Infrastructure Security and Systems Administrator

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

2 days ago Requisition

The Kresge Foundation is one of the top 20 private philanthropic foundations in the United States and the only one focused exclusively on expanding opportunities for people with low income in American cities. With an endowment of approximately $4 billion and a staff of over 100 employees, the foundation deploys grants and social investments across arts and culture, education, environment, health, human services and community development.

The foundation’s state-of-the-art headquarters maintains an array of energy-efficient, water-conserving and health-promoting systems. The foundation also operates an

office in Detroit’s Midtown district.

Why You Will Love Working Here

• Purpose-Driven Work: Every day, your skills will help advance equity and human progress.
• Growth & Learning: We champion ongoing development, creativity, and authentic collaboration.
• Inclusive Culture: Equity and respect are at the heart of everything we do.
• Competitive Rewards: Transparent pay, robust benefits, and a commitment to salary equity.

What You Will Do

The Infrastructure Security and Systems Administrator is responsible for protecting and maintaining the organization’s technology environment through the monitoring, analysis, and response to cybersecurity threats and incidents. This role supports the stability, security, and performance of the network, server, and infrastructure environment, leveraging knowledge of networking principles and Microsoft Azure server technologies.

Working closely with the organization’s Managed Services Provider (MSP) and cybersecurity leadership, the position helps reduce the organization’s attack surface by identifying and remediating vulnerabilities, implementing security controls, and supporting ongoing infrastructure operations. The role also contributes to the planning and execution of cybersecurity initiatives, infrastructure improvements, and technology projects to enhance the organization’s overall security posture and operational reliability.

Vulnerability Management:

• Analyze scan results of organization systems and cloud environments, beyond the monthly requirement, as needed.
• Plan, track, and solve remediation of different vulnerabilities within the network on PCs and Servers, including service packs and application updates.
• Monitor, investigate, and respond to security risks involving organizational AI tools and services, including misuse, data exposure, and manipulation of AI inputs or outputs that could impact confidentiality, integrity, or availability.
• Improve and automate existing vulnerability management systems where available and provide technical support for vulnerability management projects.
• Use ticketing systems to implement fixes using change control methodology.
• Make necessary changes in client PCs to eliminate vulnerabilities, such as registry entries or file deletions.
• Work with internal IT team and partners to effectively implement remediations using their tools if necessary or to bring awareness to partners.

Cybersecurity Incidents and Monitoring:

• Work with cybersecurity lead to resolve information security incidents, including targeted threats and internal incidents.
• Develop and/or maintain documentation regarding threat management, including guidelines, policies and procedures.
• Provide recommendations for improving security and risk management.
• Conduct periodic reviews of our infrastructure tooling containing compliance and security modules, taking the suggestions for furthering our compliance and security.
• Coordinate and oversee annual penetration testing and develop exercises, working closely with external vendors to plan, execute, and evaluate test results. Analyze findings and facilitate the timely remediation of identified vulnerabilities and gaps.
• Assist in coordination of audits and cyber insurance reviews, and implement recommendations given in the findings and reports.
• Communicate the risks of identified…