Senior Infrastructure & Security Engineer

Pacific Rim Mechanical is seeking a Senior Infrastructure & Security Engineer to own the design, security, administration, and modernization of our hybrid IT environment. This role is responsible for Microsoft 365 security, Azure infrastructure, identity management, endpoint protection, network security, disaster recovery, and infrastructure modernization initiatives.

The ideal candidate will be a highly organized technical leader who proactively manages risk, drives security improvements, maintains operational excellence, and leads infrastructure projects from planning through execution.

The successful candidate will serve as a senior escalation resource while partnering closely with IT leadership to improve security posture, modernize infrastructure, and ensure business continuity across office and field operations.

Role emphasis: This position requires ongoing ownership of security and infrastructure, not just responding to individual tickets or one-off technical issues.

• Administer and secure Microsoft 365, Azure, and Entra .
• Design, implement, and maintain Conditional Access policies and MFA enforcement strategies
• Administer privileged access accounts and administrative security controls.
• Maintain hybrid identity environments between Entra  Active Directory.
• Review tenant security posture and implement security best practices.
• Support Intune, Mobile Application Management (MAM), and device compliance initiatives.

• Design and administer Data Loss Prevention (DLP) policies, and data classification
• Administer Microsoft Purview and data governance initiatives.
• Develop controls to prevent inappropriate sharing or movement of company information.
• Manage retention policies and information lifecycle management.

• Establish governance standards for AI platforms including Microsoft Copilot, ChatGPT, and other AI services.
• Assess AI-related security, privacy, and data exposure risks.
• Develop standards for acceptable AI use throughout the organization.
• Ensure company data remains protected when interacting with AI platforms.
• Evaluate emerging technologies and provide risk-based recommendations.

• Manage server and workstation patching programs.
• Oversee third-party application patching and software lifecycle management.
• Monitor vendor security advisories and assess organizational impact.
• Conduct vulnerability assessments and remediation efforts.
• Administer our Crowd Strike endpoint security platform

• Maintain Active Directory, Group Policy, DNS, DHCP, and file services.
• Manage virtualization platforms including VMware and future virtualization technologies.
• Support Azure resources, Azure Virtual Desktop, storage, networking, and security services.
• Perform server upgrades, migrations, and infrastructure modernization projects.
• Maintain certificate services and certificate-based authentication solutions.

• Develop and maintain backup and disaster recovery procedures.
• Validate backup integrity and perform recovery testing.
• Implement immutable and offsite backup strategies.
• Develop and maintain ransomware recovery procedures.

• Create and maintain technical documentation, SOPs, diagrams, and knowledge base articles.
• Maintain server asset inventories and technical standards.
• Track security findings, remediation efforts, vendor action items, and project deliverables.
• Ensure operational tasks and follow-up items are completed without gaps.

• 7+ years of progressive IT infrastructure and security experience.
• Strong experience with Microsoft 365, Azure, and Entra .
• Experience implementing Conditional Access, MFA, and identity security controls.
• Experience with Intune and endpoint management.
• Strong Active Directory administration experience.
• Experience with Microsoft Purview, DLP, and governance tools.
• Experience with VMware or equivalent virtualization platforms.
• Experience administering…