Infrastructure Security Engineer

DescriptionKforce has a client that is seeking an Infrastructure Security Engineer in Grapevine, TX.Major Responsibilities:* Infrastructure Security Engineer will serve as the primary Infrastructure Security resource, establishing security standards, best practices, and strategic initiatives* Lead the enterprise vulnerability management program, including risk assessment, remediation prioritization, validation, metrics, and executive reporting* Partner with Infrastructure, Desktop, Network, Cloud, and Warehouse teams to identify and remediate security risks* Secure enterprise endpoints, Windows environments, Microsoft 365, Azure infrastructure, and warehouse technologies through hardening, patching, and security controls* Collaborate with Network Engineering to strengthen Cisco networking, firewalls, VPNs, SD-WAN, segmentation, and Zero Trust initiatives* Improve Azure security posture using Microsoft Defender for Cloud, Azure Policy, governance controls, and cloud security best practices* Enhance Identity & Access Management through Microsoft Entra ID, MFA, Conditional Access, Privileged Access Management, and least-privilege principles* As an Infrastructure Security Engineer, you will develop and maintain secure configuration baselines aligned with CIS Benchmarks across servers, workstations, cloud, network, and Citrix platforms* Support security incident response, technical investigations, root cause analysis, and remediation planning* Assess emerging threats, evaluate compensating controls, identify automation opportunities, and drive continuous risk reduction* Produce security scorecards, KPIs, executive reporting, and support governance, audit, and compliance initiativesRequirements* 5+ years of experience in infrastructure engineering, cloud engineering, network engineering, systems administration, or security engineering* Experience with security tools such as: Microsoft Defender Suite; Tenable; Qualys; Rapid7; runZero; Vulnerability Assessment Solutions* Experience securing enterprise infrastructure environments* Strong understanding of: Windows 11; Windows Server; Active Directory/Entra ID; Azure; Cisco Networking; Microsoft 365; Endpoint Security Technologies* Understanding of security architecture and security frameworksPreferred Qualifications:* Certifications such as: CISSP; Security+; AZ-500; GSEC; CCNP Security* Microsoft Security Certifications* Experience supporting manufacturing, warehouse, or distribution environments* Knowledge of: Azure Security; Microsoft Defender for Cloud; Microsoft Sentinel; Zero Trust Architecture; Identity Security; Infrastructure AutomationJob TypeContractCompensation50 - $60