Senior IT Infrastructure & Cloud Security Engineer
Summary
Runs TimeCigar's IT infrastructure end to day: on-prem Windows Server/Active Directory, Microsoft 365, office and warehouse networking, plus AWS and Cloudflare. Covers security controls, backups, monitoring, vendor/MSP coordination and Level 2/3 support while supervising IT support staff.
Key Responsibilities:
Manage and maintain the company's IT infrastructure, including on-premises servers, Windows Server, Active Directory, DNS, DHCP, Group Policy and File Servers.
Administer Microsoft 365, Exchange Online, Entra ID, user accounts, access permissions and email security.
Coordinate with external vendors on IT infrastructure projects.
Manage and troubleshoot network infrastructure, including firewalls, switches, routers, VPN and Wi-Fi across office and warehouse locations.
Manage and oversee AWS infrastructure, including EC2, RDS, S3, VPC, IAM and related cloud services.
Implement and review AWS security controls, including IAM policies, MFA, Security Groups, CloudTrail, GuardDuty and security monitoring.
Manage Cloudflare configurations, including DNS, SSL/TLS, WAF and website security settings.
Monitor server and cloud infrastructure performance, availability, security alerts and potential vulnerabilities.
Maintain system backups, disaster recovery procedures and business continuity plans.
Perform regular security reviews, patch management, vulnerability assessments and access control audits.
Coordinate and supervise external IT vendors / Managed Service Providers (MSPs) for AWS, server infrastructure, security and technical support.
Provide Level 2/3 technical support and escalation for complex IT issues.
Supervise and guide the existing IT Support staff to ensure effective daily IT operations.
Maintain IT documentation, system inventories, network diagrams and standard operating procedures.
Recommend and implement infrastructure improvements, security enhancements and IT best practices.
Handle IT incidents, root cause analysis and preventive actions to minimize business disruption.
Requirements:
Minimum 5 years of hands-on experience in IT infrastructure, system administration or related technical roles.
Strong knowledge of Windows Server, Active Directory, Group Policy, DNS, DHCP and networking.
Hands-on experience in Microsoft 365, Exchange Online and Microsoft Entra ID administration.
Practical experience managing AWS production environments, particularly IAM, networking, infrastructure security and monitoring.
Solid understanding of cybersecurity principles, access controls, vulnerability management and incident response.
Experience with firewalls, VPN, virtualization (VMware / Hyper-V) and backup solutions.
Experience managing external IT vendors and coordinating technical projects.
Strong troubleshooting, problem-solving, documentation and communication skills.
Self-motivated, responsible and able to work independently with minimal supervision.
Able to prioritize tasks, take ownership of issues and follow through to resolution.
Preferred Qualifications:
AWS Certified Solutions Architect – Associate or AWS Certified Security – Specialty.
Microsoft Azure / Microsoft 365 certifications.
Experience with Cloudflare WAF, DNS and cloud security.
Knowledge of PowerShell, scripting and IT automation.
Experience supporting e-commerce platforms, multi-site offices or warehouse operations.
Experience with disaster recovery planning and security assessments.