IT Infrastrcture and Security Engineer

Role & responsibilities :

We are looking for a security-focused IT Infrastructure Engineer to protect the organizations data, endpoints, network and email systems from security threats. The role combines hands-on infrastructure management with ownership of DLP, endpoint protection, network security and threat response. It supports employees and SAP consultants working in the office, remotely and at client sites.

Data Loss Prevention (DLP) & Data Security

• Deploy, configure and monitor DLP policies across endpoints, email, cloud storage and removable media.
• Investigate DLP alerts, policy violations and data exfiltration attempts, and enforce controls on USB, file sharing and sensitive data movement.

Endpoint & Laptop Security

• Manage laptop and desktop provisioning, hardening and lifecycle, including Windows setup, patching, BitLocker encryption and application control.
• Administer antivirus and EDR/XDR solutions, respond to malware detections, and keep all devices compliant with security policy.

Network & Firewall Security

• Manage and monitor firewalls, VPN, LAN/Wi-Fi and network access controls, and review firewall rules regularly.
• Detect and respond to suspicious network activity, unauthorized access and intrusion attempts.

Email & Microsoft 365 Security

• Administer email accounts and Microsoft 365, including MS Office, Exchange, OneDrive and Teams.
• Configure and maintain email security controls such as anti-phishing, anti-spam, SPF, DKIM, DMARC and MFA, and investigate phishing and suspicious emails.

Access Management & Incident Response

• Control user access provisioning and revocation through onboarding and offboarding, following least-privilege principles.
• Log, investigate, remediate and escalate security incidents, and maintain incident records and root-cause reports.

Compliance, Assets & Documentation

• Maintain IT asset registers, security trackers, SOPs and audit records, storing credentials only in approved secure vaults.
• Support internal audits, security reviews and compliance checks, and run user security awareness activities.

Preferred candidate profile :

• Expert-level knowledge of Windows 10/11 administration, troubleshooting, Group Policy and Intune or similar endpoint management.
• Strong MS Office and Microsoft 365 support and administration skills, including Outlook, Exchange Online, Teams and OneDrive.
• Hands-on experience with laptop and desktop hardware troubleshooting, imaging and IT asset management.
• Solid networking knowledge (TCP/IP, DNS, DHCP, VLANs, VPN) and firewalls such as Fortinet, Sophos, Palo Alto or Cisco.
• Practical experience with DLP tools such as Microsoft Purview, Forcepoint, Symantec or Trellix.
• Experience with EDR/antivirus platforms like Microsoft Defender, CrowdStrike, Sophos or Trend Micro.
• Good understanding of threat detection, incident response, MFA, encryption and access control.
• Good MS Excel skills for inventory, tracking and reporting.

Preferred Qualifications

• Graduate in IT, Computer Science or a related field.
• Certifications such as Microsoft MD-102/MS-102/SC-400, CompTIA Security+, CCNA or vendor-specific DLP/firewall certifications.
• Exposure to SIEM tools and ISO 27001 practices.

Working Requirements

• Available on two Saturdays a month, per company schedule.
• Willing to travel to client locations when required.
• Able to respond promptly to urgent support requests, network outages and security incidents.

The main changes are a new IT Infrastructure Management section, a dedicated Windows & MS Office consultant support section, and Windows/Microsoft 365 skills moved to the top of the required skills list.