Infrastructure Security Engineer

Job Title: Infrastructure Security Engineer
Location-Type: Remote with required travel (minimum monthly, travel expenses covered by the client), OR Local Hybrid, Charlotte, NC (onsite as needed)
Start Date: ASAP
Duration: Contract, 6 months, with potential to extend or convert to permanent
Compensation Range: $70-82.50/hr W2
Benefits: Eligible for Health, Dental, Vision, and 401K
Visa Sponsorship: Not eligible for visa sponsorship

Job Description:
The Infrastructure Security Engineer will serve as a hands-on technical resource embedded with the client's U.S. team, responsible for securing and modernizing the server, cloud, and identity environment in alignment with global security standards.

Job Summary
•Own the full lifecycle of Windows and Linux server environments, including build, deployment, maintenance, and decommissioning
•Create, manage, and maintain hardened server images and secure server baselines
•Manage server patching, vulnerability remediation, and production maintenance windows in coordination with business stakeholders
•Deploy, secure, and manage virtual machines across on-premises and cloud environments, including Azure, GCP, and AWS
•Administer and strengthen Active Directory and Entra ID, including identity-related infrastructure controls
•Automate server deployment, configuration, and maintenance processes to reduce manual overhead
•Support security monitoring and incident response, and help implement Microsoft 365 E5 security capabilities including Defender for Servers and Defender for Identity
•Assess existing infrastructure weaknesses and recommend and implement targeted security improvements

Minimum Requirements:
•5 years of experience administering Windows Server and Linux Server environments, on-premises preferred
•Strong Active Directory administration experience, including identity infrastructure management
•Hands-on experience with the full server lifecycle, including hardened image creation and secure baseline management
•Strong server patch management experience, including coordinating and testing updates prior to production deployment
•Experience deploying and managing virtual machines in cloud environments, with Azure preferred, AWS or GCP also considered
•Strong infrastructure automation experience, including scripting for server administration, PowerShell, Python, or Bash

Preferred Qualifications:
•Experience with Microsoft Defender for Servers and Microsoft Defender for Identity
•Familiarity with Microsoft 365 E5 security capabilities and Microsoft Intune
•Experience supporting cloud security posture improvements across multi-cloud environments
•Ability to work consultatively, partnering with and developing existing IT team members