IT Infrastructure Compliance Engineer

Position: IT Infrastructure Compliance Engineer

Location: Santa Clara, CA(Onsite)

Hiring Mode: 12 Months Contract

Job Description:

Client is seeking a highly skilled IT Infrastructure Compliance Engineer to join a fast-paced enterprise technology organization. This role is ideal for a strong infrastructure engineer who can evaluate the security, compliance, and operational resilience of interconnected systems linking internal operations to external partners. The position plays a critical role in safeguarding infrastructure, data integrity, and third-party integrations across a complex, global technology ecosystem. This is an urgent, immediate need candidates should be prepared to start as soon as possible.

Key Responsibilities:

• Plan, lead, and execute IT and security audits covering infrastructure, enterprise applications (including MES, PLM, and ERP/SAP), and supply chain B2B integrations.
• Evaluate the IT risk and security posture of external partners, assessing compliance with security standards, data protection protocols, and intellectual property safeguards.
• Serve as a primary on-site IT point of contact for regional stakeholders, coordinating with remote and global IT teams across networking, storage, and application domains; manage urgent escalations with third-party IT vendors on connectivity, servers, and production systems.
• Audit network segmentation, access controls, APIs, and data transmission protocols supporting automated data exchange between internal systems and external facilities.
• Evaluate IT environments against industry frameworks (e.g., ISO 27001, SOX) to ensure data privacy, financial integrity, and regulatory compliance.
• Assess the accuracy and completeness of operational data and metrics flowing from partner systems into internal data warehouses, using data analytics tools to identify anomalies or control gaps.
• Draft clear, actionable audit reports for leadership and track remediation efforts to ensure identified risks are effectively resolved.

Required Qualifications:

• Bachelor's degree in Management Information Systems, Computer Science, Cybersecurity, Supply Chain Management, or a related technical field (or equivalent experience).
• 8+ years of experience in IT Audit, IT Security, IT Infrastructure, or Technology Risk Management.
• Strong hands-on infrastructure expertise, including Windows/Unix server administration, virtualization, and enterprise storage systems.
• Solid network audit expertise, including TCP/IP routing, firewall policy configuration, and core protocols (DNS, DHCP, HTTPS, SSH) to independently verify system security and compliance controls.
• Familiarity with cloud security (AWS/Azure) and identity and access management (IAM).
• Exceptional verbal and written communication skills, with the ability to translate complex technical risk into terms both technical and non-technical stakeholders can act on.
• Ability to travel domestically and internationally (up to 15 20%) to support on-site partner assessments as needed.

Preferred Qualifications:

• Experience in IT audit, security, or risk management within high-tech or manufacturing environments.
• Domain knowledge of automated manufacturing environments, supply chain logistics, and B2B integration technologies (e.g., EDI, APIs, SFTP).
• Familiarity with Shop Floor Control and Manufacturing Execution Systems (MES).
• Professional certification such as CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional).
• Hands-on experience with data analytics and visualization tools (e.g., SQL, Python, Tableau, or Power BI) to automate audit testing.
• Experience auditing intellectual property (IP) protection controls in a collaborative engineering or manufacturing environment.
• Proven ability to drive and coordinate third-party IT teams remotely; energetic, proactive, and comfortable communicating with both IT and non-IT personnel.

Tools & Technologies:

• Manufacturing Execution Systems (MES) and Product Lifecycle Management (PLM) platforms
• Enterprise Resource Planning (ERP) systems, including SAP
• AWS / Azure cloud platforms
• Identity and Access Management (IAM) tools
• SQL, Python, Tableau, Power BI
• EDI, APIs, SFTP for B2B data exchange
• Networking protocols: TCP/IP, DNS, DHCP, HTTPS, SSH
• Compliance frameworks: ISO 27001, SOX