Senior IT Infrastructure Engineer

Job Summary

The Sr. IT Infrastructure Engineer is Keros' senior individual contributor for enterprise infrastructure, cloud, identity, endpoint, network, cybersecurity operations, and resilience. This role establishes technical direction, reference architectures, engineering standards, and long-range improvements across multiple related disciplines while remaining hands-on with the most critical and complex assignments. 

Operating with broad latitude, the Sr. Infrastructure Engineer advises IT leadership and key decision-makers, resolves issues affecting multiple functions, and guides the adoption of secure, scalable, supportable, and compliant technology platforms. The role provides technical direction and mentorship but does not carry formal people-management accountability.

Primary Responsibilities

 Sr. Technical Authority and Architecture

• Serve as the Senior advisor and final technical escalation point for enterprise infrastructure, cloud, identity, endpoint, network, backup, and cybersecurity operations.
• Define target architectures, engineering standards, reference patterns, technical roadmaps, and lifecycle strategies that support organizational goals and future requirements.
• Evaluate significant technology risks, dependencies, and design tradeoffs; make recommendations where precedent is limited and decisions affect multiple functions.

Cybersecurity Operations and Resilience

• Establish technical direction for the Rapid7 security platform, security monitoring, vulnerability management, incident handling, remediation, detection coverage, and operational reporting.
• Lead resolution of critical security and infrastructure events, including advanced troubleshooting, root-cause analysis, containment, recovery, corrective actions, and validated closure.
• Define resilience, backup, recovery, hardening, and zero-trust engineering practices; guide testing and continuous improvement of those controls.

Cloud, Identity, Endpoint, and Network Engineering

• Lead the architecture and continual improvement of Microsoft cloud, identity, endpoint, collaboration, application-deployment, automation, and patch-management services.
• Guide enterprise networking, secure access, office and lab connectivity, backup, recovery, and integration patterns for scientific systems and regulated business applications.
• Develop automation and engineering solutions that improve reliability, security, observability, supportability, and operational efficiency across platforms.

Governance, Influence, and Technical Leadership

• Guide complex cross-functional initiatives and architecture decisions, building alignment among IT, cybersecurity, scientific, quality, finance, legal, and technology partners.
• Establish and maintain architecture records, standards, SOPs, runbooks, technical decision documents, knowledge, and evidence required for sustainable operations and assurance.
• Support GxP, SOX ITGC, 21 CFR Part 11, NIST Cybersecurity Framework, audits, vendor risk, and security assessments through technical leadership and control design.
• Mentor engineers, review complex designs, and raise engineering capability through standards, reusable patterns, technical coaching, and knowledge transfer.

Technology Environment

• Microsoft Azure, Microsoft 365, Entra ID, Intune, Defender, Rapid7, Cisco Meraki, Zscaler, Commvault, and Egnyte, along with additional enterprise, collaboration, security, and scientific platforms.

Core Competencies (Required Skills)

• Senior-level expertise: Recognized expertise across enterprise infrastructure and several related disciplines, with the judgment to advise on critical issues and set technical direction.
• Architecture and strategy: Demonstrated success defining standards, reference architectures, roadmaps, lifecycle strategies, and long-range solutions across multiple platforms.
• Complex problem solving: Ability to resolve significant and unique issues using conceptual thinking, limited precedent, independent judgment, and a long-term view.
• Microsoft and automation: Deep Microsoft cloud, identity, endpoint, security, and PowerShell expertise.
• Security and resilience: Advanced experience with SIEM/XDR, vulnerability management, incident handling, network security, secure access, backup, recovery, and control engineering; Rapid7 strongly preferred.
• Influence and technical leadership: Ability to guide critical assignments, align decision makers, mentor engineers, and drive adoption without formal authority.
• Regulated operations: Strong documentation, ITSM, change-management, risk, audit, and compliance discipline in environments handling sensitive or regulated information.

Preferred Skills

• Experience in biotechnology, pharmaceutical, life sciences, healthcare, or another regulated industry.
• Experience guiding complex technology programs or standards that span infrastructure, cybersecurity, scientific systems, and corporate platforms.
• Experience with Rapid7, Cisco Meraki, Zscaler, Commvault, and scientific or lab technology environments.
• Relevant Microsoft, Rapid7, Cisco/Meraki, Zscaler, CISSP, CISM, GIAC, or comparable expert-level certifications.

Education Requirements

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. Equivalent senior-level professional experience may be considered.
• Minimum of 12 years of progressive IT infrastructure, cloud, security operations, or systems-engineering experience, including Level 3 responsibilities.

Potential base pay range 95 - 119 USD