IT Security & Infrastructure Administrator

About the Role

We're looking for a highly skilled and proactive IT Security & Infrastructure Administrator to help maintain, secure, and optimize our enterprise technology infrastructure. Reporting to our EVP of Technology, you will be responsible for the administration, security, availability, performance, and ongoing improvement of RYZE's IT infrastructure and enterprise systems.

You will serve as a key technical resource across Microsoft Azure, Microsoft 365, cybersecurity, cloud infrastructure, servers, networking, endpoint protection, and hardware and software security. You will work closely with technology leadership, IT support personnel, and external vendors to ensure RYZE maintains a secure, scalable, reliable, and compliant technology environment.

What You'll Do

Microsoft Azure Cloud Infrastructure and Security

• Administer, secure, and maintain Azure subscriptions, resource groups, virtual machines, storage, networking, and cloud services.
• Manage Azure RBAC, security policies, firewalls, network security groups, Key Vault, and privileged access.
• Monitor cloud security, vulnerabilities, performance, availability, and costs using Azure Monitor, Defender for Cloud, and related tools.
• Maintain secure cloud environments through resource isolation, appropriate access controls, and security best practices.
• Implement cloud backup, disaster recovery, and infrastructure protection measures.

Microsoft 365 and Identity Security

• Administer and secure Microsoft 365, Entra ID, Exchange Online, SharePoint, OneDrive, and Teams.
• Manage user identities, permissions, MFA, Conditional Access, privileged roles, and access reviews.
• Configure and maintain Microsoft Defender, Intune, Purview DLP, endpoint compliance, and information protection policies.
• Monitor suspicious activity, phishing threats, unauthorized access, and security alerts.
• Maintain secure employee onboarding, offboarding, device management, and application access processes.

Cybersecurity and Threat Management

• Monitor, investigate, and respond to security threats, incidents, vulnerabilities, and unauthorized access.
• Maintain endpoint protection, antivirus, EDR, firewalls, SIEM monitoring, and security logging.
• Perform vulnerability assessments, patch management, system hardening, and security remediation.
• Protect company and client information against data breaches, ransomware, phishing, shadow IT, and unauthorized AI usage.
• Implement and enforce cybersecurity policies, least-privilege access, and zero-trust security principles.

Hardware, Software, and Endpoint Management

• Secure and maintain company laptops, desktops, mobile devices, and other IT equipment.
• Manage operating system updates, encryption, endpoint configurations, software installations, and device compliance.
• Maintain hardware and software inventories, licensing, and asset lifecycle management.
• Enforce secure device access, application controls, and corporate and BYOD security policies.
• Troubleshoot complex hardware, software, and endpoint security issues.

Server, Network, and Infrastructure Administration

• Administer and secure Windows and Linux servers, Active Directory, virtualized environments, and network infrastructure.
• Manage firewalls, VPNs, DNS, DHCP, secure remote access, and network segmentation.
• Monitor server health, network performance, system availability, and infrastructure security.
• Maintain server patching, backups, recovery procedures, and infrastructure documentation.
• Support infrastructure upgrades, migrations, troubleshooting, and capacity planning.

Security Compliance and Governance

• Support SOC 2 Type II compliance, security audits, and alignment with NIST, CIS, and applicable frameworks.
• Maintain security policies, technical controls, audit evidence, and compliance documentation.
• Conduct access reviews, risk assessments, vulnerability reviews, and security control testing.
• Support vendor security assessments, client security questionnaires, and third-party risk management.
• Assist with cybersecurity awareness, incident response planning, and business continuity procedures.

Infrastructure Monitoring and Disaster Recovery

• Proactively monitor cloud infrastructure, servers, networks, endpoints, and critical enterprise systems.
• Maintain backup systems, disaster recovery plans, and business continuity capabilities.
• Conduct periodic recovery testing and ensure critical systems remain secure and available.
• Identify and resolve infrastructure performance, reliability, and security issues.
• Recommend improvements to scalability, operational efficiency, and cost management.

IT Operations and Technical Support

• Serve as an escalation point for complex infrastructure, cloud, and cybersecurity issues.
• Collaborate with IT support personnel and external vendors to resolve technical problems.
• Manage infrastructure documentation, system configurations, and security-related operational procedures.
• Support technology implementations, system upgrades, and enterprise IT initiatives.
• Provide regular updates on security risks, infrastructure health, incidents, and remediation progress.

What We're Looking For

Required:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field, or equivalent professional experience.
• 4+ years of hands-on experience in IT infrastructure administration, systems administration, or cybersecurity operations.
• Strong experience administering and securing Microsoft Azure environments.
• Strong knowledge of Microsoft 365 administration and security.
• Hands-on experience with Microsoft Entra ID, Conditional Access, MFA, and identity management.
• Experience managing Azure resource groups, RBAC permissions, virtual machines, networking, storage, and security policies.
• Experience with Microsoft Defender security products, Microsoft Intune, and endpoint protection technologies.
• Working knowledge of Windows Server, Active Directory, and Linux administration.
• Experience with network security, firewalls, VPNs, DNS, and secure remote access.
• Experience implementing patch management, vulnerability remediation, endpoint security, and security hardening.
• Understanding of cloud security principles, zero-trust architecture, and least-privilege access.
• Familiarity with backup, disaster recovery, business continuity, and infrastructure monitoring.
• Strong troubleshooting, technical documentation, communication, and problem-solving skills.
• Ability to independently manage technical priorities and respond to security and infrastructure incidents.

Preferred:

• Microsoft Certified: Azure Administrator Associate (AZ-104).
• Microsoft Certified: Azure Security Engineer Associate (AZ-500), or equivalent Azure security expertise.
• Microsoft 365 Administrator Expert or related Microsoft security certification.
• CompTIA Security+, CISSP, CISM, or other recognized cybersecurity certification.
• Experience with Microsoft Sentinel, Microsoft Purview, and Microsoft Defender for Cloud.
• Experience supporting SOC 2 Type II audits and compliance activities.
• Knowledge of NIST, CIS Controls, and ISO 27001 security practices.
• Experience with PowerShell, Azure CLI, and infrastructure automation.
• Familiarity with Terraform, Bicep, or other Infrastructure as Code tools.
• Experience with GitHub, Bitbucket, CI/CD pipelines, and secure application infrastructure.
• Experience in insurance, claims management, financial services, or other regulated industries.
• Familiarity with enterprise IT asset management, change management, and incident response processes.

What We Offer

• Competitive base salary commensurate with experience.
• Employer-sponsored health, dental, and vision coverage.
• 401(k) with company match.
• Generous PTO and paid holidays.
• Fully remote.
• Direct work with technology leadership on enterprise cybersecurity initiatives.
• A meaningful role in securing a growing Microsoft Azure environment and in infrastructure modernization.
• A team that genuinely likes working together.