IT Infrastructure Security Engineer

_______________________________________________________________

DEPARTMENT: IT

REPORTS TO: IT Director

FLSA: Exempt, Salary

Schedule: Monday-Friday, 8am-5pm (In office/Hybrid)

Why You Should Join Us!

A comprehensive health plan that includes medical, dental, and vision coverage to ensure you and your family have access to the care you need
A 401(k)-retirement plan with a generous company match to help you save for your future and achieve your financial goals
Other fringe benefits including Birthday & Anniversary bonus, company-wide discounts, life insurance, Telemedicine access, short & long-term disability, and more!
Positive work environments that offer work/life balance and professional growth
Mission-driven work making a global impact with local roots
The opportunity to have hands on work experience with industry leading, innovative technology

Position Summary

Smart Start is seeking a highly skilled Infrastructure Security Engineer to manage and enhance the security and reliability of our on-premises IT infrastructure. This role focuses on structured patching, vulnerability remediation, and secure configuration practices across production systems. The successful candidate will operate as a bridge between Infrastructure and Information Security, ensuring consistent remediation, system stability, and audit readiness while supporting business-critical operations.

Essential Duties and Responsibilities

Patching & Vulnerability Remediation

Lead patch management efforts for servers and applications, including testing and phased rollouts
Execute vulnerability remediation based on scan results and security guidance
Validate remediation actions to ensure effectiveness and system stability
Maintain patch schedules, maintenance windows, and remediation tracking
Ensure all remediation work is documented with audit-ready evidence

Infrastructure Operations & Reliability

Support and maintain server infrastructure across production environments
Troubleshoot issues resulting from patching or configuration changes
Perform root cause analysis and implement corrective actions
Participate in change management processes to minimize disruption

Security Hardening & Coordination

Implement secure configuration baselines across infrastructure systems
Ensure logging and monitoring are properly configured
Act as liaison between Infrastructure and Security teams
Translate security findings into actionable remediation tasks

Cybersecurity Response (Infrastructure-Focused)

Assist with containment, remediation, and recovery during security incidents
Support evidence collection including logs and system artifacts
Participate in post-incident reviews and corrective actions

Compliance, Audit Readiness & Documentation

Maintain documentation of system configurations and remediation activities
Support closure of audit findings and security assessments
Ensure consistency and repeatability in remediation processes
Participate in on-call rotations and after-hours maintenance
Any other duties assigned by the IT Director

Qualifications

Minimum Requirements

Minimum of 3 years’ experience in systems administration within enterprise environments
Strong experience in Windows Server administration and patch management
Proven experience managing structured patching across production systems
Experience with vulnerability management and remediation workflows
Strong troubleshooting and root cause analysis skills
Experience with ticketing and change management systems
Strong documentation and communication skills
Ability to manage multiple priorities in a fast-paced environment
Strong analytical and problem-solving skills
Ability to work both independently and as part of a team
Must be able to work varying hours and travel when required
Must be able to lift servers, network, and storage equipment up to 50 lbs

Preferred Skills & Certifications

Strong interest in infrastructure security and system hardening, with a proactive approach to reducing risk in production environments
Experience working with security teams to remediate vulnerabilities and implement secure configurations
Hands-on experience with vulnerability scanning and remediation tools (e.g., Nessus, Qualys, Rapid7)
Experience patching and maintaining Linux systems (e.g., Red Hat or similar) in addition to Windows environments
Experience managing and patching systems within enterprise virtualized environments, including coordination of host and guest updates
Scripting experience (PowerShell, Bash, or similar) to automate patching, remediation, and operational tasks
Familiarity with security frameworks and best practices (CIS Benchmarks, NIST, ISO 27001) applied in real environments
Experience supporting audit or compliance efforts, including remediation tracking and evidence collection
Demonstrated ability to balance system stability with security requirements in production systems
Microsoft Certified: Windows Server Hybrid Administrator Associate (or equivalent experience)
CompTIA Security+ or equivalent foundational security certification
Red Hat Certified System Administrator (RHCSA) or similar Linux certification
ITIL Foundation (for change management and operational processes)

Physical Demands & Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers to handle, or feel objects, tools or controls. The employee is occasionally required to stand; walk; sit; reach with hands and arms; climb or balance; and stoop, kneel, crouch, or crawl. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, color vision, peripheral vision, and the ability to adjust focus. The noise level in the work environment is usually moderate.

This job description in no way states or implies that these are the only duties to be performed by the employee(s) incumbent in this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments.

All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities. To perform this job successfully, the incumbents will possess the skills aptitudes and abilities to perform each duty proficiently. Some requirements may exclude individuals who pose a direct threat or significant risk to the health or safety of themselves or others.

The requirements listed in this document are the minimum levels of knowledge, skills or abilities. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship.

Smart Start, Inc.

Latest Jobs

IT Infrastructure Security Engineer