IT Infrastructure & Security Lead

Department: Information Technology

Employment Type: Full Time

Location: Charlotte, NC

Reporting To: Christopher Castellano

Compensation: $110,076 - $121,084 / year

Location: Charlotte, NC

Schedule: Full-time;
Exempt

Travel: Candidate will primarily work remote and have the opportunity to work in-office at manager's discretion or as needed for team cohesion

The Right Work. The Right People. The Right Culture.

Right of Way is where infrastructure meets innovation - shaping roads, utilities, and communities for the future. At ORC, we offer more than a job - we offer purpose, stability, and growth. You'll join a team that values collaboration, workplace flexibility, and long-term opportunity.

ORC is growing, and our technology function is growing with it. We are looking for a hands-on IT Infrastructure & Security Lead to own our security and compliance program, strengthen the reliability of our core infrastructure, and set the security and governance standards that support a growing firm.

This role reports directly to our CIO and sits at the center of some of our most important work, including our SOC 2 certification, access governance, and the systems that keep a national workforce connected and secure. You will work closely with leaders across the firm to make security practical and part of how we operate.

This is a role for someone who has been in the trenches as a systems administrator, has led people or technical programs, and wants to shape how an IT function operates as it scales. For the right person, there is a real path into broader IT leadership as the function grows.

• Own the security and compliance program
  • Serve as the day-to-day owner of our SOC 2 program, including control design, evidence collection, policy maintenance, and auditor coordination
  • Manage our compliance tooling and keep controls operating consistently throughout audit observation periods
  • Lead risk assessments and vendor security reviews
  • Translate security and compliance requirements into clear, practical expectations for technical and non-technical audiences
• Govern access across the organization
  • Define and maintain access policies, including least privilege, privileged access, and onboarding and offboarding standards
  • Run regular access reviews across critical systems and drive remediation
  • Oversee identity and credential management practices, including MFA and credential vaulting
• Strengthen infrastructure and resilience
  • Lead infrastructure architecture and engineering across our Microsoft 365, Entra , endpoint, server, and network environments, staying hands-on during projects, incidents, and remediation
  • Own backup, recovery, and business continuity testing
  • Improve monitoring, logging, alerting, and incident response
  • Document systems, configurations, and runbooks so knowledge is shared and resilient
• Bring discipline to how change happens
  • Establish change management standards for infrastructure changes, scripts, and automations
  • Define testing, approval, and rollback expectations so changes are reliable and well documented
• Partner across the business
  • Build security awareness and practical guidance for employees across the firm
  • Share security and systems expertise through training, documentation, and coaching
  • Report on security posture and program progress to the CIO and executive leadership
  • Provide input and collaborate across project management initiatives related to other functions

• Is organized, analytical, and detail-oriented
• Troubleshoots methodically and follows problems to the root cause
• Communicates technical concepts clearly to non-technical teammates
• Works efficiently under tight deadlines and keeps multiple priorities moving
• Do…