Senior IT Infrastructure & Security Engineer; On Site

Rogers Group, Inc., headquartered in Nashville, is a privately held aggregates and asphalt highway construction company operating in 13 states with over 3,500 employees. RGI, established in 1908, has the distinction of being recognized as the largest privately held aggregate producer in the United States.

Rogers Group is currently seeking an on‑site Senior IT Infrastructure & Security Engineer
in the Nashville, TN area for our Corporate operations, reporting directly to the Manager of IT Infrastructure and Cybersecurity. This hands‑on role combines infrastructure engineering, cybersecurity, and automation across Microsoft cloud services, identity, endpoints, networks, and on‑premises data centers. You will design and implement technical improvements, troubleshoot complex issues, strengthen security controls, and reduce manual work. The successful candidate for this role will work with IT teammates, business partners, and technology providers to deliver practical solutions that improve reliability, protect company information, and support business continuity.

• Design, implement, and maintain secure, reliable infrastructure across Azure, Microsoft 365, Windows Server, virtualization, and storage.
• Manage hybrid identity and core infrastructure services, including Active Directory, Microsoft Entra , Group Policy, and related integrations.
• Manage the endpoint lifecycle, including device provisioning, application deployment, configuration, and retirement.
• Improve infrastructure monitoring to identify availability and performance issues early and prevent recurring incidents.
• Manage capacity, performance, and infrastructure lifecycle needs.
• Maintain backup and recovery capabilities and conduct documented recovery exercises to validate that critical services can be restored within established business recovery requirements.
• Lead upgrades, migrations, and infrastructure projects from planning and testing through implementation and operational handoff.

• Implement and improve identity and access controls, including multifactor authentication, Conditional Access, least privilege, and privileged access management.
• Automate and improve employee onboarding, role changes, and offboarding, including timely access provisioning and removal in coordination with business and application owners.
• Configure and tune endpoint protection, security monitoring, and other security platforms to improve threat detection and alert quality.
• Investigate security alerts and support containment, remediation, and recovery in coordination with internal teams and external security partners.
• Identify and prioritize vulnerabilities and configuration weaknesses; coordinate remediation based on risk and operational impact.
• Apply secure configuration baselines, patching standards, and endpoint compliance policies across cloud and on‑premises systems.
• Partner with site operations and vendors to secure infrastructure and remote access supporting field locations while respecting safety and production requirements.

• Develop and maintain reusable scripts, templates, and configurations using Power Shell, APIs, or comparable tools, supported by version control, testing, documentation, and change controls.
• Use approved AI‑assisted tools to support scripting, troubleshooting, and documentation while protecting sensitive information and validating outputs before use.
• Identify opportunities to simplify the environment, reduce manual effort, and improve service quality and cost efficiency.

• Serve as a senior escalation point for complex infrastructure issues, leading root cause analysis and durable corrective…