Senior Infrastructure Security Engineer

Aegis•Jersey City, NJ

1d•$185,000 - $225,000•Hybrid

About The Position

AEGIS Insurance Services, Inc. is hiring a Senior Infrastructure Security Engineer to implement, administer, and support security controls across the organization’s on-premises, cloud, and hybrid technology environments. The role works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams, providing senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution. The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls. The position covers systems, cloud, identity, endpoint, vulnerability-management, security-operations, incident-response, network-security, automation, and operational-support responsibilities. It also coordinates technology vendors, consultants, and managed service providers, and supports infrastructure lifecycle management, migrations, modernization, office buildouts, and technology implementations. Availability outside normal business hours is required as needed for on-call support and scheduled implementations, maintenance, and remediation.

Requirements

At least 10 years of increasingly responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security.
Hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure.
Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience.
Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls.
High proficiency in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills.
Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers.
Availability to work outside normal business hours as required for on-call support and scheduled implementations, maintenance, and remediation.
Experience responding to high-priority incidents, communicating operational risk, and following change, incident, access-management, and segregation-of-duties controls.
Collaborative communication and behavior, initiative and accountability, quality-focused work, and a service-oriented approach.

Nice To Haves

Microsoft, Azure, infrastructure, or security certifications are desired; CISSP or a comparable security certification is a plus.
Experience with SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired.

Responsibilities

Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure.
Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, multifactor authentication, and device-registration controls.
Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations.
Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels.
Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards.
Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation.
Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities.
Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions.
Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication.
Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes.
Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations.
Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation.
Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues.
Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures.
Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers.
Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations.
Work collaboratively across IT, the Office of the CISO, business stakeholders, vendors, and service providers.
Participate in on-call support and scheduled implementations, maintenance, and remediation outside normal business hours as required.

Benefits

Annual incentive program with awards based on corporate and individual performance.
Medical, dental, and vision coverage.
Mental health support and employee assistance programs.
401(k) with matching contribution.
Life, disability, accident, and critical illness insurance.
Vacation days, sick days, and holidays.
Family and military leave options.
Commuter benefits.
Pet insurance.
Hybrid work schedule.
Tuition assistance.
Professional development opportunities.