Infrastructure Security Engineer

Title: Infrastructure Security Engineer
Location: Remote
Duration: 06 Months (Possibility of extension)

As an Infrastructure Security Engineer for the Global Technology Workforce Identity and Access Management (IAM) Team, you will partner with technology leads and engineers to develop and improve IAM solutions. You will design, test, and engineer new and existing solutions and streamline our day‑to‑day workflows, and help the Identity engineering team to meet project timelines and complete net new business as usual (BAU) work.

The work will be around Security and Engineering of our Tier Zero Identity platform and Active Directory Domain Services (AD DS) systems.

• Develop high‑quality, well‑documented engineering configuration and infrastructure solutions that adhere to all applicable client security standards.
• Ensure product and infrastructure security is maintained throughout the system lifecycle, integrating new security features, patches, and updates into existing environments.
• Collaborate with tech leads in understanding system requirements, defining stories, creating technical designs, and deploying solutions.
• Support engineering and other team members to understand systems end‑to‑end and deliver robust solutions that support positive business impact.
• Write scripts and automation code to support areas such as operational excellence, production validation, and security for our Windows servers and identity infrastructure platform.
• Research problems discovered internally or by stakeholders and consumers, ideate and develop solutions to mitigate without negative impact to the business.
• Bring an applied understanding of relevant and emerging technologies, begin to identify opportunities to provide input to the team and coach others, and embed learning and innovation in the day‑to‑day.
• Work on complex problems in which analysis of situations or data requires an in‑depth evaluation of various factors.
• Use programming languages including but not limited to Power Shell, Terraform, ARM templates, etc.

• Infrastructure:
  Hyper‑V and Windows Server operating systems
• Observability:
  System Center Operations Manager (SCOM) / Azure Monitoring
• Configuration:
  System Center Configuration Manager (SCCM) / Azure Arc
• Identity:
  Active Directory Domain Services (AD DS) / Microsoft Entra
• Automation:
  Power Shell, Infrastructure and Configuration as Code (e.g. Chef, Ansible)
• Databases: SQL Server

• Triaging and troubleshooting identity and infrastructure issues.
• Development of automation and deployments for Hyper‑V and Windows Server infrastructure.
• Automated testing and validation to support non‑production and production changes.
• Writing clear engineering and system documentation (e.g. in Confluence).