Lead Engineer, Infrastructure Security

Our client is looking for a Lead Security Infrastructure Engineer to join their team.

Serve as the dedicated, named liaison to GCS - including Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud teams - consuming security findings, audit results, and risk-prioritized remediation requirements defined by GCS.

Maintain a continuous, standing engagement cadence with GCS leadership to ensure Infrastructure's Cloud Engineering (Core/On-Prem and Cloud) and Networking teams are aligned to current GCS priorities, SLAs, and control objectives.

Translate GCS inputs into Agile?ready Jira work (stories, tasks, acceptance criteria) aligned to Infrastructure sprint planning.

Execute hands?on remediation for high?risk or complex findings across Azure, hybrid/on?prem, network, and endpoint environments.

Provide direct production change execution for security remediations, following change controls and minimizing business impact.

Guide and mentor Infrastructure engineers on secure configuration, remediation techniques, and security best practices.

Lead remediation efforts across Platform Engineering, Network & Edge, and Client Services.

Security Partnership & Translation:
Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.

Agile Enablement:
Strong experience converting non?

Agile security inputs into sprint?ready work items.

Hands?

On Remediation:
Expert?level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

Risk Alignment:
Executes remediation strictly aligned to GCS's risk framework and SLAs.

Technical Leadership:
Guides teams on secure practices and serves as escalation point for complex remediation.

Automation Mindset:
Uses scripting, IaC, and configuration management to scale remediation and reduce manual effort.

Production Discipline:
Comfortable making high?impact production changes safely and responsibly.

Vendor & Contractor Oversight:
Directs external remediation resources with clear standards and quality control.

Communication:
Clear, trusted communicator with Infrastructure leadership and GCS.

Accountability:
Owns outcomes-backlog reduction, compliance metrics, and security maturity improvement.

Vulnerability Management & Patch Lifecycle:
Owns the end-to-end finding-to-close process for infrastructure; tracks remediation SLAs, drives KPI improvement, and maintains an aging backlog with clear accountability.

Cloud Security Posture:
Hands-on proficiency securing Azure environments using Defender for Cloud, Entra l access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.

Compliance Frameworks:
Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.

Must Have Skills - looking for 8+ years ideally

Bachelor's - in CS, engineering, or related

Certs - CISSP, CISM, CISA, or GIAC / SANS (e.g. GCED, GPEN, GCIH) relevant to infrastructure security

Working knowledge of NIST 800-53, CIS Benchmarks, PCI-DSS, and SOC 2; able to map infrastructure controls to framework requirements and produce audit-ready evidence.

Hands-on proficiency securing Azure environments using Defender for Cloud, Entra l access, and Microsoft security baselines; able to assess and remediate cloud misconfigurations independently.

Ability to translate GCS findings and priorities - spanning Security Engineering & Operations, IAM, Software & Product Security, Data Governance, and Digital Fraud - into Infrastructure execution.

Expert?level ability to remediate security issues across Azure, hybrid, network, and endpoint platforms.

Agile,CIS Benchmarks,Cloud,Cloud Security Posture,Cloud Engineering,configuration management,control objectives,Cybersecurity Services,Data Governance,IAM,Computer Science,Jira,Azure,Azure environments,Microsoft security,PCI-DSS,sprint planning,Product Security,Vulnerability Management,Communication,communicator,dedicated,leadership,technical liaison,Accountability,business impact,acceptance criteria,conditional access,audit,Automation,Partnership,CISM,CISA,CISSP,change controls,Client Services,executable,remediation techniques,GCIH,secure configuration,Infrastructure Security,Infrastructure,KPI,mentors,mentor,NIST 800-53,Platform Engineering,quality control,compliance metrics,risk,security,Security Engineering,security best practices,technical leadership

Equal Opportunity

Employer:

Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome…