Cybersecurity and Infrastructure Lead

The Cybersecurity and Infrastructure Lead will oversee infrastructure and cybersecurity implementation across Marquette-Alger RESA and partner districts. Reporting to the Chief Technology Officer (CTO), this onsite role focuses on enterprise technology delivery, network integrity, SOC 2 compliance and audit readiness, and secure operations.

Role Overview

In this leadership position, you will execute infrastructure and security priorities aligned with CTO direction and department planning. You will deliver and maintain core server, identity, networking, virtualization, backup, and security monitoring capabilities, while ensuring Agency systems are protected against malware and cyberattacks. You will also support incident response planning and provide technical guidance and training for employees.

Key Responsibilities

• Execute infrastructure and security work based on priorities approved through CTO direction and department planning.
• Lead installation and management of Windows and Linux servers, including Active Directory, DNS/DHCP, NPS, Azure AD Connect, and NTFS permissions.
• Manage hybrid environments across Active Directory, Entra ID (Azure), and Google Workspace, including users, computers, and Group Policies.
• Implement and maintain physical and virtual technologies including VMware, vCenter/vSAN, and high-availability clusters (VxRail preferred).
• Configure and manage enterprise networking, including WAN/LAN/WLAN, routers, firewalls, and wireless platforms (Aruba, Cisco, and Meraki).
• Maintain network integrity by managing switches, firmware, VLANs, routing protocols, and redundancy.
• Oversee lifecycle management of physical and virtual servers and SAN infrastructure, including upgrades and security patches.
• Ensure business continuity by implementing and managing system backup solutions (Veeam preferred).
• Drive cybersecurity implementation by deploying CIS Critical Security Controls and related best practices to protect Agency systems.
• Design and manage security solutions, including network security assessments, audits, and monitoring for suspicious activity.
• Collaborate on incident response by assisting department leadership with incident response planning, documentation, and procedures.
• Conduct security reviews of new and existing systems to align with department security priorities.
• Maintain and monitor network logs to support visibility and rapid response to potential threats.
• Automate OS and software deployment for Windows and macOS using tools such as Intune, Mosyle, and FileWave.
• Administer cloud productivity suites, including Google Workspace for Education and Microsoft 365.
• Manage physical security and communications, including door access controls, surveillance systems, and the RESA telephone/E911 system.
• Provide expert-level troubleshooting and customer service to support staff and classroom environments.
• Maintain documentation of configurations, inventory, and projects to enable effective, scalable technology support.
• Support SOC 2 Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, and Privacy) across in-scope systems and infrastructure.
• Map and maintain technical controls to SOC 2 requirements, including access controls, logical/physical security, change management, and system monitoring.
• Assist with SOC 2 audit readiness by preparing, organizing, and maintaining evidence, control documentation, and system descriptions.
• Collaborate with the CTO and department leadership to develop, document, and enforce information security policies and procedures aligned to SOC 2 control objectives.
• Perform periodic control testing and self-assessments; verify operating effectiveness and identify remediation needs.
• Track and remediate audit findings, control gaps, and exceptions within established timelines, including documentation of corrective actions.
• Maintain audit trails, access logs, and monitoring records sufficient to demonstrate continuous compliance.
• Support vendor and third-party risk management activities, including review of subservice organization SOC reports and assessment of vendor security posture.
• Contribute to change management processes to ensure authorized, tested, documented, and reviewed system modifications aligned with SOC 2 requirements.
• Coordinate with department leadership during SOC 2 examination periods to facilitate auditor requests and ensure timely responses.
• Perform other duties as assigned to support evolving department and partner district needs.

Required Qualifications

• Five (5)+ years of hands-on experience in Information Technology, specifically in Windows server management and maintaining LAN/WAN/WLAN environments.
• Demonstrated proficiency in computer and software use, including Microsoft Office Suite, and data formats (XML).
• Demonstrated ability to establish and maintain positive relationships and collaborate and problem solve with diverse partners and stakeholders.
• Excellent interpersonal and communication skills, including verbal and written communication.
• Ability to learn new technical skills quickly and independently.
• Ability to analyze needs and problems and develop procedures to solve them.
• Ability to work cooperatively and contribute as part of a team.
• Self-directed approach with the ability to meet timelines.
• Ability to serve students, staff, and the public pleasantly and efficiently.

Technologies and Tools

Windows, Linux, Active Directory, DNS/DHCP, NPS, Azure AD Connect, NTFS permissions, Group Policies, Entra ID (Azure), Google Workspace, VMware, vCenter/vSAN, VxRail, high-availability clusters, WAN/LAN/WLAN, routers, firewalls, wireless platforms (Aruba, Cisco, Meraki), switches, VLANs, routing protocols, SAN infrastructure, Veeam, CIS Critical Security Controls, incident response, Intune, Mosyle, FileWave, Google Workspace for Education, Microsoft 365, door access controls, surveillance systems, RESA telephone/E911 system, SOC 2 Trust Services Criteria, ISO 27001, NIST, subservice organization SOC reports.

Preferred Qualifications

• Bachelor’s Degree in technology, computer science, computer information systems, or related field, or equivalent combination of significant education, training, certifications, and experience.
• Server+, Network+, CCNA, MCP, or similar certifications highly desirable.
• Experience supporting SOC 2 audits or comparable compliance frameworks (e.g., ISO 27001, NIST), including evidence collection and control documentation.
• Compliance or audit-related certifications such as CISA, CISM, or equivalent highly desirable.
• Prior experience supporting a local school district, ISD, or RESA.

Additional Knowledge, Skills, and Abilities

• Ability to orchestrate multiple activities and projects simultaneously while maintaining proactive communication with stakeholders.
• Ability to handle issues fairly, treat diverse populations with dignity and respect, and act in a highly ethical manner.
• Ability to work in a fast-paced environment while maintaining flexibility in thinking and actions.

Special Conditions

• Must keep the affairs of Marquette-Alger RESA and LEAs confidential at all times.
• Must uphold confidentiality of privileged and sensitive student/staff information.
• May require occasional regional job travel using a personal vehicle.
• Occasional overnight travel downstate for conferences and activities of professional organizations.

Physical Demands

• Regularly required to sit or stand for extended periods; ability to walk, bend, and reach to inspect hardware or network infrastructure.
• Frequent use of hands and fingers to operate computer keyboards and specialized technical tools.
• Occasionally required to lift, carry, or move hardware weighing up to 35 lbs.
• Ability to read technical manuals and monitor displays and communicate clearly in person or via digital platforms, often in environments with moderate ambient noise (e.g., server rooms).

Employment Details

• Full-time; 12-month position; non-union.
• Regular and reliable job attendance, performance, and the physical ability to do the job are required.
• Reports to: Chief Technology Officer.
• Compensation: Grade on Marquette-Alger RESA Non-Affiliated Salary Schedule.

Location, Salary, and Deadline

• Location: Marquette, MI (onsite)
• Salary: USD 93,917 - 115,506 per year
• Application deadline: 12:00 p.m., Monday, November 23rd, 2026