Engineering
Infrastructure and Security Architect
Designs what gets built, runs the security work that keeps clients out of trouble, and earns a seat in the room when a business owner decides what the next two years of their technology look like.
The job
This is a hands-on architecture role, not a management one. You design client infrastructure and then stay close while it gets built. You architect Microsoft 365 and Azure environments (identity, security, and governance included) and you run security assessments that end in remediation plans a business owner can actually act on. When something goes wrong at a client, you are the escalation the engineers reach for.
You will work alongside our senior technical leadership on the largest designs and the most complex compliance engagements, with room to take on more of both as you prove out. This is the role for an engineer who has been the strongest technical person on their team and is ready to spend most of the week on design, security, and client direction instead of tickets.
Full-time and exempt, reporting to the Owner and General Manager. The day is eight hours inside an 8:00 a.m. to 6:00 p.m. window, with a full hour for lunch.
What you will do
Architecture and design
- Design client infrastructure (network, server, cloud, and hybrid) and oversee it being built
- Architect Microsoft 365 and Azure environments, including identity, security, and governance
- Design business continuity and disaster recovery that has been tested, not just documented
- Contribute to multi-year technology roadmaps for managed clients
Security
- Run client security assessments and drive the remediation work that follows
- Serve as an escalation point for security incidents
- Support compliance engagements (CMMC, HIPAA, NIST 800-171, PCI) under senior direction
- Help maintain and improve our security standards across the client base
Client engagement
- Sit with clients at the owner and manager level and put technical direction in business terms
- Support solution scoping and proposals with accurate, buildable designs
- Coach engineers and support staff on designs you hand off
What we are looking for
Required
- Six or more years of professional IT experience, including two or more years as a senior engineer, lead engineer, or architect
- Strong network and infrastructure design experience across multiple environments
- Substantial Microsoft 365 and Azure experience, including identity and security configuration in production
- A real cybersecurity background: assessments, hardening, or incident response, not just antivirus administration
- Business continuity and disaster recovery design experience, including actual restores
- The ability to present technical decisions to non-technical decision makers
- Valid driver's license and reliable transportation
- Legal authorization to work in the U.S. without sponsorship
- Full-time on-site availability at Painesville or Hudson
Preferred
- Security+, CySA+, SSCP, or progress toward CISSP or CISM
- Exposure to CMMC, HIPAA, or NIST 800-171 engagements
- Microsoft associate or expert level certifications (AZ-104, AZ-500, SC-100, SC-200)
- Prior managed service provider experience
- Exposure to pre-sales scoping or solution design
What this role is not
- Not a management position. There are no direct reports.
- Not remote or hybrid. The work is on-site, five days a week, with regular client visits across Northeast Ohio.
- Not an IT Director or security officer title in disguise. This is a working technical role.
- Not a role where you will be handed finished standards to follow. You will help write them.
What everybody here gets
These come with the job, whichever job it is.
Health insurance
A group medical plan, with the company paying 50 percent of your premium. Dependents can be added at group rates.
Direct Primary Care
On top of the plan, the company pays for a membership with a primary care practice. Routine care means calling your doctor, not starting a claim.
401(k) matching
The company matches the first 3 percent of your pay dollar for dollar, then half of the next 2 percent. Put in 5 percent and the company puts in 4.
Paid time off
PTO accrues every pay period, and the rate grows with your length of service. Up to 80 hours carries into the next year.
Ten paid holidays
Six company holidays, plus four floating days a year that you choose and your supervisor schedules.
Paid weekly
Payday is every Friday, by direct deposit, for the week before. Most of this industry pays twice a month.
A schedule with some give
Eight hours inside an 8:00 a.m. to 6:00 p.m. window with a full hour for lunch. Eight to five and nine to six are both normal, and other shifts get approved.
Training and certification
Certifications paid for and time made for them, plus leadership tracks and internships.
Bereavement leave
Three paid days for an immediate family member, and one paid day for an extended family member, somebody you were close to, or a pet.
Mileage and expenses
Approved travel is reimbursed on a submitted log, and business expenses on itemized receipts. Your commute is not travel, and nobody pretends otherwise.
Donation matching
Give to a cause you care about and the company gives alongside you. What you support is yours to choose.
Referral program
Rewards for referrals, for everybody on the payroll rather than only the people in sales.
Apply for this role
Send your resume and a few sentences about why this role interests you. There is no account to create and no long form to fill out.
Equal employment opportunity
Tech Dynamix is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic under federal, state, or local law. Reasonable accommodations are available on request during the application process. Ask, and it will be arranged.