IT Infrastructure & Security Lead

Department: Information Technology

Location: Charlotte, NC

Compensation: $110,076 - $121,084 / year

Schedule: Full-time;
Exempt

Travel: Candidate will primarily work remote and have the opportunity to work in-office at manager's discretion or as needed for team cohesion

The Right Work. The Right People. The Right Culture.

Right of Way is where infrastructure meets innovation—shaping roads, utilities, and communities for the future. At ORC, we offer more than a job—we offer purpose, stability, and growth. You’ll join a team that values collaboration, workplace flexibility, and long-term opportunity.

ORC is growing, and our technology function is growing with it. We are looking for a hands‑on IT Infrastructure & Security Lead to own our security and compliance program, strengthen the reliability of our core infrastructure, and set the security and governance standards that support a growing firm.

This role reports directly to our CIO and sits at the center of some of our most important work, including our SOC 2 certification, access governance, and the systems that keep a national workforce connected and secure. You will work closely with leaders across the firm to make security practical and part of how we operate.

This is a role for someone who has been in the trenches as a systems administrator, has led people or technical programs, and wants to shape how an IT function operates as it scales. For the right person, there is a real path into broader IT leadership as the function grows.

• Own the security and compliance program
  • Serve as the day-to-day owner of our SOC 2 program, including control design, evidence collection, policy maintenance, and auditor coordination
  • Manage our compliance tooling and keep controls operating consistently throughout audit observation periods
  • Lead risk assessments and vendor security reviews
  • Translate security and compliance requirements into clear, practical expectations for technical and non-technical audiences
• Govern access across the organization
  • Define and maintain access policies, including least privilege, privileged access, and onboarding and offboarding standards
  • Run regular access reviews across critical systems and drive remediation
  • Oversee identity and credential management practices, including MFA and credential vaulting
• Strengthen infrastructure and resilience
  • Lead infrastructure architecture and engineering across our Microsoft 365, Entra , endpoint, server, and network environments, staying hands‑on during projects, incidents, and remediation
  • Own backup, recovery, and business continuity testing
  • Improve monitoring, logging, alerting, and incident response
  • Document systems, configurations, and runbooks so knowledge is shared and resilient
• Bring discipline to how change happens
  • Establish change management standards for infrastructure changes, scripts, and automations
  • Define testing, approval, and rollback expectations so changes are reliable and well documented
• Partner across the business
  • Build security awareness and practical guidance for employees across the firm
  • Share security and systems expertise through training, documentation, and coaching
  • Report on security posture and program progress to the CIO and executive leadership
  • Provide input and collaborate across project management initiatives related to other functions

• Is organized, analytical, and detail-oriented
• Troubleshoots methodically and follows problems to the root cause
• Communicates technical concepts clearly to non-technical teammates
• Works efficiently under tight deadlines and keeps multiple priorities moving
• Documents work so others can build on it
• Picks up new systems and software quickly

• 6+ years of IT experience,…