Senior IT Security and Network Engineer

AIR Communities•Denver, CO

2d•$130,000 - $160,000•Onsite

About The Position

AIR Communities is seeking a hands-on Senior IT Security and Network Engineer to engineer, operate, and protect its hybrid enterprise environment across corporate offices, multifamily properties, on-premises infrastructure, and cloud environments. The role combines network and cybersecurity engineering with practical Microsoft Azure infrastructure and security responsibilities. It is not an Azure application-development or cloud-architecture role. The engineer will investigate security alerts, troubleshoot complex infrastructure and connectivity issues, identify gaps in tooling, architecture, configuration, monitoring, and processes, and implement or coordinate lasting solutions. The role calls for a proactive, accountable, SOC-oriented approach and close collaboration with technical teams, business partners, vendors, and leadership. The position is based at the corporate office in the Denver Tech Center and is expected to work in the office four to five days per week, based on business and team needs.

Requirements

Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent practical experience.
At least 8 years of combined experience across network engineering, infrastructure operations, and cybersecurity, including hands-on support of distributed or hybrid environments.
Strong knowledge of TCP/IP, DNS, DHCP, BGP, OSPF, VLANs, routing, switching, wireless networking, VPNs, firewalls, load balancing, and network segmentation.
Hands-on experience with Cisco Meraki, Palo Alto, Fortinet, or comparable network and security platforms.
Experience supporting Windows or Linux infrastructure, Active Directory, identity services, virtualization, storage, backup, patching, and monitoring.
Practical experience with Microsoft Azure infrastructure and security, including cloud networking, identity, logging, monitoring, configuration governance, or workload protection.
Experience investigating security events and working with one or more of SIEM, EDR/XDR, vulnerability management, CSPM, SSPM, or MDR.
Ability to learn unfamiliar environments, ask effective questions, troubleshoot complex issues, collaborate with appropriate teams, and implement sustainable solutions.
Working knowledge of Zero Trust principles and frameworks such as the NIST Cybersecurity Framework or ISO 27001.
Strong written and verbal communication skills, sound judgment, and a collaborative service mindset.

Nice To Haves

Experience operating or securing Azure subscriptions and landing zones using services such as Azure Policy, Defender for Cloud, Sentinel, Entra ID, Conditional Access, PIM, Key Vault, NSGs, Azure Firewall, private endpoints, or centralized logging.
Experience supporting hybrid connectivity across corporate, property, data-center, and cloud environments.
Experience with an MDR platform.
Experience with PBX/VoIP and distributed property or branch environments.
Familiarity with PowerShell, Azure CLI, Bicep, Terraform, Python, or similar automation used for repeatable administration and control remediation.
Experience with SaaS security, SSPM, cloud-security posture management, identity-threat detection, or attack-surface reduction.
One or more relevant certifications, such as AZ-104, AZ-500, SC-200, CCNP Security, CISSP, CISM, or an equivalent certification.

Responsibilities

Engineer, maintain, and secure network infrastructure across corporate offices, property sites, on-premises environments, and cloud-connected networks.
Configure and support routers, switches, wireless access points, firewalls, load balancers, VPNs, DNS, DHCP, network segmentation, and secure remote connectivity.
Support cloud networking, including virtual networks, subnets, Network Security Groups, route tables, private endpoints, VPN or ExpressRoute connectivity, cloud firewall, Application Gateway, and network monitoring.
Lead or contribute to network upgrades, migrations, troubleshooting, performance optimization, and resiliency improvements.
Maintain high availability, disaster-recovery readiness, secure connectivity, and consistent network standards.
Diagnose complex routing, switching, firewall, wireless, DNS, identity, and hybrid-cloud connectivity issues.
Implement and maintain security controls and operational practices across network, endpoint, identity, server, application, SaaS, and cloud environments.
Monitor, investigate, prioritize, and respond to security incidents, vulnerabilities, anomalous activity, and emerging threats.
Operate and improve security technologies such as firewalls, IDS/IPS, endpoint protection, EDR/XDR, vulnerability-management, SIEM/SOAR, CSPM, SSPM, and MDR platforms.
Use cloud-native security posture, threat-detection, policy, identity and access management, privileged access, secrets-management, and logging tools to identify and remediate cloud security and configuration gaps.
Validate findings, assess risk and business impact, and address gaps in tooling, configuration, logging, monitoring, access, and operational processes.
Tune detections, reduce false positives, improve alert coverage, incorporate threat intelligence, and develop practical countermeasures.
Support risk assessments, vulnerability reviews, penetration-test remediation, compliance reviews, and control validation across infrastructure, applications, containers, and cloud workloads.
Partner with application, data, and business teams to support secure deployments and maintain procedures, investigation records, remediation plans, and audit evidence.
Administer, maintain, and secure physical and virtual infrastructure supporting enterprise operations across on-premises and cloud environments.
Support Windows and Linux servers, Active Directory, identity providers, DNS, DHCP, certificates, file services, virtualization, storage, backup, and identity-related services.
Maintain infrastructure performance, patching, hardening, backup, recovery, capacity, and availability standards.
Improve monitoring and centralized logging across networks, servers, cloud resources, applications, and security controls.
Identify monitoring gaps, unhealthy configurations, control failures, capacity concerns, and recurring incidents, and implement or coordinate durable fixes.
Collaborate with vendors and internal teams to improve monitoring, incident escalation, and operational support.
Communicate risks and technical findings clearly, recommend practical solutions, and follow issues through resolution.
Mentor less-experienced engineers and contribute to documentation, repeatable processes, and team development.
Advise leadership on relevant threats, control gaps, technology trends, and priorities across the hybrid environment.
Lead or contribute to cross-functional initiatives that improve network reliability, infrastructure resilience, cloud security, detection capability, and operational maturity.

Benefits

25% rent discount at an AIR community, subject to rental application requirements and applicable exclusions.
Medical, dental, vision, and life-insurance options; HSA/FSA plans; and company-paid short- and long-term disability coverage.
401(k) plan with employer contribution; the detailed benefits section states a 6% match.
Paid time off, including vacation, sick time, and holidays; the posting lists both 11 and 14 holidays in different sections.
Up to 16 weeks of paid parental leave.
Tuition assistance and up to 100% reimbursement for job-related certifications and licenses.
15 hours of paid time annually for community service.
Commuter benefits and pet insurance.
Consumer discounts on products and services.
Professional development, leadership training, and career-growth opportunities.
Annual target bonus.