IT Infrastructure Engineer

Key Responsibilities:

• Infrastructure Management:
  • Design deploy manage and maintain onpremises and cloudbased (Azure preferred) infrastructure components including servers (Windows Server) virtualization platforms storage and networking equipment.
  • Administer and maintain Active Directory / Microsoft Entra ID environments including identity lifecycle and conditional access.
  • Ensure the reliability availability and performance of critical IT systems through monitoring maintenance and troubleshooting.
  • Implement solutions that incorporate backup disaster recovery and business continuity principals.

• Security Operations & Engineering:
  • Configure manage and optimize the Microsoft Defender suite (including Defender for Endpoint Defender for Identity Defender for Cloud Apps Defender Vulnerability Management) to protect endpoints identities and cloud resources.
  • Operate and maintain Microsoft Sentinel (SIEM/SOAR) for security monitoring threat detection analysis and incident response. Develop and tune detection rules analytics and response playbooks.
  • Respond to and implement changes/improvements based on security assessments vulnerability scanning and penetration testing results.
  • Respond to security incidents perform root cause analysis and implement corrective actions.

• General Duties:
  • Create and maintain comprehensive documentation for infrastructure design security configurations and operational procedures.
  • Provide technical expertise and support to other IT staff and endusers on infrastructure and securityrelated matters.
  • Active participation in Infrastructure projects including project management of small to mediumsized projects.
    • Lead projects with other Infrastructure staff as support.
    • Act as support on Infrastructure projects led by other team members.
  • Introduce ideas and advocate for improvement of Infrastructure teams processes
  • Participate in oncall support for critical infrastructure and security support if applicable.

Required Qualifications:

• Bachelors degree in Computer Science Information Technology Cybersecurity or a related field OR equivalent practical experience.
• 5 years of experience in IT infrastructure engineering/administration including handson experience with Windows Server Active Directory/Entra ID networking (TCP/IP DNS DHCP VPNs Firewalls routing switching) and virtualization.
• Proven handson experience implementing and managing security solutions within the Microsoft ecosystem specifically:
• Microsoft Defender Suite: Demonstrable experience with configuration policy management and alert triage across various Defender components (Endpoint Identity etc.).
• Microsoft Sentinel: Experience with log ingestion KQL query writing analytics rule creation incident investigation and SOAR playbook development/management.
• Strong understanding of core information security principles (e.g. least privilege defenseindepth privileged identity management privileged access management incident response lifecycle).
• Experience with scripting languages particularly PowerShell for automation and administration.
• Excellent troubleshooting analytical and problemsolving skills.
• Strong communication and interpersonal skills with the ability to explain complex technical concepts to diverse audiences.
• Ability to work independently and as part of a team in a fastpaced environment.
• Familiarity with compliance frameworks (e.g. NIST ISO 27001 GDPR).
• Experience with Microsoft Azure IaaS and PaaS services.

Preferred Qualifications:

• Relevant industry certifications (e.g. Microsoft Certified: Security Operations Analyst Associate (SC200) Microsoft Certified: Identity and Access Administrator Associate (SC300) Microsoft Certified: Azure Security Engineer Associate (AZ500) Microsoft 365 Certified: Security Administrator Associate (MS500) CompTIA Security CISSP).

Compensation:

We foster a culture that is diverse and inclusive and strive for pay practices that are fair competitive and reflect our commitment to pay equity. Our compensation decisions include but are not limited to a candidates qualifications including skill sets education experience and training licensure and certifications credentials if applicable and businessrelated factors. This practice extends to all employees including performance considerations for merit increases job promotions and transfer opportunities. We additionally review our pay practices conduct pay equity audits and ensure our managers are trained in our pay practices on an annual basis. At the time of posting this job advertisement the annual pay salary range for this position is between $115600 and $160000 commensurate with qualifications and dependent on geographic location.

Equal Employment Opportunity Statement

Perkins&Will has established and adopted an Equal Employment Opportunity Employment policy (EEO) which is part of the Companys Human Resources Policy. The purpose of this EEO policy is to ensure that all employment decisions are made on a nondiscriminatory basis and without regard to sex race color age national origin religion disability genetic information marital status sexual orientation gender identity or expression gender reassignment citizenship pregnancy or maternity veteran status or any other status protected by applicable national federal state or local law. In some cases local laws and regulations may provide greater protections than those outlined here and employees will be covered by the laws of their local jurisdiction.