Who We AreAt
City Barbeque, we're more than just great food-we're a tech-enabled hospitality brand with over 75 locations and growing. As we scale our operations and open new restaurants, we're investing heavily in building a modern, secure, and high-performing technology infrastructure that supports both our teams and our guests.
We're looking for an
Infrastructure & Security Engineer to design, operate, and support the systems that power our operations. This includes full ownership of
network, internet, VPN, security, and identity infrastructure across restaurant locations, corporate offices, and cloud environments.
What You'll DoCore Infrastructure & Cloud- Design, deploy, and optimize our hybrid infrastructure (Azure + on-prem) supporting restaurant tech and corporate systems.
- Manage Microsoft Azure resources: VNets, Azure AD, NSGs, backups, conditional access, and DR policies.
- Administer and maintain Microsoft Intune for mobile device management (MDM), endpoint compliance, app deployment, and configuration policies.
- Oversee technology setup and lifecycle for back-of-house systems (POS, KDS, handheld devices).
- Ensure reliable site internet connectivity, working directly with ISPs and internal stakeholders.
Network Architecture & Operations- Own and support all networking infrastructure-routers, switches, firewalls, and access points across all City Barbeque locations.
- Design, configure, and manage VPN tunnels, both for site-to-site and secure remote access.
- Maintain secure network segmentation (e.g., guest vs. corporate) and enforce least privilege access.
- Monitor and support internet connectivity and uptime across all locations, with proactive issue resolution and vendor coordination.
Cybersecurity Leadership- Operate and improve all security platforms including SIEM, XDR/EDR, endpoint protection, and email security.
- Lead PCI DSS certification and compliance, including gap analysis, remediation, documentation, and audit response.
- Manage patching, vulnerability management, and incident response practices across endpoints and infrastructure.
- Use Microsoft Intune to enforce device compliance policies and secure mobile and desktop endpoints.
Email, Identity & Access Security- Administer Microsoft 365 and Exchange environments with strong controls for phishing protection (SPF, DKIM, DMARC), DLP, and secure authentication.
- Configure and manage Single Sign-On (SSO) and identity federation for both cloud and on-prem applications using Azure AD.
- Implement and maintain MFA, conditional access policies, and SSO security baselines across SaaS platforms and internal systems.
- Support centralized authentication workflows to reduce friction for end users while enhancing overall security posture.
Documentation, Support & Collaboration- Maintain clear and complete documentation of all network, internet, VPN, and security systems.
- Serve as a technical mentor and subject matter expert (SME) for IT teammates and business stakeholders.
- Collaborate with Operations, Finance, and Restaurant teams to ensure secure and scalable technology across the enterprise.
Strategic & Thought Leadership- Bring a proactive, forward-thinking mindset to infrastructure and security strategy-anticipating risks, proposing improvements, and identifying opportunities for automation and modernization.
- Stay current with evolving technologies, cybersecurity threats, and compliance requirements, bringing fresh ideas into City Barbeque's environment.
- Advocate for best practices in system architecture, secure access, cloud optimization, and business continuity.
- Help shape long-term infrastructure roadmaps and provide architectural guidance to leadership and project teams.
What You Bring- 7+ years of experience managing enterprise infrastructure and cybersecurity, ideally in multi-unit restaurant or retail environments
- Expertise in:
- Microsoft Azure (Azure AD, VNets, conditional access, NSGs)
- Microsoft Intune for endpoint management and compliance
- Enterprise SSO architecture and federated identity systems using Azure AD
- Enterprise network design (Fortinet/Meraki, VLANs, SD-WAN, VPN)
- Internet service delivery and network monitoring tools
- SIEM/XDR, endpoint protection, and email security
- Hands-on experience leading PCI DSS certification and audits
- Demonstrated ability to influence strategy, lead initiatives, and drive scalable improvements
Preferred Certifications- CISSP, Security+, Microsoft Certified: Azure Administrator or Security Engineer
- Microsoft Certified: Modern Desktop Administrator Associate (Intune)
- PCI Professional (PCIP)
- Cisco Meraki Solutions Specialist Certification (CMSS)
Why Join City Barbeque?- Shape the future of tech infrastructure at a fast-growing hospitality brand
- Lead hands-on systems that directly support our guest and team experience
- Collaborate across tech, ops, and leadership in a supportive, growth-minded culture
- Enjoy flexibility, autonomy, and the ability to make a real impact
- Be a part of one of the fastest growing and coolest concepts in America.