IT Security & Infrastructure Engineer

General Information:

Compensation

We Offer* The initial compensation for this position ranges from $87,423 - $107,519 annually, depending on experience, location and internal equity considerations

Possible Additional Compensation (may vary based on position eligibility)

• Possible Bilingual Differentials: Up to 7.5% for qualifying direct-service roles; up to $80.00/month flat fee for qualifying non-direct service roles.

Benefits

We Offer* Benefits Eligibility starts on day ONE

• We provide a robust benefits package which includes medical, dental, vision, See our Benefits Page HERE.
• 401K Employer Match up to 4%
• Competitive Time Off Plans

*Must meet eligibility requirements based on employment status Hiring Incentive Paid out after 30 days and 6 months

Overview:

Works within the vision, mission and philosophy of the agency. Under the direction of IT leadership, the IT Security & Infrastructure Engineer is a hybrid, mid-level role split evenly between information security operations and enterprise infrastructure management.

This position is responsible for helping protect the confidentiality, integrity, and availability of Pacific Clinics' systems and data, while also supporting the day-to-day administration, reliability, and performance of the agency's Microsoft Azure cloud and hybrid infrastructure environment.

The role requires a practitioner who can move between security-focused work (monitoring, vulnerability management, incident response, compliance support) and infrastructure work (Azure administration, identity and access management, networking, endpoint and server support).

Requires solid technical fundamentals, sound judgment, and a collaborative approach to working with the broader IT team, vendors, and end users across a distributed, multi-site healthcare organization.

Responsibilities

Information Security (approximately 50%):* Monitor security alerts, logs, and dashboards (SIEM, EDR/XDR, firewall, and cloud security tools) to identify and triage potential threats.

• Support incident response activities, including initial investigation, containment, documentation, and escalation of security events.
• Perform routine vulnerability scanning and patch management coordination across servers, endpoints, and network devices; track remediation to closure.
• Administer and tune endpoint protection, email security, and web filtering tools in coordination with IT leadership.
• Assist with identity and access management practices, including access reviews, least-privilege enforcement, and multi-factor authentication (MFA) administration.
• Support HIPAA security rule compliance efforts, including documentation, audit evidence gathering, and remediation of findings.
• Maintain and test security policies, standards, and procedures (e.g., acceptable use, incident response plan, backup/recovery).
• Participate in security awareness initiatives, including phishing simulations and staff training support.
• Assist with third-party/vendor security risk assessments for new applications and services.

Infrastructure & Azure Administration (approximately 50%):* Administer and support Microsoft Azure resources, including virtual machines, storage, networking (VNets, NSGs), and Azure Active Directory / Entra ID.

• Support hybrid identity infrastructure (Azure AD Connect, single sign-on, conditional access policies) in partnership with security responsibilities above.
• Assist with day-to-day administration of servers, backups, and business continuity/disaster recovery tools (e.g., M365 Backup, Azure Backup).
• Support network infrastructure including Fortigate, VPN, and site connectivity for the agency's multi-site environment.
• Monitor system performance and capacity, and assist with troubleshooting infrastructure and connectivity issues raised through the service desk.
• Participate in infrastructure projects such as site deployments, cloud migrations, and system upgrades, following established project plans and templates.
• Maintain accurate documentation of infrastructure configurations, diagrams, and standard operating procedures.
• Collaborate with the Applications, Decision Support, and Service Desk teams to ensure infrastructure and security work supports broader IT and business objectives.
• Provide occasional after-hours or on-call support for security incidents or infrastructure maintenance windows.
• Performs other duties as assigned.

Qualifications:

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.

EDUCATION AND/OR EXPERIENCE/POSITION REQUIREMENTS:

• Bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field, and three (3) or more years of progressive experience in information security and/or IT infrastructure roles, ideally with exposure to both, or an equivalent combination of education and experience (two years of related experience equals one year of education) to include:
• Hands-on experience administering Microsoft Azure (compute, storage, networking, and Azure AD/Entra ID) in a production environment.
• Working knowledge of security monitoring tools (SIEM/EDR), vulnerability management, and incident response processes.
• Familiarity with identity and access management concepts, including MFA, conditional access, and least-privilege principles.
• Experience with Windows Server administration; familiarity with networking fundamentals (firewalls, VPN, SD-WAN) is a plus.
• Exposure to healthcare compliance frameworks (HIPAA/HITECH) is preferred but not required; willingness to learn agency compliance requirements is expected.
• Relevant certifications, such as Security+, Azure Administrator Associate (AZ-104), or SC-900; or demonstrated experience is desirable.
• Must possess a valid California driver's license and maintain an insurable driving record under the Clinic's liability policy.