> Markdown version of [/jobs/ext/2619031-systems-security-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/2619031-systems-security-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Systems & Security Infrastructure Engineer - **Company:** Highland Engineering, Inc. - **Location:** Howell, MI, United States - **Experience:** Expert - **Salary:** $90,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Ubuntu (Operating System), Cyber Security, System Configuration, IT Management, Internet Protocol Security (IP SEC), Internetworking, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Windows Servers, Network Segmentation, Open Shortest Path First (OSPF), Open Source Technology, Public Key Infrastructure, Windows PowerShell, Remote Access Technology, Azure Active Directory, Ansible, Virtual Router Redundancy Protocols, Virtualization Technology, EndPointSecurity, Scripting, Sonicwall, Firewalls (Computer Science), Git, Microsoft InTune, Docker, User Accounts - **Published:** August 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=84011be8cca39cf2 ## About the Role * 6+ years in Windows/Active Directory administration in a security-sensitive or regulated environment * Familiarity with Ubuntu and Docker system administration/configuration. * Broad experience with PKI, network segmentation, and secure remote access solutions. * Familiarity with NIST-aligned control frameworks (CMMC, 800-171, DFARS) and how they translate into technical operations. * Scripting/automation (PowerShell, Ansible, or similar) for repeatable configuration and evidence capture. * Ubuntu expertise * Strong documentation habits and ability to mentor less-experienced staff. * Strong customer service orientation and documentation skills. Preferred Skills & Experience: * Experience with engineering/manufacturing applications and multi-building campus networks. * Familiarity with open-source and Git-based evidence or configuration systems. * Familiarity with SonicWall firewalls, Netgear switching, OSPF, VRRP, IPSec, VPN, and other internetworking technologies. ## Description Job Summary: HEI is a defense manufacturer operating in a tightly regulated, security-sensitive environment. While our IT leadership defines and drives the security strategy, this role serves as the hands-on technical lead responsible for executing and sustaining that strategy. With core secure architecture and controls already in place, we are seeking a dedicated in-house expert to maintain, refine, and document these systems as our operations continue to evolve. This role will directly maintain and evolve a state-of-the-art secure IT environment in a mission-critical defense manufacturing setting under the guidance of a security-savvy CIO., * Operate and harden Windows Server/Active Directory, virtualization, storage, and switching across a multi-building campus. * Administer Microsoft 365 GCC-High, Azure AD, Intune/Defender for Endpoint, and physical authentication devices. * Provide first-line support for Windows desktops, laptops, and user accounts; support end-users. * Maintain and extend our PKI infrastructure, certificate lifecycle, and secure remote access gateways. * Support privileged access workstations, enclave segmentation, and boundary controls. * Implement secure configuration baselines for engineering and ERP applications. * Maintain high-quality technical documentation (SOPs, change logs, configuration baselines) in a Git-based system. * Coordinate overflow or after-hours work with our external support partners; serve as the internal escalation point. * Provide periodic security control reviews and evidence updates to support ongoing audits and assessments. * Perform other duties as assigned to support operations and corporate objectives. What We Value: * Operate with ownership: We look for someone who will treat the environment like their own, proactively solving problems rather than waiting for direction, but understands the environment needs consistency and process, not hurried band-aides. * Process-minded: Comfortable following SOPs and recording actions in a structured way (tickets, process logs, change records, etc.). * Effective communicator: Comfortable explaining complex issues to non-technical leaders and documenting them clearly; can work with a variety of personalities. * Dependable and discreet: Understands the sensitivity of the environment and handles information responsibly. * Mission-driven: Understands the stakes of working in a DoD manufacturing environment and acts accordingly; sense of urgency, and stays available for the occasional after-hours emergency ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)