Senior Infrastructure Security Engineer - Hybrid Cloud

AEGIS Insurance Services, Inc.; Jersey City (NJ); On-site; USD 185,000 - 225,000; Full time

Benefits offered by this job

Health & Wellness: Medical, dental, v…

401(k) with matching contribution

Life, disability, accident and…

Vacation days, sick days, holidays and

Tuition assistance and professional de

Job summary

AEGIS Insurance Services, Inc. is seeking a Senior Infrastructure Security Engineer to implement, administer, and support security controls across on-premises, cloud, and hybrid environments.

You will work with the CISO Office, IT, and vendor teams to strengthen security capabilities and production stability. Responsibilities include managing identity, endpoint security, vulnerability remediation, automation, and secure configurations for Windows Server, Azure, 365, and Intune.

Qualifications

• Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security.
• Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience
• Demonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra ID, Microsoft 365, Microsoft Intune, and Microsoft Azure
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls
• Experience with infrastructure automation and scripting to improve security controls
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers

Responsibilities

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure
• Administer Microsoft Entra ID, hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controls
• Administer Microsoft 365, Microsoft Azure, and Azure Local services and implement approved security configurations
• Administer Microsoft Intune, Tanium, SentinelOne, endpoint configurations, compliance controls, security agents, and Microsoft 365 Apps update channels
• Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards
• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation
• Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and restoration actions
• Maintain technical documentation, operating procedures, remediation evidence, configuration standards, and clear stakeholder communication
• Administer and support Zscaler, secure web gateway configurations, traffic-capture infrastructure, security sensors, and approved network-segmentation changes
• Develop and maintain PowerShell automation for identity, Azure, Microsoft 365, DNS, endpoints, remediation, reporting, and infrastructure operations
• Own production service accounts, credentials, scheduled tasks, monitoring, support, and change control for operational automation
• Monitor service availability, performance, capacity, reliability, security-agent health, and remediation progress; troubleshoot complex technical issues
• Preserve IT administrative ownership of production platforms and execute production-impacting changes through established change and incident procedures
• Coordinate implementation and operational activities with technology vendors, consultants, and managed service providers
• Support infrastructure lifecycle management, cloud and virtualization migrations, platform modernization, office buildouts, and technology implementations

Skills

PowerShell scripting

Automation

Technical troubleshooting

Documentation

Analytical skills

Education

Bachelor's degree in IT/CS/Cybersecurity/Information Systems

Tools

SentinelOne

Tanium

Qualys

Zscaler

Okta

Darktrace

Job description

AEGIS Insurance Services, Inc. is seeking a Senior Infrastructure Security Engineer to implement, administer, and support security controls across on-premises, cloud, and hybrid environments.

You will work with the CISO Office, IT, and vendor teams to strengthen security capabilities and production stability. Responsibilities include managing identity, endpoint security, vulnerability remediation, automation, and secure configurations for Windows Server, Azure, 365, and Intune.