Senior IT Infrastructure & Security Engineer (On Site)

Rogers Group, Inc., headquartered in Nashville, is a privately held aggregates and asphalt highway construction company operating in 13 states with over 3,500 employees. RGI, established in 1908, has the distinction of being recognized as the largest privately held aggregate producer in the United States. 

Rogers Group is currently seeking an on-site Senior IT Infrastructure & Security Engineer in the Nashville, TN area for our Corporate operations, reporting directly to the Manager of IT Infrastructure and Cybersecurity. This hands-on role combines infrastructure engineering, cybersecurity, and automation across Microsoft cloud services, identity, endpoints, networks, and on-premises data centers. You will design and implement technical improvements, troubleshoot complex issues, strengthen security controls, and reduce manual work. The successful candidate for this role will work with IT teammates, business partners, and technology providers to deliver practical solutions that improve reliability, protect company information, and support business continuity.

Job Responsibilities:

Infrastructure and reliability

• Design, implement, and maintain secure, reliable infrastructure across Azure, Microsoft 365, Windows Server, virtualization, and storage.
• Manage hybrid identity and core infrastructure services, including Active Directory, Microsoft Entra ID, Group Policy, and related integrations.
• Manage the endpoint lifecycle, including device provisioning, application deployment, configuration, and retirement.
• Improve infrastructure monitoring to identify availability and performance issues early and prevent recurring incidents.
• Manage capacity, performance, and infrastructure lifecycle needs.
• Maintain backup and recovery capabilities and conduct documented recovery exercises to validate that critical services can be restored within established business recovery requirements.
• Lead upgrades, migrations, and infrastructure projects from planning and testing through implementation and operational handoff.

Cybersecurity and resilience

• Implement and improve identity and access controls, including multifactor authentication, Conditional Access, least privilege, and privileged access management.
• Automate and improve employee onboarding, role changes, and offboarding, including timely access provisioning and removal in coordination with business and application owners.
• Configure and tune endpoint protection, security monitoring, and other security platforms to improve threat detection and alert quality.
• Investigate security alerts and support containment, remediation, and recovery in coordination with internal teams and external security partners.
• Identify and prioritize vulnerabilities and configuration weaknesses; coordinate remediation based on risk and operational impact.
• Apply secure configuration baselines, patching standards, and endpoint compliance policies across cloud and on-premises systems.
• Partner with site operations and vendors to secure infrastructure and remote access supporting field locations while respecting safety and production requirements.

Automation and continuous improvement

• Develop and maintain reusable scripts, templates, and configurations using PowerShell, APIs, or comparable tools, supported by version control, testing, documentation, and change controls.
• Use approved AI-assisted tools to support scripting, troubleshooting, and documentation while protecting sensitive information and validating outputs before use.
• Identify opportunities to simplify the environment, reduce manual effort, and improve service quality and cost efficiency.

Technical leadership and collaboration

• Serve as a senior escalation point for complex infrastructure issues, leading root cause analysis and durable corrective actions.
• Contribute to technology roadmaps and communicate recommendations, risks, costs, and tradeoffs clearly.
• Mentor teammates and maintain practical documentation, diagrams, and operational runbooks.
• Coordinate changes with business stakeholders to minimize disruption to office and production operations.
• Participate in scheduled after-hours maintenance.
• Travel to company locations as required.
• Perform occasional hands-on equipment installation and maintenance, including moving equipment weighing up to 50 pounds, with appropriate assistance or accommodation.

Qualifications:

Required:

• Five or more years of relevant infrastructure, systems engineering, or related experience, with demonstrated ability to independently deliver complex technical work. 
• Hands-on experience administering both Windows Server and Linux environments, including configuration, patching, security hardening, and troubleshooting. 
• Experience managing enterprise identity, directory services, access controls, and cloud productivity platforms. 
• Hands-on experience with enterprise endpoint management, including device provisioning, application deployment, patching, and compliance. 
• Experience configuring and troubleshooting enterprise networking, including switching, routing, firewalls, VPNs, DNS, DHCP, and VLANs. 
• Experience with virtualization, enterprise storage, backup and recovery, and infrastructure monitoring. 
• Practical experience implementing security controls and investigating or remediating security issues. 
• Ability to automate administrative tasks using scripting languages such as PowerShell, Bash, or Python, with experience using Git or similar version control. 
• Strong troubleshooting skills and the ability to prioritize work based on business impact and security risk. 
• Clear communication, collaborative problem-solving, and a service-oriented approach. 
• Relevant skills gained through professional experience, education, technical training, or a combination of these pathways. 

Preferred:

• Microsoft enterprise platforms, including Windows Server, Active Directory, Microsoft Entra ID, Azure, Microsoft 365, Defender, Sentinel, Intune, and Windows Autopilot. 
• Red Hat Enterprise Linux (RHEL) administration. 
• Fortinet networking and security solutions, including FortiGate firewalls, VPNs, and network security policies. 
• VMware vSphere/vCenter or comparable virtualization platforms. 
• Cohesity or comparable enterprise backup and recovery platforms. 
• Pure Storage, Fibre Channel SANs, or comparable enterprise storage. 
• Infrastructure as code and automated configuration management. 
• Experience supporting distributed industrial environments. 
• Relevant Microsoft, Red Hat, Fortinet, infrastructure, networking, or cybersecurity certifications.
• Experience with every product is not required. We value transferable skills, sound technical judgment, and the ability to learn.

Rogers Group provides extensive benefits, strong compensation, and a safe, drug-free working environment. 

As a Rogers Group employee, you will have access to our competitive company perks, including: 

• Medical, Dental, Vision Insurance plus Health Savings Account with annual company contribution. 
• Company provided Group Life and Accidental Death & Dismemberment insurance. 
• Retirement 401(k) with company contribution and match at one year of service. 
• Company provided Short- and Long-Term Disability. 
• Paid Holiday’s including Christmas shutdown between Christmas and New Years Day. 
• Paid vacation available after 180-day probationary period and accrued based on years of service. 
• Annual performance-based merit increases. 
• Career growth/advancement opportunities. 

RGI EEO Statement 

It is the policy of Rogers Group, Inc. to recruit, hire, and promote individuals based on demonstrated merit and qualifications. We are committed to providing a work environment that is free from discrimination, harassment, and retaliation as protected by applicable federal, state, or local laws. 

All applications are accepted online at www.rogersgroupinc.com.