IT Security & Infrastructure Engineer

Overview

(This position must be able to report to Arcadia, California, 1-3 times per week. No relocation assistance provided.)

Compensation We Offer 

• The initial compensation for this position ranges from $87,423 - $107,519 annually, depending on experience, location and internal equity considerations

Possible Additional Compensation (may vary based on position eligibility)

• Possible Bilingual Differentials: Up to 7.5% for qualifying direct-service roles; up to $80.00/month flat fee for qualifying non-direct service roles.

Benefits We Offer 

• Benefits Eligibility starts on day ONE

• We provide a robust benefits package which includes medical, dental, vision, See our Benefits Page HERE.

• 401K Employer Match up to 4%

• Competitive Time Off Plans

Must meet eligibility requirements based on employment status

*Hiring Incentive Paid out after 30 days and 6 months 

Pay Range

$87,423 - $107,519 annually
Job Summary

Works within the vision, mission and philosophy of the agency. Under the direction of IT leadership, the IT Security & Infrastructure Engineer this is a mid-level role split evenly between information security operations and enterprise infrastructure management. This position is responsible for helping protect the confidentiality, integrity, and availability of Pacific Clinics' systems and data, while also supporting the day-to-day administration, reliability, and performance of the agency's Microsoft Azure cloud and mixed infrastructure environment.

The role requires a practitioner who can move between security-focused work (monitoring, vulnerability management, incident response, compliance support) and infrastructure work (Azure administration, identity and access management, networking, endpoint and server support). Requires solid technical fundamentals, sound judgment, and a collaborative approach to working with the broader IT team, vendors, and end users across a distributed, multi-site healthcare organization.

Responsibilities

Information Security (approximately 50%): 

• Monitor security alerts, logs, and dashboards (SIEM, EDR/XDR, firewall, and cloud security tools) to identify and triage potential threats. 
• Support incident response activities, including initial investigation, containment, documentation, and escalation of security events.
• Perform routine vulnerability scanning and patch management coordination across servers, endpoints, and network devices; track remediation to closure.
• Administer and tune endpoint protection, email security, and web filtering tools in coordination with IT leadership.
• Assist with identity and access management practices, including access reviews, least-privilege enforcement, and multi-factor authentication (MFA) administration.
• Support HIPAA security rule compliance efforts, including documentation, audit evidence gathering, and remediation of findings.
• Maintain and test security policies, standards, and procedures (e.g., acceptable use, incident response plan, backup/recovery).
• Participate in security awareness initiatives, including phishing simulations and staff training support.
• Assist with third-party/vendor security risk assessments for new applications and services.

Infrastructure & Azure Administration (approximately 50%):

• Administer and support Microsoft Azure resources, including virtual machines, storage, networking (VNets, NSGs), and Azure Active Directory / Entra ID.
• Support hybrid identity infrastructure (Azure AD Connect, single sign-on, conditional access policies) in partnership with security responsibilities above.
• Assist with day-to-day administration of servers, backups, and business continuity/disaster recovery tools (e.g., M365 Backup, Azure Backup).
• Support network infrastructure including Fortigate, VPN, and site connectivity for the agency's multi-site environment.
• Monitor system performance and capacity, and assist with troubleshooting infrastructure and connectivity issues raised through the service desk.
• Participate in infrastructure projects such as site deployments, cloud migrations, and system upgrades, following established project plans and templates.
• Maintain accurate documentation of infrastructure configurations, diagrams, and standard operating procedures.
• Collaborate with the Applications, Decision Support, and Service Desk teams to ensure infrastructure and security work supports broader IT and business objectives.
• Provide occasional after-hours or on-call support for security incidents or infrastructure maintenance windows.
• Performs other duties as assigned.

#Azure #firewall #Fortigate #SIEM #EDR/XDR #cloudsecruity #IT #VNets #NSGs #N365 #HIPAA #onsite 

Qualifications

• To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform essential job functions.
   
  EDUCATION AND/OR EXPERIENCE/POSITION REQUIREMENTS:
• Bachelor's degree in computer science, Information Systems, Cybersecurity, or a related field, and three (3) or more years of progressive experience in information security and/or IT infrastructure roles, ideally with exposure to both, or an equivalent combination of education and experience (two years of related experience equals one year of education) to include:
• Hands-on experience administering Microsoft Azure (compute, storage, networking, and Azure AD/Entra ID) in a production environment.
• Working knowledge of security monitoring tools (SIEM/EDR), vulnerability management, and incident response processes.
• Familiarity with identity and access management concepts, including MFA, conditional access, and least-privilege principles.
• Experience with Windows Server administration; familiarity with networking fundamentals (firewalls, VPN, SD-WAN) is a plus.
• Exposure to healthcare compliance frameworks (HIPAA/HITECH) is preferred but not required; willingness to learn agency compliance requirements is expected.
• Relevant certifications, such as Security+, Azure Administrator Associate (AZ-104), or SC-900; or demonstrated experience is desirable.
• Must possess a valid California driver's license and maintain an insurable driving record under the Clinic's liability policy.

Job Competencies

• Ability to prioritize and manage competing tasks across security and infrastructure responsibilities in a fast-paced, resource-limited environment.
• Strong written and verbal communication skills, with the ability to document technical work clearly and explain issues to non-technical staff.
• Ability to work collaboratively within a team while also operating independently on assigned tasks.
• Knowledge of and ability to work effectively with culturally diverse staff and client population is essential.

Physical Requirements

PHYSICAL REQUIREMENTS:

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable qualified individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to handle, or feel objects, tools, or controls; reach with hands and arms; talk or hear. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision and the ability to adjust focus.

WORK ENVIRONMENT:

While performing the duties of this job, the employee primarily works in an office/remote hybrid environment with occasional travel to agency sites. The noise level in the work environment is usually moderate.

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.

SITE SPECIFICS:

A review of this description has excluded the marginal functions of the position that are incidental to job performance of the fundamental job duties. All duties and requirements are essential job functions.

Driving Required Will not have unsupervised contact with children. Requires full background check and TB Exam. We are an Equal Opportunity Employer, which includes providing reasonable accommodations for individuals with a disability. We will consider for employment, qualified Applicants with Criminal Histories in a manner consistent with ordinance 184652 Sec.189.04 (a) and San Francisco Police Code, Article 49. Section 4905.