The IT Network and Infrastructure Security Specialist is responsible for the administration, security, and resilience of the organization’s network, server, and Microsoft cloud infrastructure. This role ensures secure configuration, monitoring, and maintenance of enterprise IT systems, including firewalls, switches, wireless networks, identity platforms, physical and virtual servers, and cloud environments.

The specialist works closely with IT, infrastructure, and security teams to safeguard systems against threats, maintain high availability, and support security initiatives across the organization. This position requires strong hands-on experience in IT infrastructure administration as well as practical security administration expertise.

Network and Infrastructure Administration

• Manage, maintain, and troubleshoot network infrastructure, including switches, routers, firewalls, VPN appliances, and wireless systems.
• Administer Windows and Linux servers, virtualization platforms (VMware / Hyper‑V), and enterprise storage solutions.
• Ensure network performance, availability, and uptime through proactive monitoring and maintenance.
• Implement and maintain secure configurations, patching, hardening standards, and baseline system builds.

Security Administration

• Manage and monitor security tools, including Identity Management (OKTA), Mobile Device Management (MDM), Remote Monitoring and Management (NinjaOne), firewalls, IDS/IPS, vulnerability scanners, and identity security platforms.
• Assist Security Analysis with SIEM and EDR administration support.
• Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
• Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
• Ensure network segmentation, zero-trust controls, and secure access principles are implemented across environments.

Incident Management and Response

• Participate in incident response activities, supporting containment, remediation, and recovery actions.
• Help investigate security alerts, perform triage, and support containment, eradication, and recovery activities.
• Conduct root-cause analysis and contribute to strengthening security controls to reduce recurrence.
• Maintain incident documentation, reporting, and continuous improvement of response processes.
• Collaborate with third‑party security partners (SOC/MDR) on detection and mitigation activities.

Risk Management and Compliance

• Support risk assessments across network, server, cloud, and identity systems.
• Document, track, and support remediation of risks and vulnerabilities across infrastructure assets. Assist with IT and security policy enforcement, compliance audits, and regulatory alignment (NIST, CIS, SOC 2, GDPR, CCPA).
• Participate in building and maintaining security roadmaps and improvement plans.

Collaboration and Operational Support

• Work with IT, cloud, infrastructure, and business units to ensure secure design and implementation of systems.
• Provide reporting on infrastructure health, security posture, patch status, and risk findings.
• Support security awareness initiatives and ensure proper security practices are followed throughout the organization.

Identity and Privileged Account Management

• Administer identity and privileged account management using Okta, including lifecycle management, MFA enforcement, role‑based access, and privileged identity controls.
• Maintain endpoint security policies, access controls, MFA, privileged accounts, and identity governance settings.
• Perform and validate vulnerability scans, system hardening, and remediation of infrastructure weaknesses.
• Ensure network segmentation, zero‑trust controls, and secure access principles are implemented across environments.

Associate’s or bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field (or equivalent experience).

• 3+ years of hands-on experience in IT infrastructure administration, network administration, or security operations.
• Strong experience managing enterprise networks (LAN/WAN), switches, firewalls, VPN, and wireless systems.
• Advanced working knowledge in Microsoft M365 administration.
• Working knowledge of Windows Server, Active Directory, Group Policy, Linux systems, and virtualization platforms.
• Experience with security tools (SIEM, EDR, firewalls, vulnerability scanners, identity security).
• Solid understanding of cybersecurity principles, network security, identity and access management, and cloud security (AWS/Azure).
• Ability to analyze threats, evaluate risks, and provide practical remediation recommendations.
• Effective communication, analytical thinking, and problem-solving skills.

Solairus Aviation embraces diversity and equal opportunity.  We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.

To comply with the Americans with Disabilities Act (ADA) regulations, the principal duties in job descriptions must be essential to the job. To identify essential functions, focus on the purpose and the result of the duties rather than the manner in which they are performed. The following definition applies: a job function is essential if the removal of that function would fundamentally change the job

Salary Range: $85,000 - $93,000