Senior Infrastructure and Security Engineer

HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise.

As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors.

• A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.
• Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individual
• The opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy.

HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more.

The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra , Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility.

• Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency.
• Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management.
• Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools.
• Support incident response, root cause analysis, and continuous service improvement initiatives.

• Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra , Purview, and Intune.
• Manage identity and access management controls, including conditional access policies and identity protection.
• Implement and support Zero Trust security principles and architectures.
• Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration.
• Perform security reviews of new technologies, infrastructure changes, and architectural designs.

• Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents.
• Lead technical response activities for security events when required.
• Conduct threat modeling, security assessments, and risk evaluations.
• Perform regular security posture reviews and develop remediation plans to reduce organizational risk.
• Track and support risk reduction initiatives across the enterprise.

• Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.
• Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes.
• Ensure infrastructure and security solutions align with business requirements and operational objectives.

• U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments.
• 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies.
• 5+ years of hands‑on cybersecurity experience within Microsoft cloud and security environments.
• Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences.
• Strong experience with Azure services, including infrastructure, networking, storage, and identity management.
• Experience implementing and supporting Zero Trust security architectures.
• Deep understanding of identity and access management, authentication, authorization, and privileged access controls.
• Experience managing enterprise cloud security programs and security initiatives.
• Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation.
• Experience with automation and scripting using Power Shell and/or Azure CLI.
• Strong analytical, troubleshooting, and incident response skills.

• Azure Administrator…