Senior Engineer – IT Infrastructure and Security Job – Phoenix, AZ

Pay Class:  Full-Time

Pay Type: Salaried + Bonus

POSITION SUMMARY

The Senior IT Infrastructure and Security Engineer designs, implements, and maintains a secure IT infrastructure, protecting systems and data from threats while ensuring operational efficiency. This role combines infrastructure engineering skills with cybersecurity expertise, requiring proficiency in areas such as network security, vulnerability assessments, and cloud security.

ESSENTIAL FUNCTIONS

• Infrastructure Design and Implementation: Planning, designing, and implementing secure network and server infrastructures, including firewalls, VPNs, and intrusion detection/prevention systems.
• Security Management: Managing and maintaining security policies, procedures, and tools to protect against threats and vulnerabilities.
• Vulnerability Assessments and Penetration Testing: Identifying vulnerabilities and weaknesses in systems and networks to assess their risk and recommend remediation.
• Incident Response: Investigating and responding to security incidents, ensuring timely containment and recovery.
• Compliance and Auditing: Ensuring adherence to security standards and regulatory requirements, conducting audits, and providing compliance documentation.
• Cloud Security: Designing and implementing security measures for cloud environments, such as AWS, Azure, and Google Cloud.
• Collaboration and Communication: Working with other IT teams, developers, and business stakeholders to ensure security is integrated into all aspects of the IT infrastructure.
• Security Awareness and Training: Providing guidance and training to other IT staff on security best practices.
• Staying Current: Staying informed about emerging security threats, technologies, and best practices.

Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards. Provides all customers with an excellent service experience by consistently demonstrating our core and leader behaviors daily.

NOTE: The essential functions are intended to describe the general content of and requirements of this position and are not intended to be an exhaustive statement of duties. Specific tasks or responsibilities will be documented as outlined by the incumbent's immediate manager.

MINIMUM QUALIFICATIONS

• 8+ years of experience in infrastructure, operations, and information security.
• Bachelor's degree in computer science, engineering, or a related field.
• Knowledge of network protocols, firewall technologies, VPNs, and routing protocols.
• Familiarity with Windows and Linux operating systems.
• Experience with firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, vulnerability scanners, and endpoint protection.
• Experience with cloud platforms like AWS, Azure, and Google Cloud.
• Proficiency in scripting languages like Python, Bash, or PowerShell for automating security tasks.
• Knowledge of security frameworks like NIST, ISO 27001, and CIS.

PREFERRED QUALIFICATIONS

• Additional education and experience preferred..
• Certifications such as CISSP, CISM, CEH, or CompTIA Security+ are desirable.

PHYSICAL DEMANDS/ENVIRONMENTAL FACTORS

• Requires extensive sitting with periodic standing and walking.
• Able to stand, climb, and stoop, as needed.
• May be required to lift up to 75 pounds.
• Requires significant use of a computer, phone, and general office equipment.
• Needs adequate visual acuity, and ability to grasp and handle objects.
• Needs the ability to communicate effectively through reading, writing, and speaking in person or on the telephone.
• May be required to travel to various locations.
• Requires the ability to tolerate exposure to conditions that may include dirt, dust, or heights.
• Able to use proper body mechanics to lift supplies and equipment and push carts and dollies weighing up to 200 pounds.
• Needs adequate color vision.

SCOPE AND COMPLEXITY

This role requires deep technical expertise across network infrastructure, vulnerability assessment, incident response, and cloud security solutions. It involves ensuring compliance with regulatory standards and proactive defense strategies to protect organizational assets. Success in this role depends on cross-functional collaboration, continual system evaluation, and staying ahead of evolving threats in a dynamic technology landscape.