IT Security & Infrastructure Engineer

Pacific Clinics • Arcadia, CA

2d • Hybrid

About The Position

The IT Security & Infrastructure Engineer is a mid-level role, split approximately evenly between information security operations and enterprise infrastructure management. Under the direction of IT leadership, the position helps protect the confidentiality, integrity, and availability of Pacific Clinics' systems and data while supporting the administration, reliability, and performance of its Microsoft Azure cloud and mixed infrastructure environment. The role works with the broader IT team, vendors, and end users across a distributed, multi-site healthcare organization.

The position must be able to report to Arcadia, California, one to three times per week. The work environment is primarily office/remote hybrid, with occasional travel to agency sites. Occasional after-hours or on-call support may be needed for security incidents or infrastructure maintenance windows. No relocation assistance is provided.

Requirements

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field, plus three or more years of progressive experience in information security and/or IT infrastructure roles; alternatively, an equivalent combination of education and experience, with two years of related experience equaling one year of education.
• Hands-on experience administering Microsoft Azure compute, storage, networking, and Azure AD/Entra ID in a production environment.
• Working knowledge of security monitoring tools, including SIEM and EDR, vulnerability management, and incident response processes.
• Familiarity with identity and access management concepts, including MFA, conditional access, and least-privilege principles.
• Experience with Windows Server administration.
• Ability to prioritize and manage competing tasks across security and infrastructure responsibilities in a fast-paced, resource-limited environment.
• Strong written and verbal communication skills, including the ability to document technical work clearly and explain issues to non-technical staff.
• Ability to work collaboratively within a team and independently on assigned tasks.
• Knowledge of and ability to work effectively with culturally diverse staff and client populations.
• Valid California driver's license and an insurable driving record under the Clinic's liability policy.
• Must complete a full background check and TB exam.

Nice To Haves

• Familiarity with networking fundamentals, including firewalls, VPN, and SD-WAN.
• Exposure to healthcare compliance frameworks such as HIPAA/HITECH; this is preferred but not required.
• Relevant certifications such as Security+, Azure Administrator Associate (AZ-104), or SC-900, or demonstrated experience.

Responsibilities

• Monitor security alerts, logs, and dashboards from SIEM, EDR/XDR, firewall, and cloud security tools to identify and triage potential threats.
• Support incident response, including initial investigation, containment, documentation, and escalation of security events.
• Perform routine vulnerability scanning and coordinate patch management across servers, endpoints, and network devices; track remediation to closure.
• Administer and tune endpoint protection, email security, and web filtering tools in coordination with IT leadership.
• Assist with identity and access management, including access reviews, least-privilege enforcement, and MFA administration.
• Support HIPAA security rule compliance, including documentation, audit evidence gathering, and remediation of findings.
• Maintain and test security policies, standards, and procedures, including acceptable use, incident response, and backup/recovery.
• Participate in security awareness initiatives, including phishing simulations and staff training support.
• Assist with third-party and vendor security risk assessments for new applications and services.
• Administer and support Microsoft Azure resources, including virtual machines, storage, networking, VNets, NSGs, and Azure Active Directory/Entra ID.
• Support hybrid identity infrastructure, including Azure AD Connect, single sign-on, and conditional access policies.
• Assist with day-to-day administration of servers, backups, and business continuity/disaster recovery tools, such as M365 Backup and Azure Backup.
• Support network infrastructure, including Fortigate, VPN, and site connectivity across the agency's multi-site environment.
• Monitor system performance and capacity and help troubleshoot infrastructure and connectivity issues raised through the service desk.
• Participate in infrastructure projects such as site deployments, cloud migrations, and system upgrades, following established project plans and templates.
• Maintain accurate documentation of infrastructure configurations, diagrams, and standard operating procedures.
• Collaborate with Applications, Decision Support, and Service Desk teams to ensure infrastructure and security work supports broader IT and business objectives.
• Provide occasional after-hours or on-call support for security incidents or infrastructure maintenance windows.
• Perform other duties as assigned.

Benefits

• Medical, dental, and vision benefits, with eligibility starting on day one.
• 401(k) employer match up to 4%.
• Competitive time-off plans, subject to eligibility requirements based on employment status.
• Hiring incentive paid out after 30 days and six months.
• Possible bilingual differentials: up to 7.5% for qualifying direct-service roles or up to $80 per month for qualifying non-direct-service roles.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level