[Hiring] IT Infrastructure Engineer @Renalogic

Role Description

The IT Infrastructure Engineer is the senior technical lead for infrastructure and security engineering on the IT/IS team. This role designs and drives Renalogic's move to a Zero Trust security model, builds the automation that keeps our cloud environment secure and efficient, and takes ownership of new technical ground where there is no existing playbook. The role sets the technical standards the IT team works to and helps protect the Protected Health Information (PHI) our clients and members trust us with, in a fully remote environment.

In this position, you'll monitor, maintain, and improve Renalogic's IT/IS controls, networks, cloud infrastructure, and security systems to ensure proper uptime, performance, user access, and security. This role leads the company's move to a better security model (Zero IT) and builds the automation that keeps our environment secure and efficient, working closely with your Coach, the IT team, and vendors in a fully remote environment.

Qualifications

• Seven or more years in infrastructure, systems, or security engineering, including at least three in a senior or lead technical role.
• Hands-on scripting and programming: PowerShell plus Python, JavaScript/Node.js, or any other scripting languages; able to read, write, and maintain production code.
• Deep experience with Microsoft 365, Entra ID, Intune security, and strong cloud-provider experience (Azure and/or AWS).
• Practical knowledge of Zero Trust and security fundamentals (networking, DNS, email authentication, firewalls, segmentation).
• Experience supporting SOC 2 and/or HIPAA compliance and managing vendors or MSPs.
• Ability and willingness to travel multiple times a year, which will include overnight stays for corporate gatherings, conferences, and/or health fairs.
• Ability to attend and professionally engage in video meetings.
• Reliable power and secured internet that runs at 11 mbps or more.
• A designated, private area to conduct work with minimal interruptions is required.
• Strong technological skills, meaning you can effectively and efficiently use computers, peripheral equipment, and applications/systems, including Microsoft products.
• Autonomous self-starter who is comfortable with ambiguity and navigate change.
• Creative mindset and ability to appropriately challenge the status quo.
• Superb written and oral communication skills.
• Ability to overcome obstacles with a ‘yes if...' approach.
• Ability to effectively balance competing deadlines without losing focus on the bigger picture.

Requirements

• Lead and, when needed, perform the installation, upgrade, and configuration of server, network, cloud (AWS and Azure), and security components in line with business objectives.
• Keep infrastructure current on patches, firmware, backups, and licensing; own server patch approval and coordinate installation with minimal impact.
• Set configuration standards for all servers and cloud workloads, including systems connected by third parties.
• Maintain architecture, network, and backup/recovery documentation and standards; plan and lead periodic disaster recovery testing.
• Design and lead Renalogic's Zero Trust roadmap across identity, devices, network, applications, and data, including phishing-resistant MFA, Conditional Access, and least-privilege admin access.
• Configure and maintain monitoring tools that report abnormal conditions; lead the response to security incidents and other IT/IS risks.
• Establish audit tools and processes to keep network, security, and system controls compliant with SOC 2 and HIPAA; conduct a quarterly audit of administrative and system access.
• Write, test, and maintain automation using PowerShell, Python, AWS Lambda, and the Microsoft Graph API to remove manual work across identity, Microsoft 365, and cloud operations.
• Manage scripts and infrastructure as code in source control and own the automation of the managed file transfer platform (AWS Transfer Family).
• Serve as the top technical escalation point for the IT team and coach team members on scripting, automation, and security practices.
• Partner with and, at times, manage vendors and contractors, including technical security reviews of vendors with access to PHI.
• Work closely with your Coach on priorities; track KPIs, report on progress, help manage the infrastructure budget, and take part in leadership meetings and committees as directed.
• Take ownership of new, unproven projects from research through production, going beyond the ticket to deliver a complete, working result.

Benefits

• Market competitive salary and company stock options.
• Potential for annual merit increases and bonuses contingent on the company's fiscal performance.
• Generous time off and paid holidays because we appreciate recharging.
• Partially paid leave for qualifying family or medical reasons once employment eligibility is met.
• A comprehensive health benefits plan with a portion of premiums covered by the company. Available benefits include medical, dental, vision, life insurance, short term disability, long term disability, critical illness, accident, hospital indemnity, identity theft, and pet insurance. Eligibility to participate begins the first of the month following 60 days of employment.
• 401k with up to 4% employer match. Eligibility to participate begins the first of the month following 6 months of employment.