IT Security and Infrastructure Engineer

About Us

Enginess is a leading web application development company, delivering cutting-edge digital solutions to medium and large clients across North America. With a steadfast commitment to innovation and the latest technology, we enable businesses to make informed decisions and achieve their objectives. Our mission is to empower organizations to thrive in the digital age through streamlined and agile digital transformation. Our team thrives on innovation, collaboration, and delivering exceptional value. We're looking for a passionate IT Security and Infrastructure Engineer to join our team and help us shape the future of digital excellence!

Position Overview

The IT Security and Infrastructure Engineer is a critical role responsible for ensuring the security, availability, and performance of Enginess' IT infrastructure. This individual will manage a hybrid environment of on-premises and Azure-based systems, supporting internal teams and contributing to the seamless delivery of services to clients.

This role requires a balance of technical expertise, security acumen, and collaborative skills. The successful candidate will work closely with developers, IT teams, and business stakeholders to maintain operational excellence, manage risk, and implement best practices for infrastructure and security management.

The role is a full-time permanent position in a hybrid work environment. Primarily, the role will be remote (work from home), with requirements for in person meetings or events as the business requires; our office is located in Thornhill, ON. Regular business hours are Monday to Friday, 9:
00am to 5:
00pm EST, with some flexibility. Availability to work outside of normal business hours will be required.

Key Responsibilities

Infrastructure Management:

• Oversee the operation and maintenance of premises and Azure virtual machines (VMs).
• Configure and manage networking equipment, including switches, routers, and firewalls, ensuring reliable connectivity.
• Deploy and maintain serverless technologies to optimize scalability and cost-efficiency.
• Manage containerized environments, leveraging Docker and Kubernetes for efficient orchestration and scaling.
• Ensure high availability, reliability, and scalability of systems to support business needs, including leveraging Content Delivery Networks (CDNs) for improved performance.

Security and Compliance:

• Develop and enforce security policies and procedures, ensuring compliance with industry standards such as ISO 27001.
• Conduct regular security audits, vulnerability assessments, and penetration tests to identify and mitigate risks.
• Manage and maintain security technologies, including Web Application Firewalls (WAFs), Intrusion Detection Systems (IDS), and Security Information and Event Management (SIEM) platforms, to monitor and prevent threats.
• Oversee endpoint protection, including malware detection, firewalls, and Mobile Device Management (MDM) solutions.
• Implement encryption standards and secure protocols for data protection, both in transit and at rest.

Disaster Recovery and Backup:

• Implement and test disaster recovery (DR) protocols to ensure rapid recovery and business continuity.
• Manage daily backups of critical systems, validating integrity and ensuring readiness for restoration.
• Design DR strategies incorporating containerized environments and serverless technologies for faster recovery.
• Conduct routine testing of DR protocols and simulate recovery scenarios to validate preparedness.

DevOps and Development Support:

• Collaborate with developers to maintain and enhance CI/CD pipelines in Azure DevOps.
• Provide support for tools and environments like Visual Studio, MSSQL, . NET, and Node. js.
• Manage secure deployment processes, incorporating Kubernetes and Docker into the delivery pipeline for seamless scaling.
• Integrate DevSecOps practices to embed security into the software development lifecycle.

User Support and Documentation:

• Provide technical support to internal users, partners, and assist clients with infrastructure-related challenges.
• Create and maintain documentation, including infrastructure configurations, policies, and standard operating procedures.
• Train teams on emerging technologies like serverless computing, container orchestration, and SIEM platforms.

Continuous Improvement:

• Proactively identify and implement improvements to system performance, security, and reliability.
• Stay updated on emerging technologies, including serverless frameworks, Kubernetes, Docker, and security solutions like WAFs and IDS.
• Evaluate and adopt new tools for enhanced infrastructure automation and monitoring.

Vendor Management:

• Manage relationships with hardware, software, and service vendors to ensure optimal performance and alignment with business needs.
• Evaluate vendor contracts and SLAs to ensure compliance with agreed-upon terms and performance metrics.
• Coordinate with vendors for system upgrades, troubleshooting, and new technology implementations, including CDN, SIEM, and container orchestration platforms.
• Conduct regular vendor performance reviews and provide feedback to maintain high service standards.
• Identify and onboard new vendors as needed to support evolving infrastructure, security, and cloud-native requirements.

The job description indicates the general nature and level of work, duties, and responsibilities expected of the incumbent. This is not an exhaustive list, and the incumbent may be asked to perform other duties as required. The job description may be changed if needed, as determined by the company.

Education, Experience, and Skill Requirements

Education

• Bachelor's degree (or equivalent) in Computer Science, Information Technology, Cybersecurity, or a related field.
• Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), Microsoft Azure certifications, or equivalent are highly desirable.

Experience

• Minimum 5-7 years of experience in IT infrastructure and security, with at least 3 years managing hybrid environments (on-premises and cloud-based systems).
• Demonstrated experience with Azure services, including virtual machines, serverless technologies, and containerization (e. g. , Docker, Kubernetes).
• Proven track record in implementing and managing security frameworks such as ISO 27001.
• Hands-on experience with networking equipment such as firewalls, routers, and switches.
• Experience in conducting security audits, vulnerability assessments, and penetration testing.

Technical Skills

<.