Infrastructure & Security Engineer II

Job Details:

Job Location:

Miller
- Kalamazoo, MI 49001, Salary Range: $85,000.00 - $ Salary/year, Infrastructure & Security Engineer II

Day Shift (Exempt) | Hybrid
- Wixom, Grand Rapids, or Kalamazoo, MI | Full-Time | $85,000–$115,000/yr

We have been building sustainable material solutions since 1968. At Schupan, you will find a people-first culture, opportunities to grow, and competitive pay — all while being part of a team working toward a more resourceful future.

• Integrity
• Compassion
• Empowerment
• Sustainability

As our Infrastructure & Security Engineer II, you will own the health, security, and evolution of Schupan's Microsoft-based infrastructure across on‑premises and cloud environments. Reporting to the VP of Strategy & Technology, you will be the hands‑on engineer behind our servers, identity, and Microsoft 365 / Azure estate, and you will put commercial and open‑source AI‑enabled security tools to work, including automated penetration testing and vulnerability discovery, to find and fix weaknesses across a multi‑site enterprise faster than manual methods allow.

• Administer and harden Microsoft 365, Microsoft Entra , Exchange Online, Intune, and Azure, including identity governance, Conditional Access, RBAC, and least‑privilege access.
• Manage Windows Server, Active Directory, Group Policy, DNS/DHCP, and virtualization (VMware vSphere/ESXi, Citrix DaaS) across hybrid on‑premises and cloud environments.
• Plan and execute server, tenant, mailbox, file, and data migrations with minimal business disruption, including cutover planning, validation, and rollback.
• Use AI‑enabled commercial and open‑source tools to run automated penetration testing, vulnerability scanning, and attack‑surface discovery across servers, endpoints, cloud resources, and identity, and drive the findings through to remediation.
• Build continuous security monitoring, alerting, and reporting using existing tools (e.g., Microsoft Defender, Sentinel, Purview) and automate routine administration, compliance checks, and remediation with Power Shell, Microsoft Graph, and AI‑assisted workflows, with appropriate human review and controls.
• Lead vulnerability management, secure configuration baselines, endpoint protection, and patching across servers, workstations, and cloud resources.
• Support incident detection, response, and post‑incident root cause analysis, and turn findings into lasting preventive controls.
• Produce clear, recurring security posture and risk reporting for IT leadership and executive stakeholders.
• Evaluate emerging AI and security tools, recommend adoption, and set guardrails for responsible, secure use of AI in IT operations.
• Maintain accurate documentation, runbooks, system inventories, and architecture diagrams.
• Serve as a senior technical escalation point and mentor other IT team members.
• Travel regularly between Schupan's Michigan sites for on‑site work, projects, incidents, and meetings.
• Perform other duties as assigned by the VP of Strategy & Technology.

• 5+ years of progressive experience in enterprise systems administration and infrastructure, including hands‑on security responsibility.
• Bachelor's degree in Computer Information Systems, Information Technology, Computer Science, or a related field preferred; equivalent combinations of education, certifications, and experience will be considered.
• Expert‑level administration of Microsoft 365, Entra , Exchange Online, Intune, and Azure in a hybrid environment.
• Deep experience with Windows Server, Active Directory, Group Policy, DNS, DHCP, TCP/IP, and VMware vSphere/ESXi;
  Citrix DaaS experience a plus.
• Proven track record leading complex server, tenant, and data…