Infrastructure leadership

• Train, develop, and performance-manage one junior infrastructure engineer, including setting goals, coaching, and providing regular feedback.
• Set priorities, assign work, and balance day-to-day operations with longer-term projects.
• Provide technical guidance and serve as the senior escalation point for complex infrastructure issues, partnering closely with the Technology Support team on escalated tickets, recurring problems, and coordinated rollouts.
• Build and maintain team standards, runbooks, and documentation.
• Partner with HR, Legal, and other stakeholders on email and access matters, such as legal holds and eDiscovery, mailbox access and delegation, access provisioning and offboarding, and support for internal investigations and audits.

Infrastructure and systems

• Own identity and access management across Okta, Microsoft Entra ID (Azure AD), and Active Directory, including lifecycle, MFA, SSO, and group-based access.
• Manage Microsoft 365 and Exchange Online, including hybrid Exchange where applicable, along with Google Workspace and collaboration tools such as Slack, Zoom, and SharePoint.
• Oversee endpoint management with Microsoft Intune, Windows Autopilot, and Jamf Pro across Windows and macOS.
• Manage Azure cloud infrastructure and core enterprise systems for reliability, performance, and cost.
• Oversee the email security gateway (Mimecast, Proofpoint, or similar) and email authentication standards, including SPF, DKIM, and DMARC.
• Maintain endpoint security tooling (CrowdStrike or equivalent) along with standardized configurations and compliance baselines.

Security and compliance

• Partner with Cybersecurity on audits, access reviews, and security initiatives.
• Drive improvements in security posture, automation, and operational efficiency.
• Support incident response for infrastructure and email-borne threats.

Projects and operations

• Own infrastructure projects from planning through delivery, including migrations, rollouts, and lifecycle refreshes.
• Manage vendor relationships, licensing, and renewals.
• Participate in an after-hours and weekend on-call rotation for critical incidents as needed.

• 8+ years in Corporate IT, Infrastructure, or Systems Engineering, with 2+ years of prior people management experience.
• Proven experience managing identity platforms: Okta, Microsoft Entra ID (Azure AD), and Active Directory.
• Strong experience administering Microsoft 365, Exchange Online, and Google Workspace.
• Hands-on experience with Azure cloud infrastructure.
• Experience with endpoint management using Microsoft Intune, Windows Autopilot, and Jamf Pro across Windows and macOS.
• Strong background in email security (Mimecast, Proofpoint, or similar) and email authentication (SPF, DKIM, DMARC).
• Solid understanding of endpoint security tooling (CrowdStrike or equivalent).
• Working knowledge of networking fundamentals: Wi-Fi, DNS, DHCP, and VPNs.
• Strong leadership, communication, and stakeholder management skills.
• Ability to balance operational support with project delivery and team development.
• Ability to regularly lift and carry objects weighing between 20 and 30 pounds.
• Certifications in cloud, identity, or IT management (preferred).
• Experience in a security-conscious or compliance-driven environment (preferred).

The annual base salary range for this role is $135,000 - $145,000

Forbes has estimated the compensation range set forth above in good faith. The compensation range is what we believe we will offer, and ultimately pay, a successful candidate. In determining this range, we consider the experience, level of education (if applicable to the role), knowledge, skills, and abilities required to be had by a successful candidate as well as the budget and the company’s pay rates, generally. This said, we may have to make changes to our compensation estimates and job descriptions from time to time and we expressly reserve the right to do so. Should we make any such changes, this advertisement will be revised to reflect such revisions. We encourage you to occasionally re-visit this advertisement to ensure that you are abreast of any changes. Thank you for your interest in joining Forbes!

#LI-RL1

#LI-HYBRID

This role may evolve over time. While this job description outlines the primary responsibilities, additional duties may be assigned as business needs change. Forbes aims to offer employees the flexibility they need in order to be successful. Some positions may require candidates to be based in a specific location for consideration while some roles may be fully remote (within the U.S.) if it aligns with the needs of the position. This position is only open to candidates residing in California, Colorado, Connecticut, District of Columbia, Florida, Georgia, Maine, Maryland, Massachusetts, New Jersey, New York, North Carolina, Pennsylvania, South Carolina, Tennessee, Texas, & Washington. Due to business operations and compliance requirements, we are unable to consider applicants based outside these states at this time.