Systems and Security Engineer

We are seeking a skilled Mid-level Systems and Security Engineer to join EnSafe’s Information Technology team. This hands-on technical role is responsible for the day-to-day operation of EnSafe’ s technologies and technical compliance controls.

The successful candidate will bring cybersecurity expertise, strong enterprise infrastructure knowledge, and network fluency to help protect EnSafe’ s infrastructure, systems, and data. This role supports Department of Defense (DoD) contract requirements and helps maintain technical controls aligned with cybersecurity frameworks and regulatory standards. This position reports to the Director of IT.

Joining our team means immersing yourself in an environment that nurtures creativity, encourages collaboration at all levels, fosters a supportive culture, and facilitates professional development.

DUTIES/RESPONSIBILITIES

Key responsibilities of this position will include:

• Supporting and securing enterprise infrastructure environments, including cloud, endpoint, identity, collaboration, and directory services platforms.

• Managing and reviewing network security controls, including firewall administration, VPN technologies, network segmentation, and access management.

• Operating enterprise security technologies to detect, investigate, and respond to cybersecurity threats and vulnerabilities.

• Monitoring, triaging, and responding to security alerts, incidents, identity risks, and endpoint threats in coordination with internal stakeholders and managed security partners.

• Supporting vulnerability and patch management activities, including risk assessment, remediation tracking, and reporting.

• Administering privileged access management solutions and supporting access control, identity protection, and separation-of-duties requirements.

• Participating in incident response activities, including investigation, containment, remediation, documentation, and post-incident review.

• Supporting cybersecurity compliance initiatives through technical control implementation, evidence collection, and audit preparation.

• Leading infrastructure and security projects from requirements gathering through implementation, testing, and documentation.

• Collaborating with IT staff, business stakeholders, managed service providers, and compliance partners.

Minimum Skills and Requirements:

• Six (6) or more years of progressively responsible information technology experience, including at least two (2) years with significant security or security operations responsibility.

• Strong experience with Microsoft enterprise technologies, including Active Directory, Entra ID, Azure, Microsoft 365, Defender, Purview, and Intune.

• Experience with firewall administration, VPN technologies, network segmentation, and network troubleshooting.

• Hands-on experience with at least one class of enterprise security tooling (SIEM, EDR, or privileged access management) in a production environment.

• Scripting experience using PowerShell, Python, or similar automation tools.

• Professional certification such as Security+, Network+, Microsoft certification, or equivalent.

• Strong written communication skills with the ability to create clear technical documentation, evidence packages, change records, and incident documentation.

Preferred (not required):

• CISSP, CISM, CCSP, CISA, or other advanced security certifications.

• Sumo Logic, CrowdStrike Falcon, or Keeper Security experience.

• Working knowledge of NIST SP 800-171, CMMC, or similar security compliance frameworks.

• Experience supporting Defense Industrial Base (DIB) organizations or federal contractors.

• Fortinet firewall administration experience.

• Experience supporting mergers and acquisitions integrations.

• Experience with insider risk management, AI governance, or related security initiatives.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field., Access Control, Acquisition Integration, Administrative Skills, Alliance/Partner Management, Artificial Intelligence (AI), Automation, CCSP - Cisco Certified Security Professional, CISA - Certified Information Systems Auditor, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Career Development, Cloud Computing, Communication Skills, Computer Science, Computer Security, Consulting, Contract Requirements, Documentation, Enterprise Protection, Environmental Health, Environmental Impact, Establish Priorities, Federal Contracts, Firewall Administration, Government Contracts, Incident Management, Incident Response, Information Technology & Information Systems, Internet Security, Legal, Machine Tool, Maintain Compliance, Mentoring, Mergers and Acquisitions, Microsoft Active Directory, Microsoft Product Family, Microsoft Windows Azure, Military, Network Administration/Management, Network Security, Philosophy, Production Systems, Python Programming/Scripting Language, Regulations, Regulatory Compliance, Requirements Management, Risk Analysis, Risk Management, SUMO, Safety Engineering, Safety Standards, Safety/Work Safety, Scripting (Scripting Languages), Security Compliance, Security Information and Event Management (SIEM), Security Monitoring, Software Patches, Systems Administration/Management, Systems Engineering, Team Player, Technical Writing, U.S. National Institute of Standards and Technology (NIST), VPN (Virtual Private Network), Windows PowerShell, Writing Skills

EnSafe is accepting applications for a full-time Mid-level Systems and Security Engineer in Memphis, TN. This position will support EnSafe offices across the U.S. and Canada., EnSafe is 100% employee-owned, with an ESOP (Employee Stock Ownership Plan) since 1997. That means when EnSafe succeeds, you succeed too, turning company growth directly into shared rewards.

• Commitment to Growth and Wellness The company supports personalized career development, mentorship, and employee wellness initiatives such as health tracking tools.

• Purpose-Driven Work EnSafe’s mission focuses on impactful environmental, health, and safety consulting-making a real difference in communities and is backed by its long-standing technical credibility.

• Safety as a Value, Not Just a Service Safety is deeply embedded in our culture, prioritizing employee well-being in addition to helping clients maintain compliance. We stress that “safety is part of everything we do.”

• A Culture of Freedom & Ownership At EnSafe, our career philosophy is built on freedom. The freedom to take initiative, achieve your goals, and shape your own career path Employees are encouraged to pursue growth in a flexible, entrepreneurial environment.

• Challenging, Creative Work Workdays at EnSafe are anything but ordinary, fast-paced, dynamic, and filled with opportunities to tackle projects in environmental consulting, health & safety, engineering, and technology. Every day calls for creativity, innovation, and agile problem-solving., EnSafe began as a two-person firm in 1980, navigating complex regulatory compliance issues on behalf of our clients. We nurture our people with growth and development opportunities. We build enduring, trustful relationships with each of our clients, with a focus on high ethical and safety standards. We build this reputation by attracting high-quality people and retaining them for the long term.