Infrastructure Engineer - Security

Description

NOTE TO APPLICANTS: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future

Milliman Global Corporate Services (GCS) is seeking an experienced Infrastructure Engineer to join a team of engineers. This role is responsible for the engineering, administration, maintenance, and continuous improvement of Milliman's infrastructure platforms that protect and enable Milliman's enterprise environment. This includes network technology such as firewalls, remote access solutions, identity-related infrastructure, and cloud-connected services. The role partners closely with Security, Cloud, and Infrastructure teams to deliver secure, reliable, and scalable technology services.

This role reports to the GCS IT Manager of Infrastructure.

• Infrastructure Engineering: Provide guidance and implement system changes within Milliman's data centers, network architecture, and enterprise platforms.
• Infrastructure Monitoring: Monitor infrastructure and network systems and the environment for misconfigurations, using existing tools and operational processes to improve system visibility, support timely remediation, and elevate concerns to appropriate teams.
• Firewall Administration: With guidance from the Security team, administer and optimize firewall systems, web gateways, segmentation tools, and remote access technologies; manage and troubleshoot rule sets, ACLs, policy changes, and continuously improve network security controls as guided by Security.
• Support Remote Access & Zero Trust: With guidance form the Security team, implement and administer secure remote access systems, VPN options, and Zero Trust Network Access (ZTNA) capabilities that enforce least‑privilege access based on user roles and business needs.
• Vulnerability & Configuration Management: Implement vulnerability remediation, system hardening, and secure configuration baselines for operating systems, virtual machines, network devices, and other infrastructure components.
• Stakeholder Partnership: Collaborate with the greater GCS IT team, GCS IS team, practice IT teams and application owners to provide guidance and deliver secure‑by‑default system patterns without blocking delivery.
• Compliance, Risk & Documentation: Support Security and Compliance teams by maintaining infrastructure systems, assisting with audit evidence gatherings, participating in control validation and risk assessments, addressing remediation items, and maintaining infrastructure documentation related to how systems adhere to security standards, defined system configurations, and operational procedures.

• The ideal candidate must have 5+ years of experience in network infrastructure, systems engineering, or a related role with a security focus.
• The ideal candidate must have 3+ years of hands‑on experience securing enterprise infrastructure, including servers, data centers, firewalls, network controls, identity systems, and cloud‑connected environments.
• The ideal candidate must have previous experience with proxy technologies, VPN options, secure remote access, and Zero Trust Network Access (ZTNA) solutions.
• The ideal candidate must have previous experience implementing, administering, troubleshooting, and optimizing firewall ACLs, access control solutions, and network proxy platforms.
• The ideal candidate must have previous experience with vulnerability management and remediation processes for Windows and/or Linux operating systems.
• Must have working knowledge of identity and access management principles, including least privilege, MFA, privileged access controls, and role‑based access.
• Must have strong analytical,…