements
Certifications such as SC-200, AZ-500, Security+, or CISSP
Experience supervising or working within a managed service provider (MSP) delivery model

Responsibilities

Own identity and access hygiene, including a working joiner/mover/leaver process, elimination of stale and orphaned accounts, and scheduled rotation of admin and service account credentials.
Document, approve, and technically enforce security policies across the environment using Group Policy, Intune, and Conditional Access, in support of HIPAA security requirements.
Maintain 100% MFA and Conditional Access coverage for users and administrators.
Administer and monitor Microsoft Defender (XDR and/or Defender for Office 365) and at least one SIEM platform; oversee related email protection controls (including DMARC/SPF/DKIM).
Ensure server and domain controller patching cadence is met and backups are verified.
Build and run SOC 2 Type II evidence collection as a repeatable process and keep the organization on track for attestation.
Deliver a monthly security posture report to the CIO covering open risks, aging remediation, and audit readiness.
Hold the IT partner and offshore resources accountable for SLA performance; independently verify completed work and conduct third-party access reviews.
Supervise network-related work as needed (site firewalls, VPN/SD-WAN, VLANs, DNS).
Follow through on aging remediation items and communicate risk clearly to non-technical leaders.