Senior IT Security and Network Engineer

AIR Communities•Denver, CO

1d•Onsite

About The Position

AIR Communities is seeking a seasoned Senior IT Security and Network Engineer to engineer, operate, and protect its hybrid enterprise environment across corporate offices, multifamily properties, on-premises systems, and cloud infrastructure. This hands-on role is responsible for secure and reliable connectivity, core infrastructure, security operations, and cloud security. The position combines network and cybersecurity fundamentals with practical Microsoft Azure infrastructure and security experience. The engineer will investigate alerts, troubleshoot complex issues, identify gaps in tooling, architecture, configuration, monitoring, and processes, and implement or coordinate sustainable fixes. It is a network and security engineering role with dedicated responsibility for strengthening cloud security, not an Azure application development or cloud architecture role. The position is based at AIR Communities’ corporate office in the Denver Tech Center and is expected to work in the office four to five days per week, based on business and team needs. The role calls for an alert, curious, proactive, and accountable SOC-oriented mindset, as well as an enthusiastic, collaborative, and service-oriented approach. The engineer will maintain and secure distributed network and infrastructure services; operate and improve security technologies and cloud security controls; investigate and respond to security events; improve monitoring, logging, resilience, and operational processes; and collaborate with technical teams, business partners, vendors, and leadership. The role also includes mentoring less-experienced engineers and contributing to documentation, repeatable processes, and team development.

Requirements

Bachelor’s degree in computer science, information security, engineering, or a related field, or equivalent practical experience.
At least 8 years of combined experience across network engineering, infrastructure operations, and cybersecurity, including hands-on support of distributed or hybrid environments.
Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, routing, switching, wireless networking, VPNs, firewalls, load balancing, and network segmentation.
Hands-on experience with Cisco Meraki, Palo Alto, Fortinet, or comparable network and security platforms.
Experience supporting Windows or Linux infrastructure, Active Directory, identity services, virtualization, storage, backup, patching, and monitoring.
Practical experience with Microsoft Azure infrastructure and security, including cloud networking, identity, logging, monitoring, configuration governance, or workload protection.
Experience investigating security events and working with one or more of the following: SIEM, EDR/XDR, vulnerability management, CSPM, SSPM, or MDR.
Ability to learn unfamiliar environments, ask effective questions, troubleshoot complex issues, collaborate with appropriate teams, and implement sustainable solutions.
Working knowledge of Zero Trust principles and frameworks such as the NIST Cybersecurity Framework or ISO 27001.
Strong written and verbal communication skills, sound judgment, and a collaborative service mindset.

Nice To Haves

Experience operating or securing Azure subscriptions and landing zones using services such as Azure Policy, Defender for Cloud, Sentinel, Entra ID, Conditional Access, PIM, Key Vault, NSGs, Azure Firewall, private endpoints, or centralized logging.
Experience supporting hybrid connectivity across corporate, property, data-center, and cloud environments.
Experience with an MDR platform.
Experience with PBX/VoIP and distributed property or branch environments.
Familiarity with PowerShell, Azure CLI, Bicep, Terraform, Python, or similar automation used for repeatable administration and control remediation.
Experience with SaaS security, SSPM, cloud-security posture management, identity-threat detection, or attack-surface reduction.
One or more relevant certifications, such as AZ-104, AZ-500, SC-200, CCNP Security, CISSP, CISM, or an equivalent certification.

Responsibilities

Engineer, maintain, and secure network infrastructure across corporate offices, property sites, on-premises environments, and cloud-connected networks, including LAN, WAN, WLAN, VPN, SD-WAN, and cloud connectivity.
Configure and support routers, switches, wireless access points, firewalls, load balancers, VPNs, DNS, DHCP, network segmentation, and secure remote connectivity across distributed locations.
Support cloud networking, including virtual networks, subnets, Network Security Groups, route tables, private endpoints, VPN or ExpressRoute connectivity, cloud firewall, Application Gateway, and network monitoring.
Lead or contribute to network upgrades, migrations, troubleshooting, performance optimization, and resiliency improvements.
Maintain high availability, disaster-recovery readiness, secure connectivity, and consistent network standards across the hybrid environment.
Diagnose complex routing, switching, firewall, wireless, DNS, identity, and hybrid-cloud connectivity issues.
Implement and maintain security controls and operational practices across network, endpoint, identity, server, application, SaaS, and cloud environments.
Monitor, investigate, prioritize, and respond to security incidents, vulnerabilities, anomalous activity, and emerging threats using a SOC-oriented approach.
Operate and improve security technologies such as firewalls, IDS/IPS, endpoint protection, EDR/XDR, vulnerability-management, SIEM/SOAR, CSPM, SSPM, and MDR platforms.
Use cloud-native security posture, threat detection, policy, identity and access management, privileged access, secrets management, and logging tools to identify and remediate cloud security and configuration gaps.
Validate findings, assess risk and business impact, and address gaps in tooling, configuration, logging, monitoring, access, and operational processes.
Tune detections, reduce false positives, improve alert coverage, incorporate threat intelligence, and develop practical countermeasures.
Support risk assessments, vulnerability reviews, penetration-test remediation, compliance reviews, and control validation across infrastructure, applications, containers, and cloud workloads.
Partner with application, data, and business teams to support secure deployments and maintain procedures, investigation records, remediation plans, and audit evidence.
Administer, maintain, and secure physical and virtual infrastructure across on-premises and cloud environments.
Support Windows and Linux servers, Active Directory, IDP, DNS, DHCP, certificates, file services, virtualization, storage, backup, and identity-related services.
Maintain infrastructure performance, patching, hardening, backup, recovery, capacity, and availability standards.
Improve monitoring and centralized logging across networks, servers, cloud resources, applications, and security controls.
Identify monitoring gaps, unhealthy configurations, control failures, capacity concerns, and recurring incidents, and implement or coordinate durable fixes.
Collaborate with vendors and internal teams to improve monitoring, incident escalation, and operational support.
Build productive relationships with technical teams, business partners, vendors, and leadership through an outgoing, enthusiastic, and service-oriented approach.
Communicate risks and technical findings clearly, recommend practical solutions, and follow issues through resolution.
Mentor less-experienced engineers and contribute to clear documentation, repeatable processes, and team development.
Advise leadership on relevant threats, control gaps, technology trends, and priorities across the hybrid environment.
Lead or contribute to cross-functional initiatives that improve network reliability, infrastructure resilience, cloud security, detection capability, and operational maturity.

Benefits

Expected base salary of $130,000–$160,000, plus an annual target bonus.
25% rent discount at an AIR community, subject to rental application requirements and applicable exclusions.
Medical, dental, vision, and life-insurance options.
HSA/FSA plans.
Company-paid short- and long-term disability coverage.
401(k) plan with employer contribution; the detailed offer states a 6% match.
Paid time off, including vacation, sick time, and holidays (the posting lists 11 holidays in one section and 14 in another).
Up to 16 weeks of paid parental leave.
Tuition assistance and up to 100% reimbursement for job-related certifications and licenses.
15 hours of paid time annually for community service.
Commuter benefits.
Pet insurance.
Consumer discounts on products and services.
Professional development, leadership training, and career-growth opportunities.