Senior Infrastructure Security Engineer
AISI AEGIS Insurance Services, Inc.
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
AEGIS Insurance Services, Inc. seeks a Senior Infrastructure Security Engineer to implement, administer, and support security controls across on-premises, cloud, and hybrid environments.
You will work with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams to safeguard production platforms. The role requires 10+ years in infrastructure/security roles, strong PowerShell/automation skills, and hands-on experience with Windows, Azure, and identity
Qualifications
- Minimum 10 years of increasing levels of experience in systems, infrastructure or security engineering.
- CISSP or comparable security certification is a plus.
- Hands-on experience with Windows Server, AD, DNS, Entra ID, M365 and Azure.
- Bachelor’s degree or equivalent related work experience.
- Knowledge of hybrid identity, Conditional Access, MFA, endpoint security and network-security controls.
- Proficient in PowerShell scripting and automation.
- Experience with SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace.
- Ability to manage priorities and collaborate with IT, CISO, vendors and stakeholders.
- Capable of on-call support and outside-hours work when required.
- Experience responding to high-priority incidents and documenting actions.
Responsibilities
- Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure.
- Manage Microsoft Entra ID, hybrid identity, CA, MFA and device-registration controls.
- Administer Microsoft 365, Azure, and implement security configurations.
- Administer Intune, Tanium, SentinelOne, endpoint configurations and security agents.
- Implement workstation, server and operating-system hardening standards.
- Coordinate vulnerability remediation with the Office of the CISO.
- Maintain SIEM/EDR coverage, log-source connectivity, and incident response readiness.
- Develop PowerShell automation for identity, Azure, DNS, endpoints and reporting.
- Own production service accounts, credentials and change control for automation.
- Monitor service availability, troubleshoot complex issues, and communicate progress.
- Preserve IT ownership of production platforms and changes through established processes.
Skills
Education
Tools
Job description
AEGIS Insurance Services Inc. has an immediate opening for a Senior Infrastructure Security Engineer responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution. The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.
- Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security Microsoft, Azure, infrastructure, or security certifications are desired.
- CISSP or a comparable security certification a plus.
- Demonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure.
- Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience.
- Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls.
- Highly proficient in PowerShell scripting, automation, technical troubleshooting, documentation, and analytical skills.
- Experience with tools such as SentinelOne, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired.
- Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers.
- Availability to work outside of normal business hours as required in order to participate in on-call support and scheduled implementations, maintenance, and remediation.
- Experience responding to high-priority incidents, communicate operational risk, and follow change, incident, access-management, and segregation-of-duties controls.
- Collaborative Communications and Behavior: Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace.
- Initiative and Accountability: Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders.
- Quality-Focused: Demonstrates a solution-focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes.
- Service-Oriented: Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers.
- Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure.
- Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controls.
- Administer Microsoft365, Microsoft Azure, and Azure Local services and implement approved security configurations.
- Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft365 Apps update channels.
- Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards.
- Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation.
- Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities.
- Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions.
- Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication.
- Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes.
- Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations.
- Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation.
- Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues.
- Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures.
- Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers.
- Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations.
www.aegislink.com
AEGIS Insurance Services, Inc. participates in E-Verify.
We expect to pay a starting salary between $185,000 and $225,000. An applicant’s placement within this range is based on their individual qualifications and professional experience.
In addition, we offer a comprehensive and competitive suite of options for health & wellness, retirement, income protection, time off and additional benefits:
- Health & Wellness: Medical, dental, vision, mental health support and employee assistance programs.
- Retirement: 401(k) with matching contribution.
- Income Protection: Life, disability, accident and critical illness insurance.
- Time Off: Vacation days, sick days, holidays and family/military leave options.
- Other: Commuter benefits, pet insurance, hybrid work schedule.
- Growth: Tuition assistance and professional development opportunities.
Qualified applicants will receive consideration for employment without regard to race, creed, color, sex, sexual orientation, age, marital status, disability, national origin, veteran status or any other legally protected status. AEGIS Insurance Services, Inc. participates in E-Verify.
Our Accounting Division is the financial core of AEGIS, ensuring every transaction is accurately recorded, reported and monitored. Their precision enables our organization to maintain a strong financial foundation and make informed, strategic choices.
The Actuarial Division plays a critical role in assessing and pricing risk, essential to our mission of protecting members. By applying advanced mathematical and statistical models, our actuaries and analysts help guide strategic planning and develop effective risk management solutions.
The Business Analytics Division supports the enterprise-wide analytics strategy, enabling data-informed decision-making across key business functions through the use of internal and external data. The team helps support business initiatives, enhance reporting consistency, and improve operational efficiency.
AEGIS members consistently describe our Claims Division as fair, responsive and collaborative. We work closely with members, brokers and legal counsel to resolve claims efficiently. From litigation support to industry-wide claims insights, we help mitigate risk, control costs and strengthen long-term stability.
Our employees are our greatest asset. The Human Resources Division manages AEGIS’ most valuable resource — its people. From benefits and professional development to culture and support, HR ensures every team member has what they need to thrive and deliver exceptional service to our members.
In a constantly evolving digital world, our IT Division ensures AEGIS stays ahead. From enhancing communication and securing data to streamlining operations and supporting informed decision-making, IT provides enterprise-wide solutions tailored to the dynamic needs of each division — driving efficiency, agility, and security across the organization.
The Internal Audit Division delivers independent, objective assurance to improve AEGIS’ operations and internal controls. Through a systematic, disciplined approach, this team evaluates risk management, control processes and governance practices — enhancing transparency and ensuring accountability throughout the organization.
AEGIS's long-term financial strength is rooted in the work of our Investment Division. This expert team manages and monitors the investment portfolios of both AEGIS and AEGIS London, ensuring liquidity, managing risk and building strong banking relationships. Their disciplined approach earns us consistent high ratings from credit agencies — a reflection of our financial resilience.
Our Legal Division is staffed by attorneys with deep expertise in the insurance and energy sectors. They provide timely, practical legal support to AEGIS and its affiliates — helping ensure compliance, manage risk and support business objectives with clarity and confidence.
The Loss Control Division partners with members to reduce risk across the utility industry. Through site visits, risk assessments, training, webinars and publications, their team delivers a full suite of services unmatched by commercial insurers. They turn decades of experience into safer, smarter outcomes — for everyone.
Our Marketing & Communications Division shapes how AEGIS connects with members and the broader industry. From our website and annual review to member emails, our policyholders’ conference and cross-division projects, this team ensures our message is consistent, impactful and aligned with our mission.
The Operations Division is the backbone of our day-to-day success. From managing facilities and supplies to supporting every department’s logistical needs, they ensure our internal systems function smoothly so our teams can focus on serving our members.
Our Underwriting Division evaluates each risk on its own merit, leveraging detailed financial and claims data to offer fair, customized coverage. With deep expertise in the utility industry and a commitment to equity and stability, our underwriters help preserve long-term capacity — reinforcing AEGIS’ reputation as a market leader.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
