Senior Infrastructure Engineer
American Life is a rapidly growing, technology-enabled insurance holding company focused on long-term growth and on advancing the insurance value chain through products and services that reduce costs and increase customer value. We combine modern technology, product-development and administrative capabilities, and strong industry relationships to create, sell, and administer life and annuity products through independent marketing organizations.
Summary/Objective
We are seeking a hands-on Senior Infrastructure Engineer to design, build, secure, and operate the systems our business runs on: network and firewalls, servers, Microsoft 365, AWS and Azure cloud environments, and the endpoints our employees use every day. This role sits where infrastructure and cybersecurity meet. You will harden what you build, keep it patched, and produce the documentation and change records that support our SOC 2 and insurance regulatory obligations. The right candidate owns systems end to end, from design through day-to-day operation, and can explain technical decisions clearly to engineers, business leaders, and auditors alike.
Essential Functions
Infrastructure and Network
- Design, implement, and maintain network infrastructure, including next-generation firewalls, switching, routing, VPN, DNS, and DHCP.
- Plan and deliver infrastructure projects end to end, from requirements and design through deployment, handoff, and documentation.
- Administer Windows Server and Linux systems, Active Directory, and hybrid identity with Microsoft Entra ID.
- Monitor performance and capacity across network, server, and cloud systems, and act on trends before they become outages.
- Maintain backup, recovery, and disaster recovery capabilities, and take part in periodic recovery testing.
- Serve as the escalation point for the help desk, resolve complex issues, and document resolutions in the knowledge base.
- Write and maintain IT procedures for the systems you support.
Cloud
- Build and support infrastructure in AWS and Microsoft Azure, including networking, compute, storage, and identity and access controls.
- Use infrastructure-as-code (Terraform) and Git-based source control (Bitbucket) so changes are repeatable, reviewed, and traceable.
- Partner with development and platform engineering teams to make sure applications are deployed securely and are supportable in production.
Endpoint and Patch Management
- Administer Microsoft Intune, including Windows Autopilot enrollment, configuration profiles, compliance policies, and application packaging and deployment.
- Own patch management for endpoints and servers in NinjaOne: patch policies, deployment rings, compliance reporting, and remediation of failed or missing updates.
- Deploy and maintain remote monitoring and management, remote access, and endpoint management tooling.
Cybersecurity
- Implement and maintain security controls across identity, endpoints, email, and network, including Microsoft Defender for Endpoint and Office 365, Conditional Access, MFA, and application allowlisting.
- Apply security baselines and hardening standards (such as CIS Benchmarks) to servers, endpoints, network devices, and cloud resources.
- Support vulnerability management: triage findings, prioritize remediation by risk, and track items to closure.
- Participate in security incident response, including containment, investigation, evidence collection, and post-incident review.
- Manage privileged and third-party vendor access to infrastructure, including periodic access reviews.
Competencies
- Troubleshooting across network, server, identity, cloud, and endpoint layers, with a focus on finding root cause rather than only restoring service.
- A security-first approach that builds controls into designs instead of adding them afterward.
- Clear written and verbal communication with technical and non-technical audiences, including management and auditors.
- Ability to work independently, manage competing priorities, and carry work through to completion.
- Effective collaboration with cross-functional teams, vendors, and managed service providers.
- An automation mindset, using PowerShell and other scripting to remove repetitive manual work.
Work Environment
This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
Physical Demands
The physical demands described below are representative of those that must be met by an employee to successfully perform the essential functions of this job.
While performing the duties of this job, the employee is regularly required to talk and communicate with others. This may be over the phone, in person, or through email and messaging. The employee is frequently required to sit, stand; walk, and use their hands and fingers to work with the computer, phones, filing cabinets, paperwork, etc.
Position Type and Expected Hours of Work
This is a full-time position. Days and hours of work are Monday through Friday, 8:00 a.m. to 5:00 p.m. Additional hours as needed to complete work and ensure operations/business is not interrupted or slowed, including scheduled maintenance windows and security incident response.
Travel
No travel is expected for this position.
Required Education and Experience
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and experience
- At least 5 years of experience in IT infrastructure engineering, including network and systems administration
- Hands-on production experience administering Microsoft Intune and Microsoft Entra ID
- Experience with an enterprise patch management or RMM platform; NinjaOne strongly preferred
- Experience configuring and managing enterprise firewalls
- In-depth knowledge of network protocols and technologies, such as TCP/IP, DNS, DHCP, VLANs, routing, and VPN
- Working experience with AWS and/or Microsoft Azure infrastructure
- Experience administering and securing Microsoft 365, including Exchange Online and Microsoft Defender
- Scripting experience with PowerShell
Preferred Qualifications
- Experience in a regulated industry such as insurance, financial services, or healthcare, including supporting SOC 2 or regulatory examinations
- Experience with Terraform and Git-based workflows
- Experience configuring firewalls and network security in Azure
- Experience with Zero Trust network access (such as Microsoft Global Secure Access) and application allowlisting (such as ThreatLocker)
- Linux administration experience
- Experience working alongside a managed service provider
- Relevant certifications, such as Microsoft MD-102, AZ-104, or SC-300; AWS Certified SysOps Administrator or Solutions Architect; CompTIA Security+; or CISSP
If you meet the above qualifications and are looking for an exciting opportunity to join a growing company, please submit your resume. We offer competitive salary, benefits, and career growth opportunities.
Work Authorization/Security Clearance
Must be eligible to work in the United States.
AAP/EEO Statement
American Life is an Equal Opportunity Employer.
If you need assistance or an accommodation due to a disability, you may contact us at 402-489-8266.
Other Duties
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
