Infrastructure Security Engineer

Role Overview

The Infrastructure Security Engineer is a hands-on technical resource embedded with the client’s U.S. team, responsible for securing and modernizing the server, cloud, and identity environment in alignment with global security standards.

Responsibilities

• Own the full lifecycle of Windows and Linux server environments (build, deployment, maintenance, decommissioning)
• Create, manage, and maintain hardened server images and secure server baselines
• Manage server patching, vulnerability remediation, and production maintenance windows with business stakeholders
• Deploy, secure, and manage virtual machines across on-prem and cloud environments (Azure, GCP, AWS)
• Administer and strengthen Active Directory and Entra ID, including identity infrastructure security controls
• Automate server deployment/configuration/maintenance to reduce manual effort
• Support security monitoring and incident response
• Help implement Microsoft 365 E5 security capabilities, including Defender for Servers and Defender for Identity
• Assess infrastructure weaknesses and recommend/implement targeted security improvements

Requirements

• 5+ years administering Windows Server and Linux Server environments (on-prem preferred)
• Strong Active Directory administration experience and identity infrastructure management
• Hands-on experience across the full server lifecycle, including hardened image and secure baseline management
• Strong patch management experience, including coordinating/testing updates prior to production deployment
• Experience deploying/managing VMs in cloud (Azure preferred; AWS/GCP acceptable)
• Strong infrastructure automation experience (scripting for server administration)
  • PowerShell, Python, or Bash

Preferred Qualifications

• Experience with Microsoft Defender for Servers and Microsoft Defender for Identity
• Familiarity with Microsoft 365 E5 and Microsoft Intune
• Experience improving cloud security posture across multi-cloud environments
• Ability to work consultatively and partner with/develop existing IT team members

Logistics

• Contract: 6 months, with potential extension or conversion to permanent
• Start date: ASAP
• Travel: Remote with required travel (minimum monthly); travel expenses covered by client, or Hybrid/onsite in Charlotte, NC as needed