Hybrid Infra Security Engineer - Cloud & On-Prem Defender

Nexthink; Madrid; Híbrido; EUR 33.000 - 49.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Private health insurance

Meal vouchers 11 EUR/ day

Unlimited vacation

Team events

Descripción de la vacante

Nexthink, a leader in digital employee experience management software, seeks an Infrastructure Security Engineer to fortify its corporate infrastructure across on-premises, cloud, and internal networks. You will report to the Infrastructure Security Lead and help implement hardening, patching, and cloud posture controls.

Your role covers Windows/Linux hardening, AD/GP/Entra ID management, and cloud security for Azure and AWS, with a focus on automation, IaC, and secure CI/CD pipelines.

Formación

• 4+ years in infrastructure or security engineering.
• Experience hardening Windows Server, Linux, and VMware vSphere.
• Working experience with Active Directory, Group Policy, and Microsoft Entra ID.
• Experience with Azure/AWS security controls.
• Scripting fluency in Python, PowerShell, or Bash.
• Experience with Infrastructure as Code (Terraform/Ansible).
• Knowledge of GitHub and GitHub Actions for CI/CD pipelines, with HashiCorp Vault for secrets management.
• Familiarity with vulnerability management platforms and cloud security certifications (Azure/AWS).
• Professional level of spoken and written English; Spanish a plus.

Responsabilidades

• Engineer and operate security controls for Nexthink's corporate infrastructure.
• Support AD, GP, and Entra ID configurations and security posture.
• Contribute to patch automation and emergency patching SLA compliance.
• Manage cloud security posture for Azure and AWS.
• Develop policy-as-code for cloud baselines and remediation of drift.
• Create and maintain micro-segmentation and trust-model controls.
• Audit evidence collection and remediation of findings within timelines.
• Participate in security audits and coordination with auditors.

Conocimientos

Infra/Sec Eng

Windows/Linux hardening

AD/GP/Entra ID

Azure/AWS security

Scripting (Python/PowerShell/Bash)

IaC (Terraform/Ansible)

GitHub/GitHub Actions

Vault (HashiCorp)

Security certifications (Azure/AWS)

English communication

Herramientas

Terraform

Ansible

GitHub Actions

HashiCorp Vault

VMware vSphere

Descripción del empleo

Nexthink, a leader in digital employee experience management software, seeks an Infrastructure Security Engineer to fortify its corporate infrastructure across on-premises, cloud, and internal networks. You will report to the Infrastructure Security Lead and help implement hardening, patching, and cloud posture controls.

Your role covers Windows/Linux hardening, AD/GP/Entra ID management, and cloud security for Azure and AWS, with a focus on automation, IaC, and secure CI/CD pipelines.