IT Infrastructure Compliance Engineer

GraceMark Solutions; Santa Clara (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

GraceMark Solutions is seeking an IT Infrastructure Compliance Engineer to lead audits of infrastructure, security controls, and third-party integrations across a global tech ecosystem.

The role requires 8+ years in IT audit/security and hands-on experience with Windows/Unix, virtualization, IAM, and cloud security (AWS/Azure). Strong communication and travel readiness are essential.

Qualifications

• Bachelor's degree in a technical field or equivalent experience.
• 8+ years of IT Audit/IT Security/IT Infrastructure or Technology Risk Management.
• Hands-on infrastructure expertise including Windows/Unix server administration, virtualization, and storage systems.
• Strong network audit expertise and familiarity with cloud security (AWS/Azure) and IAM.

Responsibilities

• Plan, lead, and execute IT and security audits covering infrastructure, apps, and B2B integrations.
• Evaluate IT risk and security posture of external partners and regulatory controls.
• Coordinate with regional stakeholders and cross-functional IT teams; manage escalations with vendors.
• Draft clear audit reports and track remediation efforts to close gaps.

Skills

IT Audit

IT Security

Infrastructure

IAM

Cloud security

Communication

Travel readiness

Education

Bachelor's degree in MIS/CS/Cybersecurity

Tools

AWS

Azure

SQL

Python

Tableau/Power BI

Windows Server

Unix/Linux

Virtualization

Job description

The client is seeking a highly skilled IT Infrastructure Compliance Engineer to join a fast-paced enterprise technology organization. This role is ideal for a strong infrastructure engineer who can evaluate the security, compliance, and operational resilience of interconnected systems linking internal operations to external partners. The position plays a critical role in safeguarding infrastructure, data integrity, and third‑party integrations across a complex, global technology ecosystem. This is an urgent, immediate need — candidates should be prepared to start as soon as possible.

Key Responsibilities

• Plan, lead, and execute IT and security audits covering infrastructure, enterprise applications (including MES, PLM, and ERP/SAP), and supply chain B2B integrations.
• Evaluate the IT risk and security posture of external partners, assessing compliance with security standards, data protection protocols, and intellectual property safeguards.
• Serve as a primary on-site IT point of contact for regional stakeholders, coordinating with remote and global IT teams across networking, storage, and application domains; manage urgent escalations with third-party IT vendors on connectivity, servers, and production systems.
• Audit network segmentation, access controls, APIs, and data transmission protocols supporting automated data exchange between internal systems and external facilities.
• Evaluate IT environments against industry frameworks (e.g., ISO 27001, SOX) to ensure data privacy, financial integrity, and regulatory compliance.
• Assess the accuracy and completeness of operational data and metrics flowing from partner systems into internal data warehouses, using data analytics tools to identify anomalies or control gaps.
• Draft clear, actionable audit reports for leadership and track remediation efforts to ensure identified risks are effectively resolved.

Required Qualifications

• Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).
• 8+ years of experience in IT Audit, IT Security, IT Infrastructure, or Technology Risk Management.
• Strong hands‑on infrastructure expertise, including Windows/Unix server administration, virtualization, and enterprise storage systems.
• Solid network audit expertise, including TCP/IP routing, firewall policy configuration, and core protocols (DNS, DHCP, HTTPS, SSH) to independently verify system security and compliance controls.
• Familiarity with cloud security (AWS/Azure) and identity and access management (IAM).
• Exceptional verbal and written communication skills, with the ability to translate complex technical risk into terms both technical and non‑technical stakeholders can act on.
• Ability to travel domestically and internationally (up to 15–20%) to support on‑site partner assessments as needed.

Preferred Qualifications

• Experience in IT audit, security, or risk management within high‑tech or manufacturing environments.
• Domain knowledge of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).
• Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES).
• Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional).
• Hands‑on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.
• Experience auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.
• Proven ability to drive and coordinate third‑party IT teams remotely; energetic, proactive, and comfortable communicating with both IT and non‑IT personnel.

Tools & Technologies

• Manufacturing Execution Systems (MES) and Product Lifecycle Management (PLM) platforms
• Identity and Access Management (IAM) tools
• SQL, Python, Tableau, Power BI
• Networking protocols: TCP/IP, DNS, DHCP, HTTPS, SSH