Infrastructure Security Engineer

Job Description

We are looking for an experienced Infrastructure Security Engineer to support enterprise infrastructure, network security, vulnerability management and IoT/OT environments. The role involves application and server administration, network troubleshooting, security controls, automation and collaboration with global technology and security teams.

Candidates with a combination of Infrastructure + Network/Security + Vulnerability Management experience will be preferred. Exposure to IoT/OT security is a strong advantage.

Key Responsibilities

• Lead and support infrastructure-related PoC, RFP and RFE initiatives across multiple technology platforms.
• Perform end-to-end application administration, request management and network integration.
• Configure, administer and troubleshoot routers, switches, load balancers, proxies, firewalls, DMZ, IPs, ports, subnets and MAC addresses.
• Work with authentication and access technologies including RBAC, Kerberos, SSO, LDAP and Active Directory.
• Perform Windows, Linux and Unix server administration and troubleshoot vendor platforms such as CA, BMC and IBM DataPower.
• Develop automation scripts using PowerShell, Python, Perl and Shell scripting.
• Support CI/CD, DevOps and Cloud infrastructure activities.
• Troubleshoot and support IoT/OT devices and systems across Windows, Linux, Unix, Android and iOS platforms.
• Work with Security Design teams to implement appropriate security controls, standards and processes.
• Support system upgrades, production issues, security remediation and infrastructure hygiene/compliance.
• Collaborate with technology partners, vendors, SMEs and global stakeholders to deliver secure and reliable solutions.

Vulnerability & Security Management

• Perform vulnerability scanning, assessment, remediation and continuous monitoring.
• Support patch management and vulnerability remediation across Windows/Linux and infrastructure platforms.
• Work with vulnerability and security tools such as:
  Tenable, Qualys, Rapid7, Nessus, Microsoft Defender and CrowdStrike.
• Exposure to ServiceNow Vulnerability Response, Tanium, BigFix or SCCM is preferred.
• Understanding of CVSS, EPSS, threat intelligence and vulnerability risk scoring.
• Implement configuration hardening and CIS benchmarks.
• Support security compliance and infrastructure hygiene initiatives.

Preferred Technical Skills

Infrastructure: Windows | Linux | Unix | Server Administration

Network & Security: Routers | Switches | Firewalls | Load Balancers | Proxies | DMZ | TCP/IP | IP | Ports | Subnets | LDAP | AD | SSO | Kerberos | RBAC

Security / Vulnerability: Tenable | Qualys | Rapid7 | Nessus | Defender | CrowdStrike | Vulnerability Management | Patch Management | CVSS | EPSS | CIS Benchmarks

Automation: PowerShell | Python | Perl | Shell Scripting

DevOps / Cloud: CI/CD | Jenkins | DevOps | AWS | Azure | GCP

ITSM / Patching: ServiceNow | Tanium | BigFix | SCCM

IoT/OT: IoT/OT Security | Device Troubleshooting | IoT Infrastructure | OT Systems

Containers: Kubernetes | Container Security