Senior Infrastructure Security Engineer

Aegis; Jersey City (NJ); Hybrid; USD 185,000 - 225,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement plan

Hybrid work schedule

Paid time off

Job summary

AEGIS Insurance Services, Inc. seeks a Senior Infrastructure Security Engineer to implement and support security controls across on‑premises, cloud, and hybrid environments.

You will collaborate with IT, the Office of the CISO, and vendors to manage identity, endpoint protection, and incident response while maintaining production platform ownership.

Qualifications

• 10+ years of increasing responsibility in systems/infra/security roles.
• Undergraduate degree or equivalent work experience in IT related field.
• Hybrid identity, Conditional Access, MFA, endpoint security, remediation and hardening experience.

Responsibilities

• Administer and secure Windows Server, AD, DNS, and hybrid infrastructure.
• Manage Entra ID, CA, MFA, and device-registration controls.
• Configure Microsoft 365/Azure services and Intune deployments.
• Develop PowerShell automation for identity, cloud and endpoints.
• Lead vulnerability remediation and incident response with the CISO office.

Skills

Security engineering

Cloud infrastructure

PowerShell scripting

Incident response

Hybrid identity

Team collaboration

On-call support

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

SentinelOne

Tanium

Qualys

Zscaler

Okta

Darktrace

Job description

AEGIS Insurance Services Inc. has an immediate opening for:

Senior Infrastructure Security Engineer

Job Description

AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a Senior Infrastructure Security Engineer responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution.

The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.

Job Requirements

• Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security
• Microsoft, Azure, infrastructure, or security certifications are desired; CISSP or a comparable security certification a plus
• Demonstrated hands‑on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure
• Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network‑security controls
• Highly proficient in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills
• Experience with tools such as SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers
• Availability to work outside of normal business hours as required in order to participate in on‑call support and scheduled implementations, maintenance, and remediation
• Experience responding to high‑priority incidents, communicate operational risk, and follow change, incident, access‑management, and segregation‑of‑duties controls

AEGIS Core Competencies

• Collaborative Communications and Behavior: Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace

• Initiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders

• Quality‑Focused: Demonstrates a solution‑focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes

• Service‑Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers

Essential Job Functions

Systems, Cloud, Identity & Endpoint Administration

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure
• Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device‑registration controls
• Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations
• Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels
• Implement approved workstation, server, identity, endpoint, cloud, and operating‑system hardening standards

Vulnerability Management, Security Operations & Incident Response

• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation
• Maintain production agents, sensors, integrations, endpoint coverage, and log‑source connectivity supporting SIEM and EDR capabilities
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions
• Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication

Network Security, Automation & Operational Support

• Administer and support Zscaler, secure web gateway configurations, traffic‑capture infrastructure, security sensors, and approved network‑segmentation changes
• Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations
• Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation
• Monitor service availability, performance, capacity, reliability, security‑agent health, and remediation progress; troubleshoot complex technical issues
• Preserve IT administrative ownership of production platforms and execute production‑impacting changes through established change and incident procedures

Project & Vendor Management

• Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers
• Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations

www.aegislink.com

EOE

AEGIS Insurance Services, Inc. participates in E-Verify

We expect to pay a starting salary between $185,000 and $225,000. An applicant’s placement within this range is based on their individual qualifications and professional experience. In addition to base salary, AEGIS employees are eligible to participate in the Company’s annual incentive program, with competitive awards based on corporate and individual performance.

In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:

• Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs
• Retirement: 401(k) with matching contribution
• Income Protection: Life, disability, accident and critical illness insurance
• Time Off: Vacation days, sick days, holidays and family/military leave options
• Other: Commuter benefits, pet insurance, hybrid work schedule
• Growth: Tuition assistance and professional development opportunities

In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:

• Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs

• Retirement: 401(k) with matching contribution

• Income Protection: Life, disability, accident and critical illness insurance

• Time Off: Vacation days, sick days, holidays and family/military leave options

• Other: Commuter benefits, pet insurance, hybrid work schedule

• Growth: Tuition assistance and professional development opportunities

Qualified applicants will receive consideration for employment without regard to race, creed, color, sex, sexual orientation, age, marital status, disability, national origin, veteran status or any other legally protected status.

AEGIS Insurance Services, Inc. participates in E-Verify.