Senior Infrastructure Security Engineer

AEGIS • Jersey City, NJ

5d • Hybrid

About The Position

AEGIS Insurance Services, Inc. is hiring a Senior Infrastructure Security Engineer to implement, administer, and support security controls across on-premises, cloud, and hybrid technology environments. The position works with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. It provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution. The Office of the CISO sets security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.

The role administers systems, cloud, identity, endpoint, and network-security capabilities; supports vulnerability remediation, security operations, and incident response; develops PowerShell automation; monitors and troubleshoots production services; and coordinates projects and vendors. The position may require work outside normal business hours for on-call support and scheduled implementations, maintenance, and remediation.

The expected starting salary is $185,000–$225,000, with placement based on qualifications and professional experience. Employees may also participate in the company’s annual incentive program, with awards based on corporate and individual performance. AEGIS describes its work arrangement as including a hybrid work schedule.

Requirements

• At least 10 years of progressively responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security.
• Hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure.
• An undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience.
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls.
• High proficiency in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills.
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers.
• Availability to work outside normal business hours as required for on-call support and scheduled implementations, maintenance, and remediation.
• Experience responding to high-priority incidents, communicating operational risk, and following change, incident, access-management, and segregation-of-duties controls.

Nice To Haves

• Microsoft, Azure, infrastructure, or security certifications are desired.
• CISSP or a comparable security certification is a plus.
• Experience with SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired.

Responsibilities

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure.
• Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, multifactor authentication, and device-registration controls.
• Administer Microsoft 365, Microsoft Azure, and Azure Local services, and implement approved security configurations.
• Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels.
• Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards.
• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation.
• Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities.
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions.
• Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication.
• Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes.
• Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations.
• Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation.
• Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues.
• Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures.
• Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers.
• Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations.
• Collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers; independently manage priorities.
• Participate in on-call support and scheduled implementations, maintenance, and remediation outside normal business hours as required.
• Respond to high-priority incidents, communicate operational risk, and follow change, incident, access-management, and segregation-of-duties controls.

Benefits

• Annual incentive program with competitive awards based on corporate and individual performance.
• Medical, dental, and vision coverage.
• Mental health support and employee assistance programs.
• 401(k) with matching contribution.
• Life, disability, accident, and critical illness insurance.
• Vacation days, sick days, and holidays.
• Family and military leave options.
• Commuter benefits.
• Pet insurance.
• Hybrid work schedule.
• Tuition assistance.
• Professional development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior