Senior Identity & Infrastructure Security Engineer

Cybersecurity Jobs; Bloomingdale (IL); On-site; USD 151,000 - 197,000; Full time

Job summary

NOW Health Group INC. is seeking a Senior Infrastructure Security Engineer to harden on-premises Windows and Active Directory environments and the Microsoft 365 tenant.

The role is on site in Bloomingdale, IL, focusing on practical security hardening, identity security improvements, and resilience planning with IT Security, networking, and IT partners. You will drive patching, vulnerability remediation, and DR preparedness, while implementing Conditional Access, MFA, and least-privilege controls

Qualifications

• 5+ years in Systems Administration, Infrastructure Engineering, or Security Engineering.

Responsibilities

• Implement and maintain secure configurations across Windows Server, Active Directory, and Microsoft 365 using CIS benchmarks and best practices.
• Conduct regular security posture assessments and remediate gaps.
• Lead initiatives including Tier 0/1/2 administration model and removal of insecure protocols.
• Drive LAPS implementation and privileged credential protection.
• Perform AD hygiene and security reviews, including privileged group membership audits, AD ACL and delegation reviews, service account inventory, and cleanup of stale objects.
• Support PAM and least privilege models.
• Design and maintain Conditional Access policies and MFA enforcement.
• Improve tenant posture through Secure Score optimization, identity protection and sign-in risk policies.
• Manage and audit app registrations, enterprise apps, and OAuth permissions, including guest access and external collaboration settings.
• Support configuration and tuning of Microsoft Purview DLP and information protection controls.

Skills

Active Directory

Microsoft 365 / Entra ID security

Windows Server administration

Windows Operating Systems

CIS Benchmarks

DISA STIGs

SIEM/logging

Defender suite

Intune

PAM/PIM/JIT

PowerShell

VMware

Hyper-V

Education

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field

Tools

VMware

Hyper-V

PowerShell

Microsoft Defender for Endpoint

Intune

Job description

NOW Health Group INC. is seeking a Senior Infrastructure Security Engineer to harden on-premises Windows and Active Directory environments and the Microsoft 365 tenant.

The role is on site in Bloomingdale, IL, focusing on practical security hardening, identity security improvements, and resilience planning with IT Security, networking, and IT partners. You will drive patching, vulnerability remediation, and DR preparedness, while implementing Conditional Access, MFA, and least-privilege controls