IT Infrastructure Engineer

Renalogic is dedicated to helping our clients manage the human and financial costs of chronic kidney disease. To help us in our mission, we hire people who are humble, hungry, and smart. And it sure helps if you have a sense of humor. We're not perfect, but we're trying to build a company that we are all proud of. Our 96% client retention suggests we’re on the right path.  

The IT Infrastructure Engineer is the senior technical lead for infrastructure and security engineering on the IT/IS team. This role designs and drives Renalogic’s move to a Zero Trust security model, builds the automation that keeps our cloud environment secure and efficient, and takes ownership of new technical ground where there is no existing playbook. The role sets the technical standards the IT team works to and helps protect the Protected Health Information (PHI) our clients and members trust us with, in a fully remote environment.

In this position, you’ll monitor, maintain, and improve Renalogic’s IT/IS controls, networks, cloud infrastructure, and security systems to ensure proper uptime, performance, user access, and security. This role leads the company’s move to a better security model (Zero IT) and builds the automation that keeps our environment secure and efficient, working closely with your Coach, the IT team, and vendors in a fully remote environment.

• Lead and, when needed, perform the installation, upgrade, and configuration of server, network, cloud (AWS and Azure), and security components in line with business objectives.
• Keep infrastructure current on patches, firmware, backups, and licensing; own server patch approval and coordinate installation with minimal impact.
• Set configuration standards for all servers and cloud workloads, including systems connected by third parties.
• Maintain architecture, network, and backup/recovery documentation and standards; plan and lead periodic disaster recovery testing.

• Design and lead Renalogic’s Zero Trust roadmap across identity, devices, network, applications, and data, including phishing-resistant MFA, Conditional Access, and least-privilege admin access.
• Configure and maintain monitoring tools that report abnormal conditions; lead the response to security incidents and other IT/IS risks.
• Establish audit tools and processes to keep network, security, and system controls compliant with SOC 2 and HIPAA; conduct a quarterly audit of administrative and system access.

• Write, test, and maintain automation using PowerShell, Python, AWS Lambda, and the Microsoft Graph API to remove manual work across identity, Microsoft 365, and cloud operations.
• Manage scripts and infrastructure as code in source control and own the automation of the managed file transfer platform (AWS Transfer Family).

• Serve as the top technical escalation point for the IT team and coach team members on scripting, automation, and security practices.
• Partner with and, at times, manage vendors and contractors, including technical security reviews of vendors with access to PHI.
• Work closely with your Coach on priorities; track KPIs, report on progress, help manage the infrastructure budget, and take part in leadership meetings and committees as directed.
• Take ownership of new, unproven projects from research through production, going beyond the ticket to deliver a complete, working result.

• Seven or more years in infrastructure, systems, or security engineering, including at least three in a senior or lead technical role.
• Hands-on scripting and programming: PowerShell plus Python, JavaScript/Node.js, or any other scripting languages; able to read, write, and maintain production code.
• Deep experience with Microsoft 365, Entra ID, Intune security, and strong cloud-provider experience (Azure and/or AWS).
• Practical knowledge of Zero Trust and security fundamentals (networking, DNS, email authentication, firewalls, segmentation).
• Experience supporting SOC 2 and/or HIPAA compliance and managing vendors or MSPs.
• Ability and willingness to travel multiple times a year, which will include overnight stays for corporate gatherings, conferences, and/or health fairs.
• Ability to attend and professionally engage in video meetings.
• Reliable power and secured internet that runs at 11 mbps or more.
• A designated, private area to conduct work with minimal interruptions is required.
• Strong technological skills, meaning you can effectively and efficiently use computers, peripheral equipment, and applications/systems, including Microsoft products.
• Autonomous self-starter who is comfortable with ambiguity and navigate change.
• Creative mindset and ability to appropriately challenge the status quo.
• Superb written and oral communication skills.
• Ability to overcome obstacles with a ‘yes if...’ approach.
• Ability to effectively balance competing deadlines without losing focus on the bigger picture.