Engineer II, Infrastructure

Forbes is an iconic global media brand that has symbolized success for over a century. Fueled by journalism that informs and inspires Forbes spotlights the doers and doings shaping industries achieving success and making an impact on the world. Forbes connects and convenes the most influential communities ranging from billionaires business leaders and rising entrepreneurs to creators and innovators. The Forbes brand reaches more than 140 million people monthly worldwide through its trusted journalism signature ForbesLive events and 49 licensed local editions in 81 countries.

Forbes is seeking an Engineer II Infrastructure. This is an experienced individual contributor role responsible for designing implementing and supporting Forbes corporate technology infrastructure across a remote and hybrid workforce. That includes email security endpoint management identity services collaboration platforms cloud infrastructure and core enterprise systems. This role handles technical escalations for complex issues owns projects end to end and reports to the Principal Manager Corporate Solutions.

Email security is a core focus of this role. The right candidate has strong hands-on experience with an enterprise email security platform such as Mimecast or Proofpoint and owns Forbes email protection posture end to end. Mimecast is Forbes current platform.

A hybrid schedule with a minimum of three in-person days per week at our Jersey City NJ headquarters is expected.

Responsibilities:

Email security

• Administer the email security gateway (Mimecast Proofpoint or the like) including email security policies threat protection URL and attachment protection spam filtering impersonation and phishing protection and secure messaging.
• Maintain SPF DKIM and DMARC standards and improve email deliverability and anti-spoofing defenses.
• Investigate and remediate phishing business email compromise and impersonation attempts.
• Lead email security awareness efforts and phishing simulations with Cybersecurity.

Infrastructure endpoint and identity

• Serve as a technical escalation point for complex endpoint identity and access issues.
• Manage endpoints with Microsoft Intune and Jamf Pro across Windows and macOS including zero-touch Windows provisioning with Windows Autopilot.
• Manage identity and access through Okta Microsoft Entra ID and Active Directory including lifecycle MFA and group-based access.
• Maintain endpoint security with CrowdStrike Okta Verify and similar tools.
• Build standardized device configurations policies and compliance baselines.
• Support security audits and access reviews with Cybersecurity.

Collaboration and support

• Support Microsoft 365 Google Workspace Slack Zoom and SharePoint.
• Troubleshoot hardware software networking and video conferencing across Windows and macOS.
• Maintain conference room technology including Zoom Rooms displays cameras and control systems.
• Write and maintain documentation runbooks and knowledge base articles.
• Mentor junior staff and provide technical guidance.
• Balance day-to-day support with longer-term projects and platform improvements.
• Participate in an after-hours and weekend on-call rotation as needed for critical incidents or projects.

The ideal candidate:

• 5 years in Corporate IT Endpoint Engineering or Infrastructure roles.
• 3 years of hands-on Mimecast administration or a comparable gateway such as Proofpoint or Microsoft Defender for Office 365.
• Strong email security background including SPF DKIM DMARC anti-phishing and threat response.
• Hands-on experience with Microsoft Intune Windows Autopilot and Jamf Pro.
• Deep knowledge of Windows and macOS administration.
• Experience with Okta Microsoft Entra ID and Active Directory.
• Solid understanding of endpoint security tooling (CrowdStrike or equivalent).
• Proficiency with Microsoft 365 Google Workspace Zoom and SharePoint.
• Working knowledge of networking fundamentals: Wi-Fi DNS DHCP and VPNs.
• Ability to work independently and balance support work with projects.
• Strong documentation and communication skills.
• Ability to regularly lift and carry objects weighing between 20 and 30 pounds.
• Certifications in email security endpoint management Microsoft 365 or Okta (preferred).
• Experience with email gateway migrations (preferred).
• Scripting experience such as PowerShell or Python (preferred).

The annual base salary range for this role is $105000 - $120000

Forbes has estimated the compensation range set forth above in good faith. The compensation range is what we believe we will offer and ultimately pay a successful determining this range we consider the experience level of education (if applicable to the role) knowledge skills and abilities required to be had by a successful candidate as well as the budget and the companys pay rates generally. This said we may have to make changes to our compensation estimates and job descriptions from time to time and we expressly reserve the right to do so. Should we make any such changes this advertisement will be revised to reflect such revisions. We encourage you to occasionally re-visit this advertisement to ensure that you are abreast of any changes. Thank you for your interest in joining Forbes!

#LI-Hybrid
#LI-RL

This role may evolve over time. While this job description outlines the primary responsibilities additional duties may be assigned as business needs aims to offer employees the flexibility they need in order to be successful. Some positions may require candidates to be based in a specific location for consideration while some roles may be fully remote (within the U.S.) if it aligns with the needs of the position. This position is only open to candidates residing in California Colorado Connecticut District of Columbia Florida Georgia Maine Maryland Massachusetts New Jersey New York North Carolina Pennsylvania South Carolina Tennessee Texas & Washington. Due to business operations and compliance requirements we are unable to consider applicants based outside these states at this time.

Forbes is an equal opportunity employer.

Staff and Applicant Privacy Notice
Notice of E-Verify Participation