Senior Infrastructure & Security Engineer

Who We Are and Why Join Us

At OnMed our purpose is simple but powerful...to improve the quality of life and sense of well‑being in our communities by bringing access to healthcare to everyone, everywhere. Our path to everywhere has already begun, with our innovative Care Station, a small but mighty, Clinic-in‑a‑Box, bringing #healthcareaccess anywhere with an outlet to plug it in. Poised to become a key component in America’s public health infrastructure, the OnMed Care Station is the only tech‑enabled, AI‑powered, human‑delivered, hybrid care solution that combines the comprehensive experience, trust and outcomes of a clinic, with the rapid scalability of virtual care.

At OnMed, every role, everyday, is directly impacting the communities we serve. You’ll join a high‑performing purpose‑driven team, innovating to break down the barriers that keep people from the care they need.

This is not just a job...it’s a movement to bring access to healthcare where and when people need it most. It’s healthcare that shows up.

You are a hands‑on, deeply technical infrastructure engineer who treats security as part of the job rather than someone else’s department. You are fluent in the Microsoft Azure and Entra ecosystem, you understand networking and firewall rules cold, and you move comfortably between building cloud infrastructure, administering identity and endpoints, tuning detections in an XDR/SIEM console, working an incident to ground, and closing out a ticket queue.

You automate what should be automated, you document as you go, and you would rather fix the underlying cause than absorb the same escalation twice.

You’ll be the front line dedicated engineer in this seat, working directly with the Head of Security and Infrastructure, who owns the architecture, the compliance program, and the vendor relationships. You take the operational reins: you’ll inherit an environment currently supported through an interim vendor engagement, so you’re someone who can work productively from imperfect documentation and improve it as you go.

You thrive in a new, fast‑paced, high‑demand environment and take pride in the availability, security, and resilience of the systems that protect our patients’ healthcare data.

This is a hands‑on infrastructure and security engineering role reporting to the Head of Security and Infrastructure. The role owns day‑to‑day Azure infrastructure and identity operations, IT service management, security engineering and incident response, the operational posture of customer- and public‑facing endpoints, and compliance evidence and vendor coordination — taking over work currently supported through an interim vendor engagement.

• Owning day‑to‑day Microsoft Azure operations hands‑on — resource configuration, patching, backup and recovery, monitoring, and cost and capacity hygiene.

• Building and maintaining infrastructure across cloud and on‑prem, and automating provisioning and routine administration through scripting.

• Administering identity and access in Entra  — provisioning and deprovisioning, access reviews, privileged account audits, MFA/SSO enforcement, and vendor access processes.

• Managing endpoint administration and device hardening across corporate laptops, mobile, and field‑deployed customer‑facing systems.

• Maintaining and documenting network architecture in partnership with the Head of Security and Infrastructure — segmentation, firewall rule sets, VPN, and Zero Trust access for the remote workforce and field devices.

• Running IT service management end to end: ticket intake, triage, assignment, escalation coordination, and resolution tracking across OnMed, its managed service providers, and other vendors — with clear SLAs and no dropped handoffs.

• Serving as the technical escalation point for infrastructure and security issues, including after‑hours events affecting internal systems and patient‑facing endpoints.

• Building the runbooks, documentation, and self‑service that reduce repeat tickets over time.

• Deploying, configuring, and managing security controls hands‑on…