IT Infrastructure Security Engineer

We are looking for an Infrastructure Security Engineer who will engineer and operate the technical security controls protecting Nexthink's corporate infrastructure, spanning non-cloud, cloud, and internal network environments. 

You will report to the Infrastructure Security Lead, executing the hardening, patching, cloud posture, and segmentation. 

This role requires a hands-on engineer who is comfortable operating in a fast-moving environment, owning infrastructure security controls end-to-end: designing them, automating them, documenting them, and defending them with security, GRC, and audit stakeholders.

Your main responsibilities will include: 

• Contribute to hardening baselines across the VM fleet (Windows, Linux) 
• Support security controls and initiative for Active Directory, Group Policy, and Microsoft Entra ID 
• Take part in patch automation, helping drive emergency patching coverage to SLA for critical CVEs 
• Contribute to cloud security posture management across Azure and AWS 
• Help implement and maintain policy-as-code for cloud configuration baselines, and support remediation of configuration drift 
• Help implement micro-segmentation policies and trust-model controls 
• Help validate east-west traffic flows and network security control compliance against corporate standards 
• Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits 
• Track and help remediate assigned exceptions and audit findings within defined timelines 
• Take part in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs 
• Own technical control documentation and evidence for infrastructure security controls
• Defend implementation choices with GRC/security teams