Senior Infrastructure & Cybersecurity Engineer

A-Gas is seeking a Senior Infrastructure & Cybersecurity Engineer based in Rhome, TX to support the Head of Infrastructure in designing and evolving secure, resilient IT and OT infrastructure. In this onsite role, you will help strengthen business continuity, reduce operational risk by removing single points of failure, and ensure manufacturing and other critical systems remain available and protected. You will also partner with Managed Service Providers (MSPs) and OT and product stakeholders to identify cyber vulnerabilities and drive remediation through to measurable outcomes.

Role and focus

• Support the Head of Infrastructure to shape and evolve secure, resilient infrastructure and network architectures.
• Maximize business continuity by eliminating single points of failure.
• Protect critical assets across environments including manufacturing systems and legacy operating systems.
• Identify cyber vulnerabilities and design mitigations that improve overall resilience.

Collaboration and execution

• Work closely with Managed Service Providers (MSPs) to execute remediation and validate outcomes.
• Collaborate with OT engineers and Product Owners to maintain availability and security for manufacturing systems and critical business products.

Requirements

• 7+ years in infrastructure engineering with strong exposure to security and resilience design.
• Expertise with VMware virtualization and the Microsoft stack, including Entra ID/Azure AD, Windows Server, Intune, M365, Defender, and Sentinel.
• Proven experience designing redundant network architectures and implementing business continuity strategies.
• Familiarity with Meraki networking and firewall configuration for secure cross-business connectivity.
• Knowledge of CIS18 controls, NIST CSF, and Zero Trust principles.
• Strong scripting and automation skills using PowerShell and Bash, including the ability to validate MSP deliverables.

Technologies you will work with

• VMware, Entra ID/Azure AD, Windows Server, Intune, M365, Defender, Sentinel
• Meraki, PowerShell, Bash
• CIS18, NIST CSF, Zero Trust
• CyberArk, SIEM, SOAR, WAF, IDS/IPS, ICS

Desirable experience

• Experience with PAM solutions such as CyberArk or similar.
• Exposure to SIEM/SOAR tuning, WAF, and IDS/IPS.
• Familiarity with industrial control systems (ICS) and OT security best practices.

Certifications

• AZ-500 (Azure Security Engineer), SC-100 (Cybersecurity Architect), CISSP, or equivalent

Benefits

• Competitive and attractive employment package
• Employer pension scheme
• Flexible working hours (depending on the role)
• Collective benefits program
• Employee Assistance Program (support for work and personal matters)
• Cycle to work scheme
• Team activities in summer and around Christmas