Senior IT Infrastructure Administrator, Security – Azure NXT

This role focuses on strengthening infrastructure security by directly implementing and remediating security controls across enterprise systems. It sits within the IT Infrastructure team and works closely with Cybersecurity. A key priority is reducing a significant backlog of vulnerabilities and improving how remediation is delivered  role also takes ownership of initiatives such as certificate lifecycle management and the effective use of security platforms including Privileged Access Management and Cloudflare.

This is a hands‑on position where success is measured by tangible improvements in security posture and operational resilience. The role suits a senior infrastructure professional who enjoys working across multiple systems, solving practical security challenges, and taking ownership of outcomes. It offers the opportunity to work on high-impact issues with visibility across teams, making it well‑suited to candidates looking to broaden their security exposure while remaining close to infrastructure.

• 8+ years of experience in enterprise systems administration or IT infrastructure
• Strong generalist infrastructure background with the ability to work across multiple systems and environments
• Hands‑on experience with Windows Server (Active Directory, DNS, authentication, certificates) and working knowledge of Linux administration
• Experience managing certificate lifecycle (TLS/PKI), including renewal and ongoing management (key priority)
• Exposure to security tools such as Privileged Access Management (PAM) and Cloudflare (WAF/edge security)
• Experience with logging/monitoring platforms (e.g., Splunk, Sumo Logic or similar)
• Proven ability to remediate vulnerabilities hands‑on, including patching and reducing backlog across systems
• Strong scripting/automation skills (Power Shell required)
• Ability to apply security controls across infrastructure and prevent misconfigurations
• Experience automating certificate lifecycle processes across environments (Desirable Requirement)
• Exposure to SIEM or centralized logging beyond administration, including tuning, alerting, or optimization (Desirable Requirement)
• Experience delivering infrastructure or security projects end‑to‑end (Desirable Requirement)
• Experience working in SaaS or cloud‑centric environments (Desirable Requirement)
• Ability to produce technical documentation, runbooks, and support knowledge transfer (Desirable Requirement)