Cybersecurity and Infrastructure Lead

SUMMARY: 

The Cybersecurity & Infrastructure Lead serves as the lead for infrastructure and cybersecurity implementation across Marquette-Alger RESA and partner districts. Reporting to the Chief Technology Officer (CTO), this role proactively executes high-priority infrastructure projects and security protocols aligned with departmental strategic planning. In addition to spearheading new application rollouts and facility expansions, the Lead ensures the integrity and resilience of the network environment through rigorous security management, including accountability for SOC 2 compliance and audit-readiness activities across in-scope systems. While providing expert-level end-user support, the primary focus remains on the successful delivery and maintenance of enterprise-level technology systems.
 

MINIMUM QUALIFICATIONS: 

• Five (5)+ years of hands-on experience in Information Technology, specifically in Windows server management and maintaining LAN/WAN/WLAN environments.
• Demonstrated proficiency in computer/software use including Microsoft Office Suite, and data formats (XML).
• Demonstrated ability to establish/maintain positive relationships and collaborate/problem solve with diverse partners and stakeholders. 
• Excellent interpersonal, verbal, and written communication skills.
• Ability to learn new technical skills quickly and independently.
• Ability to analyze needs/problems and develop procedures to solve.
• Ability to work cooperatively with others and be part of a team.
• Self-directed individual with the ability to meet timelines.
• Ability to serve students, staff, and the public pleasantly and efficiently.

 

PREFERRED QUALIFICATIONS:

• Bachelor’s Degree in technology, computer science, computer information systems or related field OR equivalent combination of significant education, training, certifications, and experience.
• Server+, Network+, CCNA, MCP, or similar certifications highly desirable.
• Experience supporting SOC 2 audits or comparable compliance frameworks (e.g., ISO 27001, NIST), including evidence collection and control documentation.
• Compliance- or audit-related certifications such as CISA, CISM, or equivalent highly desirable.
• Prior experience in a local school district, ISD, or RESA.

 

ESSENTIAL DUTIES AND RESPONSIBILITIES:  

• Execute infrastructure and security work within priorities approved through CTO direction and department planning.
• Lead the installation and management of Windows and Linux servers, including Active Directory, DNS/DHCP, NPS, Azure AD Connect and NTFS permissions.
• Manage hybrid environments, including users, computers, Group Policies across Active Directory, Entra ID (Azure), and Google Workspace. 
• Implement and maintain physical and virtual technologies, specifically VMware, vCenter/vSAN, and high-availability clusters (VxRail preferred). 
• Configure and manage enterprise-level networking, including WAN/LAN/WLAN, routers, firewalls, and wireless platforms (Aruba, Cisco, and Meraki).
• Maintain network integrity by managing switches, firmware, VLAN’s routing protocols, and redundancy.
• Oversee lifecycle management of physical/virtual servers and SAN infrastructure, including upgrades and security patches.
• Ensure business continuity by implementing and managing robust system backup solutions (Veeam preferred).
• Drive cybersecurity implementation by deploying industry-standard CIS Critical Security Controls and best practices to protect Agency systems against malware and cyberattacks.
• Design and manage security solutions, including routine network security assessments, audits, and monitoring for suspicious activity.
• Collaborate on Incident Response, assisting department leadership with the development and review of incident response planning, documentation, and procedures.
• Conduct security reviews of new and existing systems to ensure alignment with department security priorities.
• Maintain and monitor network logs to ensure visibility and rapid response to potential threats.
• Provide technical training for employees on cybersecurity best practices and organizational security awareness.
• Automate OS and software deployment for Windows and macOS using tools such as Intune, Mosyle, and FileWave.
• Administer cloud productivity suites, including Google Workspace for Education and Microsoft 365.
• Manage physical security and communications, including door access controls, surveillance systems, and the RESA telephone/E911 system.
• Provide expert-level customer service, troubleshooting hardware, software, and network problem areas to support staff and classroom environments.
• Maintain comprehensive documentation of configurations, inventory, and projects to ensure the technology team can provide effective, scalable support.
• Maintain professional competence through ongoing education regarding statutes, regulations, and IT standards to ensure the Agency utilizes current best practices.
• Support the Agency’s adherence to the SOC 2 Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, and Privacy) across in-scope systems and infrastructure.
• Implement and maintain technical controls that map to SOC 2 requirements, including access controls, logical/physical security, change management, and system monitoring.
• Assist with SOC 2 audit readiness by preparing, organizing, and maintaining evidence, control documentation, and system descriptions for internal reviews and external auditors.
• Collaborate with the CTO and department leadership to develop, document, and enforce information security policies and procedures aligned with SOC 2 control objectives.
• Perform  periodic control testing and self-assessments to verify the operating effectiveness of implemented SOC 2 controls and identify remediation needs.
• Track and remediate audit findings, control gaps, and exceptions within established timelines, documenting corrective actions taken.
• Maintain audit trails, access logs, and monitoring records sufficient to demonstrate continuous  compliance with SOC 2 control requirements.
• Support vendor and third-party risk management activities, including review of subservice organization SOC reports and assessment of vendor security posture.
• Contribute to change management processes to ensure system modifications are authorized, tested, documented, and reviewed in accordance with SOC 2 requirements.
• Coordinate with department leadership during SOC 2 examination periods to facilitate auditor requests and ensure timely response.
• Perform other duties as assigned to support the evolving needs of the department and its partner districts.

 

OTHER KNOWLEDGE, SKILLS, AND ABILITIES:

• Ability to effectively orchestrate multiple activities/projects simultaneously and maintain proactive communication with stakeholders.
• Ability to deal with issues in a fair manner, treat diverse populations and personalities with dignity and respect, and act in a highly ethical manner.
• Ability to work in a fast-paced environment yet maintain flexibility in thinking and actions.

 

SPECIAL CONDITIONS:

• Must keep the affairs of Marquette-Alger RESA and LEAs confidential at all times.
• Must uphold confidentiality of privileged and sensitive student/staff information.
• May require occasional regional job travel using personal vehicle.
• Occasional overnight travel downstate for conferences and activities of professional organizations.

 

PHYSICAL DEMANDS

• Regularly required to sit or stand for extended periods; ability to walk, bend, and reach to inspect hardware or network infrastructure.
• Frequent use of hands and fingers to operate computer keyboards and specialized technical tools.
• Occasionally required to lift, carry, or move hardware weighing up to 35 lbs.
• Ability to read technical manuals/monitors and communicate clearly in person or via digital platforms, often in environments with moderate ambient noise (e.g., server rooms).

 

TERMS OF EMPLOYMENT: Full time; 12-month position; non-union; Must have regular and reliable job attendance, performance, and the physical ability to do the job.

REPORTS TO: Chief Technology Officer.
 

COMPENSATION: Grade  on Marquette-Alger RESA Non-Affiliated Salary Schedule.

APPLICATION DEADLINE: 12:00 p.m., Monday, November 23rd, 2026
 

Marquette-Alger RESA does not discriminate on the basis of race, color, national origin, ethnicity, religion, sex, age, height, weight, familial status, marital status, military service, veteran status, genetic information, disability, or any other legally protected basis, and prohibits unlawful discrimination, including harassment and retaliation, in any education program or activity that it operates, including in admission and employment. Marquette-Alger RESA’s Non-discrimination, Anti-Harassment, and Non-Retaliation Policy, as well as the grievance procedure for reporting concerns or complaints, are available at maresa.org/about-us/notice-of-nondiscrimination/.