Senior Infrastructure Security Engineer

AEGIS Insurance Services Inc. has an immediate opening for a Senior Infrastructure Security Engineer responsible for implementing, administering, and supporting security controls embedded in the organization’s on-premises, cloud, and hybrid technology environment. The position works closely with Infrastructure, the Office of the CISO, Network, Application, Database, and End-User Support teams. The role provides senior infrastructure-security expertise while preserving IT ownership of production platforms, availability, configuration, and change execution.

The Office of the CISO establishes security policy, standards, risk priorities, monitoring requirements, and independent oversight; IT assesses, tests, implements, documents, and supports production-impacting changes through established controls.

• Minimum 10 years of increasing levels of responsible experience in systems engineering, infrastructure engineering, security engineering, and/or infrastructure security Microsoft, Azure, infrastructure, or security certifications are desired.
• CISSP or a comparable security certification a plus.
• Demonstrated hands-on experience with Windows Server, Active Directory, Group Policy, DNS, Microsoft Entra , Microsoft 365, Microsoft Intune, and Microsoft Azure.
• Undergraduate degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent work experience.
• Working knowledge of hybrid identity, Conditional Access, multifactor authentication, endpoint security, vulnerability remediation, infrastructure hardening, and network-security controls.
• Highly proficient in Power Shell scripting, automation, technical troubleshooting, documentation, and analytical skills.
• Experience with tools such as Sentinel One, Tanium, Qualys, Zscaler, Okta, and Darktrace is desired.
• Ability to independently manage priorities and collaborate across IT, the Office of the CISO, business stakeholders, vendors, and service providers.
• Availability to work outside of normal business hours as required in order to participate in on-call support and scheduled implementations, maintenance, and remediation.
• Experience responding to high-priority incidents, communicate operational risk, and follow change, incident, access-management, and segregation-of-duties controls.

• Collaborative Communications and Behavior:
  Develops and maintains effective working relationships as a team member and across divisions; readily collaborates and shares information, seeks and provides constructive feedback, and supports a respectful workplace.
• Initiative and Accountability:
  Proactively addresses opportunities to enhance AEGIS’ people, processes, products, and services, takes ownership for one’s responsibilities by acting with integrity and in the best interest of the organization and stakeholders.
• Quality-Focused:
  Demonstrates a solution-focus, displays thoroughness and accuracy through quality deliverables, and demonstrates persistence and perseverance in achieving concrete and tangible outcomes.
• Service-Oriented:
  Conveys a genuine desire and ability to anticipate and meet customer needs and creates and nurtures mutually beneficial relationships within AEGIS and with AEGIS Members and brokers.

• Administer and support Windows Server, Active Directory, Group Policy, DNS, file services, virtualization, and hybrid infrastructure.
• Administer Microsoft Entra , hybrid identity, service accounts, delegation, permissions, identity federation, Conditional Access, MFA, and device-registration controls.
• Administer Microsoft
  365, Microsoft Azure, and Azure Local services and implement approved security configurations.
• Administer Microsoft Intune, Tanium, Sentinel One, endpoint configurations, compliance controls, security agents, and Microsoft
  365 Apps update channels.
• Implement approved workstation, server, identity, endpoint, cloud, and operating-system hardening standards.

• Partner with the Office of the CISO to prioritize vulnerabilities and plan, test, implement, document, and validate remediation.
• Maintain production agents, sensors, integrations, endpoint coverage, and log-source connectivity supporting SIEM and EDR capabilities.
• Coordinate with the Office of the CISO and execute authorized incident containment, remediation, recovery, and…