Infrastructure Security Engineer

Job Title: Infrastructure Security Engineer

Location-Type: Remote with required travel (minimum monthly, travel expenses covered by the client), OR Local Hybrid, Charlotte, NC (onsite as needed)

Start Date: ASAP

Duration: Contract, 6 months, with potential to extend or convert to permanent

Compensation Range: $70-82.50/hr W2

Benefits: Eligible for Health, Dental, Vision, and 401K

Visa Sponsorship: Not eligible for visa sponsorship



Job Description:
The Infrastructure Security Engineer will serve as a hands-on technical resource embedded with the client's U.S. team, responsible for securing and modernizing the server, cloud, and identity environment in alignment with global security standards.



Job Summary
• Own the full lifecycle of Windows and Linux server environments, including build, deployment, maintenance, and decommissioning
• Create, manage, and maintain hardened server images and secure server baselines
• Manage server patching, vulnerability remediation, and production maintenance windows in coordination with business stakeholders
• Deploy, secure, and manage virtual machines across on-premises and cloud environments, including Azure, GCP, and AWS
• Administer and strengthen Active Directory and Entra ID, including identity-related infrastructure controls
• Automate server deployment, configuration, and maintenance processes to reduce manual overhead
• Support security monitoring and incident response, and help implement Microsoft 365 E5 security capabilities including Defender for Servers and Defender for Identity
• Assess existing infrastructure weaknesses and recommend and implement targeted security improvements



Minimum Requirements:
• 5 years of experience administering Windows Server and Linux Server environments, on-premises preferred
• Strong Active Directory administration experience, including identity infrastructure management
• Hands-on experience with the full server lifecycle, including hardened image creation and secure baseline management
• Strong server patch management experience, including coordinating and testing updates prior to production deployment
• Experience deploying and managing virtual machines in cloud environments, with Azure preferred, AWS or GCP also considered
• Strong infrastructure automation experience, including scripting for server administration, PowerShell, Python, or Bash



Preferred Qualifications:
• Experience with Microsoft Defender for Servers and Microsoft Defender for Identity
• Familiarity with Microsoft 365 E5 security capabilities and Microsoft Intune
• Experience supporting cloud security posture improvements across multi-cloud environments
• Ability to work consultatively, partnering with and developing existing IT team members