PTMA Financial Solutions, provides treasury management, liquidity management, and other financial products and services to the public sector. In addition to more than 12,000 local governments, school districts and other public entities, we also partner with over 1,000 financial institutions to help strengthen communities from coast to coast. Our family of financial services companies offers local government investment pool administration, investment advisory services, term investments, cashflow analysis, bond proceeds management, and public finance services for public entities plus stable deposit funding solutions for financial institutions. Our financial expertise, comprehensive products, and advanced technology help clients achieve more today for a better tomorrow. The firm’s primary operational hubs are in Denver, Colorado, and Naperville, Illinois, with other offices throughout the United States. 

Work Authorization (Required)

Candidates must be authorized to work in the United States without employer sponsorship now or in the future. This role is not eligible for visa sponsorship or transfer.

Job Summary:

The IT Engineer – Network & Security at PTMA Financial Solutions is responsible for engineering, operating, and securing the network and infrastructure platforms that support more than 300 employees across 10+ office locations. This role owns network security policy, SASE administration, threat detection and response operations, and cloud infrastructure health. The ideal candidate brings depth in network security or threat operations and working knowledge across the others. Reports to the Corporate IT Manager.

Duties/Responsibilities:

• Own SASE administration, and network-attached device management: firewall rules, VPN tunnels, network segmentation, switches, access points, and connected hardware
• Operate endpoint detection and response (EDR) platforms: alert tuning, incident investigation, sensor health, and managed detection coordination
• Manage cloud and server infrastructure: VM lifecycle, Windows Server upgrade path and OS patch management, CVE analysis, remediation tracking, backup health, and DR testing
• Serve as the Tier 2 escalation point for network and security incidents; resolve escalated tickets within defined SLA targets and document root cause in the ITSM platform.
• Build and maintain automation scripts and runbooks for all platforms in scope); collaborate with the engineering team and Systems Administrator on cross-domain automation and shared tooling. Participate in rotating on-call coverage for Sev-1 and Sev-2 incidents outside of business hours.
• Generate and maintain compliance and audit reporting for all platforms in scope: vulnerability scan results, CVE remediation status, firewall audit logs, and SIEM alert summaries.

Qualifications:

• 3+ years in a network, security, or infrastructure engineer role supporting a production environment of 100 or more users.
• Hands-on experience with at least one network security or SASE platform: firewall policy, VPN administration, or cloud access security (e.g., Fortinet, Palo Alto, Netskope, Zscaler, or equivalent).
• Experience in a cloud infrastructure environment: VM management, monitoring, vulnerability remediation, or cloud networking.
• Relevant certifications preferred (e.g., CompTIA Security+, CCNA, AZ-104, SC-200, or equivalent).

Physical Requirements:

• Must be able to work at a computer for extended periods of time.
• Must be able to lift up to 30 lbs. when handling IT equipment, servers, and hardware shipments.
• Must be able to travel to PTMA office locations across the United States as needed.

Additional Information:

• Travel: Occasional travel to PTMA office locations across the United States is required (estimated 15-20%). This is a multi-site environment and site visits are part of the role.
• On-Call: This role includes rotating on-call coverage for after-hours Sev-1 and Sev-2 incidents.
• Evolving Responsibilities: Responsibilities are defined at time of hire and subject to change as the organization scales and team needs develop.