Infrastructure and Security Engineer

Progressive Machine & Design Llc; Town of Victor (NY); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

401(k) & Roth

Paid Time Off

Medical Coverage

Health Savings Account

Disability Insurance

Life Insurance

Company-Sponsored Events

Tool Purchase Program

Discount Memberships

Paid Holidays NYS Apprentice Program

Job summary

Progressive Machine & Design, LLC in Victor, NY, is seeking a senior IT – Infrastructure & Security Engineer to lead architecture and security initiatives. You’ll guide enterprise networking, data center, and cloud infra, while advocating security and reliability across platforms.

You will mentor staff, manage complex projects, and participate in after-hours maintenance as needed, with a strong emphasis on compliance and secure configurations.

Qualifications

• 8+ years of progressively responsible experience in enterprise infrastructure, systems engineering, cybersecurity engineering, cloud engineering, or related field.
• Experience designing and implementing complex infrastructure or security solutions.
• Strong enterprise networking knowledge: TCP/IP, switching, routing, VLANs, wireless, firewalls, VPN, segmentation, DNS, DHCP, NAC/802.1X, secure remote access.
• Proven experience with Windows Server, Active Directory, Group Policy, Entra ID/Microsoft 365/Azure, and hybrid identity environments.
• Experience with virtualization, storage/SAN, backup/recovery, monitoring, and disaster recovery.
• Cybersecurity experience: vulnerability management, configuration hardening, logging/SIEM, access control, incident response.
• Ability to mentor staff and lead technical projects without direct supervisory authority.

Responsibilities

• Lead the architecture, engineering, implementation, and modernization of PMD's core infrastructure and security technologies.
• Serve as a senior technical resource for enterprise networking, including switching, routing, wireless, firewalls, VPN, VLANs, NAC/802.1X, and secure remote access.
• Engineer and support server, virtualization, storage, data center, and cloud infrastructure.
• Design and improve backup, recovery, replication, and disaster recovery capabilities.
• Lead cybersecurity architecture and technical controls across infrastructure and cloud identity and endpoints.
• Establish secure configuration standards and system-hardening practices.

Skills

Infrastructure design

Cybersecurity engineering

Enterprise networking

Cloud infrastructure

Technical leadership

Education

Bachelor's degree in Information Technology or related field

Tools

PowerShell

Active Directory

Azure

Microsoft 365

SIEM

Vulnerability management

Job description

Description

Location: Victor, NY
Department: IT Operations
Employment Type: Full-Time, Exempt

Compensation: $110,000 - $130,000/yr

At Progressive Machine & Design, we build more than automation—we build opportunities for talented people to grow, solve challenging problems, and make an impact. We are looking for an IT – Infrastructure & Security Engineer to join our IT Team. This is a senior-level technical role for someone who enjoys designing and improving infrastructure, strengthening cybersecurity, solving complex technical challenges, and helping a growing manufacturing and engineering organization operate securely and efficiently.

You’ll work closely with our IT Operations Manager and Systems Administrator as a senior technical resource, taking the lead on infrastructure architecture, cybersecurity engineering, major technology changes, and complex technical projects.

If you're someone who likes to understand how systems work, thinks ahead about security and reliability, and enjoys having ownership of meaningful technical work, this could be a great opportunity to grow your career at PMD.

What You’ll Do

• Lead the architecture, engineering, implementation, and modernization of PMD's core infrastructure and security technologies.
• Serve as a senior technical resource for enterprise networking, including switching, routing, wireless, firewalls, VPN, VLANs, network segmentation, NAC/802.1X, and secure remote access.
• Engineer and support server, virtualization, storage, data center, and cloud infrastructure.
• Design and improve backup, recovery, replication, and disaster recovery capabilities.
• Lead cybersecurity architecture and technical controls across infrastructure, identity, network, endpoint, cloud, and administrative systems.
• Establish and maintain secure configuration standards, system-hardening practices, and technical baselines.
• Lead technical vulnerability and risk remediation for complex or high-risk findings.
• Serve as a technical lead during significant cybersecurity incidents, including investigation, containment, recovery, and remediation.
• Support PMD's cybersecurity and compliance initiatives, including NIST SP 800-171 and CMMC requirements.
• Lead or serve as the technical owner for major infrastructure and security projects, including network redesigns, platform upgrades, migrations, and security-control implementations.
• Provide technical direction to the Systems Administrator, Service Desk Technicians, vendors, and consultants without direct supervisory responsibility.
• Serve as a senior escalation point for complex infrastructure, network, cloud, identity, security, and business-system issues.
• Develop automation and integrations using PowerShell, APIs, and other tools to improve security, efficiency, monitoring, and consistency.
• Maintain architecture diagrams, technical standards, security documentation, recovery procedures, and other documentation necessary for a well-supported environment.
• Mentor and cross-train IT team members to strengthen technical capabilities and reduce key-person dependency.
• Participate in planned after-hours or weekend maintenance and provide support during significant outages, cybersecurity incidents, or disaster-recovery events when needed.

What We’re Looking For

The ideal candidate is a senior-level infrastructure and security professional who can combine deep technical expertise with sound judgment, strong communication, and a practical approach to solving business problems.

Requirements

Required Qualifications:

• 8+ years of progressively responsible experience in enterprise infrastructure, systems/network engineering, cybersecurity engineering, cloud engineering, or a related technical discipline.
• Demonstrated experience designing and implementing complex infrastructure or security solutions.
• Strong enterprise networking knowledge, including TCP/IP, switching, routing, VLANs, wireless, firewalls, VPN, segmentation, DNS, DHCP, NAC/802.1X, and secure remote access.
• Strong experience with Windows Server, Active Directory, Group Policy, Microsoft Entra ID, Microsoft 365, Azure, and hybrid identity environments.
• Experience with virtualization, server hardware, storage/SAN, backup and recovery, replication, monitoring, and disaster recovery.
• Demonstrated cybersecurity experience involving vulnerability management, configuration hardening, endpoint/EDR controls, logging/SIEM, access control, network security, and incident response.
• Experience with secure configuration standards such as CIS Benchmarks, DISA STIGs, Microsoft security baselines, or comparable guidance.
• Experience leading technical projects and coordinating work across internal teams, vendors, and outside specialists.
• Strong technical documentation and communication skills.
• Ability to mentor technical staff and provide technical direction without direct supervisory authority.
• Ability to balance security, reliability, cost, operational supportability, and business needs.
• Ability and willingness to participate in planned after-hours or weekend maintenance and assist with significant outages, incidents, or recovery events when necessary.

Education:

A Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field is preferred. Equivalent professional experience, technical training, and demonstrated senior-level capability will be considered in lieu of a degree.

Preferred Experience & Certifications:

• Experience in a regulated or security-sensitive environment.
• Familiarity with NIST SP 800-171, CMMC, RMF, or comparable cybersecurity frameworks.
• PowerShell, scripting, or automation experience.
• CISSP, CCSP, SecurityX/CASP+, GIAC, or comparable security certification.
• Cisco CCNA or comparable networking certification.
• Microsoft certifications related to Azure, cybersecurity, identity, Microsoft 365, or cloud security.
• Relevant firewall, virtualization, backup/recovery, cloud, storage, or infrastructure-platform certifications.

Why PMD?

At PMD, you'll be part of a team where technical expertise is valued and your work has a direct impact. We are a growing automation company where employees work alongside experienced professionals and company leadership, collaborate across disciplines, and have opportunities to expand their skills. Our environment encourages creative thinking, innovation, teamwork, and continuous improvement.

We offer a comprehensive benefits package, including:

• 401(k) & Roth Savings Plans
• Paid Time Off
• Medical, Dental & Vision Coverage
• Health Savings Account with Employer Contribution
• Short-Term & Long-Term Disability Insurance
• Life Insurance
• Paid HolidaysNYS Apprentice Program
• Tool Purchase Program
• Discount Memberships
• Company-Sponsored Events

Progressive Machine & Design, LLC
Victor, NY

PMD is an Equal Opportunity Employer and provides reasonable accommodations to qualified individuals with disabilities throughout the application process.