Sr. IT Infrastructure Engineer

American Life Financial Partners, LLC.•Lincoln, NE

2d•$119,000 - $130,000

About The Position

American Life is a rapidly growing, technology-enabled insurance holding company focused on long-term growth and advancing the insurance value chain through products and services that reduce costs and increase customer value. The Senior Infrastructure Engineer is a hands-on role responsible for designing, building, securing, and operating the company's network, firewalls, servers, Microsoft 365, AWS and Azure cloud environments, and employee endpoints. The role combines infrastructure engineering and cybersecurity, with responsibility for hardening and patching systems and maintaining documentation and change records that support SOC 2 and insurance regulatory obligations. The engineer owns systems from design through day-to-day operation and communicates technical decisions to engineers, business leaders, and auditors. The role works in a professional office environment and is full-time, Monday through Friday, 8:00 a.m. to 5:00 p.m. Additional hours may be needed to complete work and prevent operational disruption, including scheduled maintenance windows and security incident response. No travel is expected. Candidates must be eligible to work in the United States.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and experience.
At least 5 years of experience in IT infrastructure engineering, including network and systems administration.
Hands-on production experience administering Microsoft Intune and Microsoft Entra ID.
Experience with an enterprise patch management or RMM platform.
Experience configuring and managing enterprise firewalls.
In-depth knowledge of network protocols and technologies, such as TCP/IP, DNS, DHCP, VLANs, routing, and VPN.
Working experience with AWS and/or Microsoft Azure infrastructure.
Experience administering and securing Microsoft 365, including Exchange Online and Microsoft Defender.
Scripting experience with PowerShell.
Must be eligible to work in the United States.
Troubleshooting across network, server, identity, cloud, and endpoint layers, with a focus on identifying root cause.
A security-first approach that builds controls into designs.
Clear written and verbal communication with technical and non-technical audiences, including management and auditors.
Ability to work independently, manage competing priorities, and carry work through to completion.
Effective collaboration with cross-functional teams, vendors, and managed service providers.
An automation mindset, using PowerShell and other scripting to reduce repetitive manual work.

Nice To Haves

NinjaOne experience is strongly preferred.
Experience in a regulated industry such as insurance, financial services, or healthcare, including supporting SOC 2 or regulatory examinations.
Experience with Terraform and Git-based workflows.
Experience configuring firewalls and network security in Azure.
Experience with Zero Trust network access, such as Microsoft Global Secure Access, and application allowlisting, such as ThreatLocker.
Linux administration experience.
Experience working alongside a managed service provider.
Relevant certifications, such as Microsoft MD-102, AZ-104, or SC-300; AWS Certified SysOps Administrator or Solutions Architect; CompTIA Security+; or CISSP.

Responsibilities

Design, implement, and maintain network infrastructure, including next-generation firewalls, switching, routing, VPN, DNS, and DHCP.
Plan and deliver infrastructure projects from requirements and design through deployment, handoff, and documentation.
Administer Windows Server and Linux systems, Active Directory, and hybrid identity with Microsoft Entra ID.
Monitor performance and capacity across network, server, and cloud systems and act on trends before they cause outages.
Maintain backup, recovery, and disaster recovery capabilities and participate in periodic recovery testing.
Serve as the help desk escalation point, resolve complex issues, and document resolutions in the knowledge base.
Write and maintain IT procedures for supported systems.
Build and support AWS and Microsoft Azure infrastructure, including networking, compute, storage, and identity and access controls.
Use Terraform and Bitbucket-based source control to make infrastructure changes repeatable, reviewed, and traceable.
Partner with development and platform engineering teams to ensure applications are securely deployed and supportable in production.
Administer Microsoft Intune, including Windows Autopilot enrollment, configuration profiles, compliance policies, and application packaging and deployment.
Own endpoint and server patch management in NinjaOne, including policies, deployment rings, compliance reporting, and remediation of failed or missing updates.
Deploy and maintain remote monitoring and management, remote access, and endpoint management tooling.
Implement and maintain security controls across identity, endpoints, email, and network, including Microsoft Defender for Endpoint and Office 365, Conditional Access, MFA, and application allowlisting.
Apply security baselines and hardening standards, such as CIS Benchmarks, to servers, endpoints, network devices, and cloud resources.
Support vulnerability management by triaging findings, prioritizing remediation by risk, and tracking items to closure.
Participate in security incident response, including containment, investigation, evidence collection, and post-incident review.
Manage privileged and third-party vendor access to infrastructure, including periodic access reviews.