IT Infrastructure Security Engineer

IT Infrastructure Security Engineer

_______________________________________________________________

DEPARTMENT: IT

REPORTS TO: IT Director

FLSA: Exempt, Salary 

Schedule: Monday-Friday, 8am-5pm (In office/Hybrid)

Note: We do not provide employment-based visa sponsorship or transfers for any position

Why You Should Join Us!

• A comprehensive health plan that includes medical, dental, and vision coverage to ensure you and your family have access to the care you need
• A 401(k)-retirement plan with a generous company match to help you save for your future and achieve your financial goals
• Other fringe benefits including Birthday & Anniversary bonus, company-wide discounts, life insurance, Telemedicine access, short & long-term disability, and more!
• Positive work environments that offer work/life balance and professional growth
• Mission-driven work making a global impact with local roots
• The opportunity to have hands on work experience with industry leading, innovative technology

Position Summary 

Smart Start is seeking a highly skilled Infrastructure Security Engineer to manage and enhance the security and reliability of our on-premises IT infrastructure. This role focuses on structured patching, vulnerability remediation, and secure configuration practices across production systems. The successful candidate will operate as a bridge between Infrastructure and Information Security, ensuring consistent remediation, system stability, and audit readiness while supporting business-critical operations.

Essential Duties and Responsibilities

Patching & Vulnerability Remediation

• Lead patch management efforts for servers and applications, including testing and phased rollouts
• Execute vulnerability remediation based on scan results and security guidance
• Validate remediation actions to ensure effectiveness and system stability
• Maintain patch schedules, maintenance windows, and remediation tracking
• Ensure all remediation work is documented with audit-ready evidence

Infrastructure Operations & Reliability

• Support and maintain server infrastructure across production environments
• Troubleshoot issues resulting from patching or configuration changes
• Perform root cause analysis and implement corrective actions
• Participate in change management processes to minimize disruption

Security Hardening & Coordination

• Implement secure configuration baselines across infrastructure systems
• Ensure logging and monitoring are properly configured
• Act as liaison between Infrastructure and Security teams
• Translate security findings into actionable remediation tasks

Cybersecurity Response (Infrastructure-Focused)

• Assist with containment, remediation, and recovery during security incidents
• Support evidence collection including logs and system artifacts
• Participate in post-incident reviews and corrective actions

Compliance, Audit Readiness & Documentation

• Maintain documentation of system configurations and remediation activities
• Support closure of audit findings and security assessments
• Ensure consistency and repeatability in remediation processes
• Participate in on-call rotations and after-hours maintenance
• Any other duties assigned by the IT Director

Qualifications

Minimum Requirements

• Minimum of 3 years’ experience in systems administration within enterprise environments
• Strong experience in Windows Server administration and patch management
• Proven experience managing structured patching across production systems
• Experience with vulnerability management and remediation workflows
• Strong troubleshooting and root cause analysis skills
• Experience with ticketing and change management systems
• Strong documentation and communication skills
• Ability to manage multiple priorities in a fast-paced environment
• Strong analytical and problem-solving skills
• Ability to work both independently and as part of a team
• Must be able to work varying hours and travel when required
• Must be able to lift servers, network, and storage equipment up to 50 lbs

Preferred Skills & Certifications

• Strong interest in infrastructure security and system hardening, with a proactive approach to reducing risk in production environments
• Experience working with security teams to remediate vulnerabilities and implement secure configurations
• Hands-on experience with vulnerability scanning and remediation tools (e.g., Nessus, Qualys, Rapid7)
• Experience patching and maintaining Linux systems (e.g., Red Hat or similar) in addition to Windows environments
• Experience managing and patching systems within enterprise virtualized environments, including coordination of host and guest updates
• Scripting experience (PowerShell, Bash, or similar) to automate patching, remediation, and operational tasks
• Familiarity with security frameworks and best practices (CIS Benchmarks, NIST, ISO 27001) applied in real environments
• Experience supporting audit or compliance efforts, including remediation tracking and evidence collection
• Demonstrated ability to balance system stability with security requirements in production systems
• Microsoft Certified: Windows Server Hybrid Administrator Associate (or equivalent experience)
• CompTIA Security or equivalent foundational security certification
• Red Hat Certified System Administrator (RHCSA) or similar Linux certification
• ITIL Foundation (for change management and operational processes)

Physical Demands & Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers to handle, or feel objects, tools or controls. The employee is occasionally required to stand; walk; sit; reach with hands and arms; climb or balance; and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, color vision, peripheral vision, and the ability to adjust focus. The noise level in the work environment is usually moderate.

This job description in no way states or implies that these are the only duties to be performed by the employee(s) incumbent in this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments.

All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbents will possess the skills aptitudes and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others.

The requirements listed in this document are the minimum levels of knowledge, skills or abilities. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship.

#LI-Hybrid