Infrastructure and Security Architect

The job

This is a hands-on architecture role, not a management one. You design client infrastructure and then stay close while it gets built. You architect Microsoft 365 and Azure environments (identity, security, and governance included) and you run security assessments that end in remediation plans a business owner can actually act on. When something goes wrong at a client, you are the escalation the engineers reach for.

You will work alongside our senior technical leadership on the largest designs and the most complex compliance engagements, with room to take on more of both as you prove out. This is the role for an engineer who has been the strongest technical person on their team and is ready to spend most of the week on design, security, and client direction instead of tickets.

Full-time and exempt, reporting to the Owner and General Manager. The day is eight hours inside an 8:00 a.m. to 6:00 p.m. window, with a full hour for lunch.

• Design client infrastructure (network, server, cloud, and hybrid) and oversee it being built
• Architect Microsoft 365 and Azure environments, including identity, security, and governance
• Design business continuity and disaster recovery that has been tested, not just documented
• Contribute to multi-year technology roadmaps for managed clients

• Run client security assessments and drive the remediation work that follows
• Serve as an escalation point for security incidents
• Support compliance engagements (CMMC, HIPAA, NIST 800-171, PCI) under senior direction
• Help maintain and improve our security standards across the client base

• Sit with clients at the owner and manager level and put technical direction in business terms
• Support solution scoping and proposals with accurate, buildable designs
• Coach engineers and support staff on designs you hand off

• Six or more years of professional IT experience, including two or more years as a senior engineer, lead engineer, or architect
• Strong network and infrastructure design experience across multiple environments
• Substantial Microsoft 365 and Azure experience, including identity and security configuration in production
• A real cybersecurity background: assessments, hardening, or incident response, not just antivirus administration
• Business continuity and disaster recovery design experience, including actual restores
• The ability to present technical decisions to non-technical decision makers
• Valid driver's license and reliable transportation
• Legal authorization to work in the U.S. without sponsorship
• Full-time on-site availability at Painesville or Hudson

• Security+, CySA+, SSCP, or progress toward CISSP or CISM
• Exposure to CMMC, HIPAA, or NIST 800-171 engagements
• Microsoft associate or expert level certifications (AZ-104, AZ-500, SC-100, SC-200)
• Prior managed service provider experience
• Exposure to pre-sales scoping or solution design

• Not a management position. There are no direct reports.
• Not remote or hybrid. The work is on-site, five days a week, with regular client visits across Northeast Ohio.
• Not an IT Director or security officer title in disguise. This is a working technical role.
• Not a role where you will be handed finished standards to follow. You will help write them.