Senior IT Infrastructure & Security Engineer (On Site)
- Compensation
- Not disclosed
- Location
- Nashville, TN, United States
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Five or more years of relevant infrastructure, systems engineering, or related experience, with demonstrated ability to independently deliver complex technical work.
- Hands-on experience administering both Windows Server and Linux environments, including configuration, patching, security hardening, and troubleshooting.
- Experience managing enterprise identity, directory services, access controls, and cloud productivity platforms.
- Hands-on experience with enterprise endpoint management, including device provisioning, application deployment, patching, and compliance.
- Experience configuring and troubleshooting enterprise networking, including switching, routing, firewalls, VPNs, DNS, DHCP, and VLANs.
- Experience with virtualization, enterprise storage, backup and recovery, and infrastructure monitoring.
- Practical experience implementing security controls and investigating or remediating security issues.
- Ability to automate administrative tasks using scripting languages such as PowerShell, Bash, or Python, with experience using Git or similar version control.
- Strong troubleshooting skills and the ability to prioritize work based on business impact and security risk.
- Clear communication, collaborative problem-solving, and a service-oriented approach.
- Relevant skills gained through professional experience, education, technical training, or a combination of these pathways.
Nice to have
- Microsoft enterprise platforms, including Windows Server, Active Directory, Microsoft Entra ID, Azure, Microsoft 365, Defender, Sentinel, Intune, and Windows Autopilot.
- Red Hat Enterprise Linux (RHEL) administration.
- Fortinet networking and security solutions, including FortiGate firewalls, VPNs, and network security policies.
- VMware vSphere/vCenter or comparable virtualization platforms.
- Cohesity or comparable enterprise backup and recovery platforms.
- Pure Storage, Fibre Channel SANs, or comparable enterprise storage.
- Infrastructure as code and automated configuration management.
- Experience supporting distributed industrial environments.
- Relevant Microsoft, Red Hat, Fortinet, infrastructure, networking, or cybersecurity certifications.
- Experience with every product is not required. We value transferable skills, sound technical judgment, and the ability to learn.
Full description
Rogers Group, Inc., headquartered in Nashville, is a privately held aggregates and asphalt highway construction company operating in 13 states with over 3,500 employees. RGI, established in 1908, has the distinction of being recognized as the largest privately held aggregate producer in the United States.
Rogers Group is currently seeking an on-site Senior IT Infrastructure & Security Engineer in the Nashville, TN area for our Corporate operations, reporting directly to the Manager of IT Infrastructure and Cybersecurity. This hands-on role combines infrastructure engineering, cybersecurity, and automation across Microsoft cloud services, identity, endpoints, networks, and on-premises data centers. You will design and implement technical improvements, troubleshoot complex issues, strengthen security controls, and reduce manual work. The successful candidate for this role will work with IT teammates, business partners, and technology providers to deliver practical solutions that improve reliability, protect company information, and support business continuity.
Job Responsibilities:
Infrastructure and reliability
- Design, implement, and maintain secure, reliable infrastructure across Azure, Microsoft 365, Windows Server, virtualization, and storage.
- Manage hybrid identity and core infrastructure services, including Active Directory, Microsoft Entra ID, Group Policy, and related integrations.
- Manage the endpoint lifecycle, including device provisioning, application deployment, configuration, and retirement.
- Improve infrastructure monitoring to identify availability and performance issues early and prevent recurring incidents.
- Manage capacity, performance, and infrastructure lifecycle needs.
- Maintain backup and recovery capabilities and conduct documented recovery exercises to validate that critical services can be restored within established business recovery requirements.
- Lead upgrades, migrations, and infrastructure projects from planning and testing through implementation and operational handoff.
Cybersecurity and resilience
- Implement and improve identity and access controls, including multifactor authentication, Conditional Access, least privilege, and privileged access management.
- Automate and improve employee onboarding, role changes, and offboarding, including timely access provisioning and removal in coordination with business and application owners.
- Configure and tune endpoint protection, security monitoring, and other security platforms to improve threat detection and alert quality.
- Investigate security alerts and support containment, remediation, and recovery in coordination with internal teams and external security partners.
- Identify and prioritize vulnerabilities and configuration weaknesses; coordinate remediation based on risk and operational impact.