Senior Infrastructure Security Engineer

Aegislink; Jersey City (NJ); On-site; USD 185,000 - 225,000; Full time

Benefits offered by this job

Health & Wellness (medical, dental, 
v

401(k) with matching

Life, disability, accident and illness

Vacation, sick, holidays & family/mil

Commuter benefits

Hybrid work schedule

Tuition assistance

Professional development opportunities

Job summary

AEGIS Insurance Services, Inc. is seeking a Senior Infrastructure Security Engineer to implement and support security controls across on‑premises, cloud, and hybrid environments.

You will work with the Office of the CISO, Network, and App teams to safeguard production platforms while maintaining IT ownership and change controls. Responsibilities include deploying security configurations, automating identity and endpoint processes, and driving vulnerability remediation and incident response.

Qualifications

• Minimum 10 years of increasing levels of responsible experience in systems, infrastructure or security engineering.
• CISSP or comparable security certification is a plus; other Microsoft/Azure certifications are desirable.
• Hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Entra ID, M365, Intune, and Azure.

Responsibilities

• Administer and support Windows Server, Active Directory, Group Policy, DNS, and hybrid infrastructure.
• Manage Entra ID, hybrid identity, MFA, service accounts, and conditional access controls.
• Configure Microsoft 365, Azure services, Intune, and security configurations.
• Develop PowerShell automation for identity, Azure, DNS, endpoints, and remediation.
• Lead vulnerability remediation, incident containment, and change control processes.
• Maintain technical documentation and clear stakeholder communication.
• Monitor service availability and troubleshoot complex issues.

Skills

Infrastructure security

Windows Server

Active Directory

Group Policy

DNS

Microsoft Entra ID

Microsoft 365

Microsoft Intune

Microsoft Azure

PowerShell scripting

Automation

Troubleshooting

Documentation

Analytical skills

SentinelOne

Tanium

Qualys

Zscaler

Okta

Darktrace

Education

Bachelor’s degree in Information Technology / Computer Science / Cybersecurity / Information Systems

Tools

SentinelOne

Tanium

Qualys

Zscaler

Okta

Darktrace

Job description

Senior Infrastructure Security Engineer**Job Description:**AEGIS Insurance Services, Inc. (“AEGIS”) has an immediate opening for a **Senior Infrastructure Security Engineer** responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution.The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.**Job Requirements:*** Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security* Microsoft, Azure, infrastructure, or security certifications are desired; CISSP or a comparable security certification a plus* Demonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure* Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience* Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls* Highly proficient in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills* Experience with tools such as SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired* Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers* Availability to work outside of normal business hours as required in order to participate in on-call support and scheduled implementations, maintenance, and remediation* Experience responding to high-priority incidents, communicate operational risk, and follow change, incident, access-management, and segregation-of-duties controls**AEGIS Core Competencies:*** Collaborative Communications and Behavior: Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace* Initiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders* Quality-Focused: Demonstrates a solution-focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes* Service-Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers**Essential Job Functions:***Systems, Cloud, Identity & Endpoint Administration** Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure* Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controls* Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations* Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels* Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards*Vulnerability Management, Security Operations & Incident Response** Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation* Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities* Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions* Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication*Network Security, Automation & Operational Support** Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes* Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations* Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation* Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues* Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures*Project & Vendor Management** Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers* Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementationswww.aegislink.comEOEAEGIS Insurance Services, Inc. participates in E-VerifyWe expect to pay a starting salary between $185,000 and $225,000. An applicant’s placement within this range is based on their individual qualifications and professional experience. In addition to base salary, AEGIS employees are eligible to participate in the Company’s annual incentive program, with competitive awards based on corporate and individual performance.In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:* Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs* Retirement: 401(k) with matching contribution* Income Protection: Life, disability, accident and critical illness insurance* Time Off: Vacation days, sick days, holidays and family/military leave options* Other: Commuter benefits, pet insurance, hybrid work schedule* Growth: Tuition assistance and professional development opportunitiesIn addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:* Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs* Retirement: 401(k) with matching contribution* Income Protection: Life, disability, accident and critical illness insurance* Time Off: Vacation days, sick days, holidays and family/military leave options* Other: Commuter benefits, pet insurance, hybrid work schedule* Growth: Tuition assistance and professional development opportunitiesWe will consider this application carefully, but it does not guarantee employment. Selection is on a competitive basis. In addition, you must meet employment standards and specific position requirements. Qualified applicants will receive consideration for employment without regard to race, creed, color, sex, sexual orientation, age, marital status, disability, national origin, veteran status or any other legally protected status.