The IT Engineer is responsible for deploying, managing, and maintaining IT infrastructure and cybersecurity tooling. The position applies an AI-first mindset to proactively identify automation opportunities, build with scale in mind, and use modern tooling to eliminate toil. The role is equally focused on customer experience and recognizes that the systems it builds and maintains are the foundation of how every USPack employee supports our customers every day.

To perform this job successfully, an individual must be able to perform the following essential duties satisfactorily; other duties may be assigned. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Duties and Responsibilities:

Infrastructure & Systems Engineering (40%)

Engineer, deploy, and continuously optimize enterprise infrastructure spanning on-premises systems, networking, AWS, Azure, and Microsoft 365. Develop and maintain infrastructure automation leveraging IaC technologies such as Terraform.
Design and implement scalable, resilient infrastructure with an emphasis on availability, performance, security, and automation.
Architect and maintain Intune endpoint management; including device provisioning, configuration management, application deployment, patching, compliance policies, and endpoint lifecycle automation.
Expand and operationalize the organization's AI Center of Excellence through engineering initiatives involving automation, machine learning, Retrieval-Augmented Generation (RAG), etc.
Evaluate emerging infrastructure and AI technologies and engineer proof-of-concept solutions to determine their viability for enterprise adoption.

Cyber & Risk Reduction (40%)

Design and continuously improve security architecture and technical controls across endpoints, identity, networks, and SaaS applications ensuring alignment with CIS, NIST CSF, or SOC 2 frameworks.
Perform technical security assessments, develop technical remediation strategies, and threat risk analysis to identify vulnerabilities, attack paths, control gaps, and opportunities for risk reduction.
Schedule and facilitate Security Awareness Training to promote cybersecurity best practices.
Architect, implement, manage, and maintain Zero Trust security controls across identity, endpoints, applications, and network infrastructure.
Engineer security automation and monitoring capabilities to improve detection, response, compliance, and operational visibility.
Develop and maintain technical security baselines, configuration standards, and control validation processes.

SaaS & IT Operations (20%)

Optimize the enterprise SaaS ecosystem, including integration architecture, provisioning, identity integration, SSO, lifecycle management, and access governance.
Identify opportunities to eliminate manual IT processes through automation, workflow engineering, and self-service capabilities.
Coordinate device repairs and maintenance with external vendors and service providers.
Design and implement SSO and automated identity provisioning integrations using Microsoft Entra ID and industry-standard authentication protocols including OAuth 2.0 and OIDC.
Engineer automated HelpDesk and IT service workflows to reduce operational overhead and improve resolution times.
Provide L1/L2 technical support as needed.
Diagnose complex infrastructure and endpoint issues through systematic root cause analysis and implement permanent corrective solutions.
Support telephony and VoIP platforms, including call routing, endpoint configuration, integrations, and troubleshooting.
Perform other duties as assigned.

Qualifications:

Knowledge, Skills and Abilities:

Deep proficiency with Identity & Access Management (IAM) to include familiarity with authentication protocols OIDC and OAuth2.
Experienced with Microsoft Windows Server 2016 and newer, and Windows 11.
Extensive administration experience with Entra AD, Intune, Exchange, Defender, GPOs, DNS, DHCP and Purview.
Understanding of telephony and VoIP systems, including call routing and endpoints (Sangoma, RingCentral, etc.).
Strong understanding of ITIL/ITSM framework.
Strong problem-solving skills with the ability to troubleshoot technical issues effectively and efficiently.
Ability to work additional hours as needed.

Education, Experience, Certificates and Licenses:

Bachelor’s degree in IT, computer science, or a related field.
8+ years of IT experience, preferably supporting remote environments, or 12 years of experience in lieu of a degree.
5+ years of AWS experience.
3+ years scripting experience; bonus points for Infrastructure as Code (e.g. Terraform)
Foundational AI knowledge.
ITIL Change and Incident Management.

Physical Demands and Work Environment:

This position is generally performed in a standard office environment. While performing the duties of this job, the employee is regularly required to sit for extended periods; use a computer keyboard, monitor, and telephone; and communicate effectively in person, in writing, and electronically. The employee must occasionally lift or move office materials weighing up to 15 pounds. Some travel may be required to support audits, financing activities, transaction diligence, or other business needs. Reasonable accommodations will be made to enable individuals with disabilities to perform the essential functions of this role.

Equal Employment Opportunity:

US Pack Services, LLC is an equal opportunity employer. All qualified applicants and employees will receive consideration for employment, promotion, and all other terms and conditions of employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, or local law.