> Markdown version of [/jobs/ext/2499816-it-security-infrastructure-admin](https://www.wearedevelopers.com/jobs/ext/2499816-it-security-infrastructure-admin). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security & Infrastructure Admin - **Company:** Paragon Implant MFG LLC - **Location:** Calabasas, CA, United States - **Experience:** Expert - **Salary:** $123,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Apple Mac Systems, User Authentication, Automation of Tests, Microsoft Azure, Backup Devices, Bash Shell, BitLocker Drive Encryption, Cloud Computing, Cyber Security, Computer Networks, Databases, Data Integrity, Data Loss, Linux, Disaster Recovery, Domain Name System (DNS), Multi-Factor Authentication, Monitoring of Systems, Hyper-V, Identity and Access Management, Information Technology Operations, Networking Hardware, Internet Protocol Security (IP SEC), Intrusion Detection and Prevention, Virtual Private Networks (VPN), Python (Programming Language), Network Security, PostgreSQL, Microsoft Security Essentials, Microsoft SQL Server, Windows Servers, Network Forensics, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Ansible, Traffic Analysis, Virtual Local Area Networks, Virtual Machines, EndPointSecurity, Wi-Fi Technology, Network Routers, Scripting, Computer Networking Systems, Cloud Platform System, Computer Network Technologies, System Availability, IT Architecture, Hardware Testing, Peripherals, Firewalls (Computer Science), Microsoft InTune, Azure Security Center, Infrastructure Automation Frameworks, Information Technology, Patch Management, Terraform - **Published:** August 25, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=6a0c1a9f2e106635 ## About the Role Bachelor's degree in computer science or engineering with any IT certification and a minimum of three (3) years' relevant work experience, or an equivalent combination of education/certification and experience., * Technologically savvy, and profound knowledge of computer and hardware systems. * Extensive experience (minimum five years) managing enterprise IT infrastructure, security, networking, and cloud environments. * Strong expertise in Azure, Microsoft 365, Intune, and Defender for Endpoint. * Proficiency in Active Directory, Azure AD, IAM policies, and authentication controls. * Hands-on experience with workstation setup, hardware installation, and peripheral troubleshooting. * Experience providing end-user support and IT training to ensure proper system usage and security awareness. * Strong background in networking technologies, VPNs, firewalls, and traffic analysis. * Proficiency in automation scripting (PowerShell, Python, Bash, Terraform, Ansible, etc.). * Ability to assess and mitigate security risks while enforcing IT security best practices. * Well-developed oral and written communication. * Knowledge of system security. Physical Requirements / Abilities * Ability to walk and stand for extended periods of time 40% of the time. * Ability to reach with hands and arms frequently. * Hand and finger dexterity to handle or feel objects frequently. * Good vision and ability to decipher depth. * Ability to bend, stoop, and kneel on occasion. * Ability to climb stairs. ## Description The Information Technologies (IT) Security and Infrastructure Administrator is responsible for the design, implementation, administration, and security of the organization's IT infrastructure, cloud environments, and network systems. This role ensures system availability, data integrity, security enforcement, and efficient IT operations while also providing hands-on workstation setup, hardware installation, and end-user support and training. Responsible for designing, building, maintaining, and continuously developing the organization's IT architecture. Ongoing responsibilities include administration, enhancements, and security improvements as technology and business needs evolve. Responsible for ensuring the security of systems and data, including monitoring access controls, investigating anomalies, and enforcing IT security best practices., * Manage and maintain Windows Server, Windows Workstations, Linux, and macOS environments. * Administer Azure cloud infrastructure, including virtual machines, networking, security policies, and backup solutions. * Oversee Microsoft 365, Teams, and Teams Voice, ensuring secure and reliable enterprise communication. * Deploy and maintain Hyper-V virtualization, optimizing performance and availability. * Administer database systems (MSSQL, PostgreSQL), ensuring performance, security, and access control. Network Security & Infrastructure Management * Design, implement, and manage enterprise network infrastructure, including firewalls, routers, switches, and VPNs. * Configure and maintain Azure networking, VPNs (L2TP/IPSec), DNS management, and inter-site connectivity. * Implement VLAN segmentation and Wi-Fi security policies. * Perform network traffic analysis and threat detection. Identity & Access Management (IAM) & Compliance * Administer Active Directory (AD) & Azure AD (Entra ID), managing authentication and access policies. * Enforce role-based access controls (RBAC), Multi-Factor Authentication (MFA), and Conditional Access policies. * Conduct regular access audits and reviews to ensure compliance with security policies. * Monitor authentication logs and system activity to detect potential unauthorized access. Endpoint Security & Threat Management * Deploy and manage Intune-based device compliance policies, ensuring secure endpoint configurations. * Administer Microsoft Defender for Endpoint and Microsoft Security Center for proactive threat detection and mitigation. * Enforce BitLocker and FileVault encryption, USB/media restrictions, and endpoint protection policies. * Ensure automated patch management for OS and third-party applications. * Incident Response, Security Monitoring, & Compliance * Investigate system anomalies, security events, and access patterns to maintain security and compliance. * Respond to security threats, unauthorized access attempts, and system vulnerabilities. * Ensure IT security policies are enforced to protect company assets, prevent data loss, and maintain compliance. Backup, Disaster Recovery, & Business Continuity * Deploy and manage Azure Backup & Recovery, database backups, and disaster recovery solutions for Cloud Systems. * Deploy backups and disaster recovery solutions for on-prem systems and services. * Conduct business continuity planning and failover testing to ensure IT resilience. Infrastructure Automation & Optimization * Implement templates for infrastructure automation. * Develop automation scripts (Bash, PowerShell, Python) to improve security and efficiency. Hands-On Workstation Setup & Hardware Installation * Set up and configure workstations, peripherals, and mobile devices for end-users. * Install and test hardware components (HDDs, SSDs, RAM, monitors, network devices, etc.). * Ensure all devices comply with security standards, access policies, and company configurations. End-User IT Support & Training * Provide technical support for IT-related issues, including hardware, software, and security concerns. * Train users on best practices for security, data protection, and proper system usage. * Authorization & Compliance: Responsible for ensuring the security, integrity, and appropriate use of company systems, networks, and data. Activities related to system monitoring, reviewing access controls, and investigating technical issues are conducted to support IT security, operational efficiency, and business continuity. All actions are performed in alignment with company policies, industry best practices, and regulatory compliance requirements. * Other duties as assigned. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)