Senior Infrastructure Security Engineer

AEGIS Insurance Services, Inc.; Jersey City (NJ); Presencial; USD 185.000 - 225.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health & Wellness: Medical, dental, v…

401(k) with matching contribution

Life, disability, accident and…

Vacation days, sick days, holidays and

Tuition assistance and professional de

Descripción de la vacante

AEGIS Insurance Services, Inc. is seeking a Senior Infrastructure Security Engineer to implement, administer, and support security controls across on-premises, cloud, and hybrid environments.

You will work with the CISO Office, IT, and vendor teams to strengthen security capabilities and production stability. Responsibilities include managing identity, endpoint security, vulnerability remediation, automation, and secure configurations for Windows Server, Azure, 365, and Intune.

Formación

• Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security.
• Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience
• Demonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls
• Experience with infrastructure automation and scripting to improve security controls
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers

Responsabilidades

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure
• Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controls
• Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations
• Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels
• Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards
• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation
• Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions
• Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication
• Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes
• Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations
• Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation
• Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues
• Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures
• Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers
• Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations

Conocimientos

PowerShell scripting

Automation

Technical troubleshooting

Documentation

Analytical skills

Educación

Bachelor's degree in IT/CS/Cybersecurity/Information Systems

Herramientas

SentinelOne

Tanium

Qualys

Zscaler

Okta

Darktrace

Descripción del empleo

AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a Senior Infrastructure Security Engineer responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution.

The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.

Job Requirements:

• Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security
• Microsoft, Azure, infrastructure, or security certifications are desired; CISSP or a comparable security certification a plus
• Demonstrated hands‑on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure
• Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls
• Highly proficient in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills
• Experience with tools such as SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers
• Availability to work outside of normal business hours as required in order to participate in on‑call support and scheduled implementations, maintenance, and remediation
• Experience responding to high‑priority incidents, communicate operational risk, and follow change, incident, access‑management, and segregation‑of‑duties controls

AEGIS Core Competencies:

• Collaborative Communications and Behavior: Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace
• Initiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders
• Quality‑Focused: Demonstrates a solution‑focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes
• Service‑Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers

Essential Job Functions:

Systems, Cloud, Identity & Endpoint Administration

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure
• Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device‑registration controls
• Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations
• Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels
• Implement approved workstation, server, identity, endpoint, cloud, and operating‑system hardening standards

Vulnerability Management, Security Operations & Incident Response

• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation
• Maintain production agents, sensors, integrations, endpoint coverage, and log‑source connectivity supporting SIEM and EDR capabilities
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions
• Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication

Network Security, Automation & Operational Support

• Administer and support Zscaler, secure web gateway configurations, traffic‑capture infrastructure, security sensors, and approved network‑segmentation changes
• Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations
• Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation
• Monitor service availability, performance, capacity, reliability, security‑agent health, and remediation progress; troubleshoot complex technical issues
• Preserve IT administrative ownership of production platforms and execute production‑impacting changes through established change and incident procedures
• Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers
• Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations

www.aegislink.com

EOE

AEGIS Insurance Services, Inc. participates in E‑Verify

We expect to pay a starting salary between $185,000 and $225,000. An applicant’s placement within this range is based on their individual qualifications and professional experience. In addition to base salary, AEGIS employees are eligible to participate in the Company’s annual incentive program, with competitive awards based on corporate and individual performance.

In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:

• Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs
• Retirement: 401(k) with matching contribution
• Income Protection: Life, disability, accident and critical illness insurance
• Time Off: Vacation days, sick days, holidays and family/military leave options
• Growth: Tuition assistance and professional development opportunities