Job Description
AIR Communities is seeking a seasoned Senior IT Security & Network Engineer to lead the design, implementation, and protection of our enterprise network infrastructure. This role is critical to ensuring secure, reliable connectivity across our real estate portfolio, including office buildings, and multifamily properties. The ideal candidate will bring deep technical expertise in networking and cybersecurity, along with experience supporting distributed environments typical of the REIT industry ensuring the integrity, confidentiality, and availability of our systems. Job expectations include executing on engineering initiatives, partnering with cross-functional teams, solving complex issues within AIR Communities’ network footprint, and mentoring / managing team members. Tune existing technologies to integrate the latest threat intelligence and develop requirements for new operational counter-measures and their deployment.
Where You Will Work
This position is located at our corporate office in the Denver Tech Center . Our office spans the top two floors of the building and features expansive views of the mountains and the downtown skyline.
What You Will Do
Network Engineering
- Architect and maintain scalable, secure network infrastructure across corporate offices and property sites (LAN / WAN / VPN / cloud).
- Lead network upgrades, migrations, and performance optimization initiatives.
- Manage and configure routers, switches, firewalls, load balancers and wireless access points across multiple locations
- Ensure high availability and disaster recovery readiness across network systems.
IT Security
Develop and enforce security policies for both enterprise and property-level systems.Monitor, identify and respond to security incidents, vulnerabilities, and threats.Manage security tools including firewalls, IDS / IPS, endpoint protection, and SIEM platforms.Conduct regular risk assessments, penetration testing, compliance audits, validate scan results for accuracy and completeness and ensure compliance with industry standards and regulations.Demonstrate application security scanning subject matter expertise across system, application, container, and cloud workloads.Maintain and update application security processes and procedures.Collaborate with internal teams to ensure secure application and system deployments.Core Infrastructure Management and monitoring
Administer and maintain physical and virtual servers supporting enterprise operations.Ensure server performance, patching, backups, and availability.Support Windows and Linux server environments, including Active Directory, DNS, DHCP, and file services.Manage core infrastructure components such as identity services, storage systems, virtualization platforms, and backup solutions.Implement server hardening and security best practices.Manage and enhance infrastructure monitoring tools to ensure system health and performance.Monitor network, server, and application metrics to proactively identify and resolve issues.Collaborate with vendors and internal teams to optimize monitoring strategies.Preferred experience with Arctic Wolf or similar managed detection and response (MDR) platformsLeadership & Strategy
Coach less experienced engineers and contribute to team development.Advise leadership on emerging threats and technology trends.Lead cross-functional initiatives to enhance network and security posture.Qualifications
Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.7+ years of experience in network engineering and cybersecurity.Expertise in TCP / IP, DNS, BGP, OSPF, VLANs, and VPN technologies.Hands-on experience with Cisco Meraki, Palo Alto, Fortinet, or similar platforms.Proficiency with SIEM tools (e.g., Sentinel, QRadar), and endpoint protection.Strong understanding of NIST, ISO 27001, and other security frameworks.Certifications such as CISSP, CCNP Security, CISM, or CEH preferredPreferred Skills :
Experience with cloud networking and security (Azure, AWS, GCP).MCP / MCSA / MCSE or AZ-104 / AZ-305 / AZ-500 certifications.Experience with PBX / VoIPScripting and automation (Python, PowerShell, Bash).Familiarity with Zero Trust architecture and identity management solutions.