Infrastructure Compliance Analyst

Jobtailor; New Jersey; On-site; USD 140,000 - 190,000; Full time

Job summary

Jobtailor is seeking an experienced infrastructure security leader to partner with engineering across design, implementation, and operations to ensure secure, scalable, and compliant infrastructure. You will translate frameworks into actionable guidance, drive vulnerability management, and lead governance across Azure, AWS, Windows, Linux, and on-premises platforms.

The role emphasizes automation, Zero Trust, and policy as code, with opportunities to shape security standards and maturity across

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent professional experience.
• 7+ years of experience in infrastructure engineering, cybersecurity, cloud engineering, or enterprise systems administration.
• Strong knowledge of Windows Server, Linux, Active Directory, Microsoft Entra ID, networking, virtualization, cloud infrastructure, and enterprise platforms.
• Experience interpreting and implementing NIST SP 800-53, NIST CSF, DISA STIGs, ISO/IEC 27001, and FedRAMP.
• Experience with vulnerability management platforms such as Qualys, Tenable, or Rapid7.
• Experience with enterprise endpoint management platforms such as Tanium or Microsoft Intune.
• Experience supporting Microsoft Azure and AWS cloud environments.
• Strong analytical skills with the ability to interpret large datasets and transform technical information into meaningful recommendations.
• Excellent communication skills with the ability to explain complex security concepts to technical and non-technical audiences.

Responsibilities

• Partner with engineering teams throughout design, implementation, and operational lifecycle to ensure infrastructure solutions are secure, scalable, resilient, and compliant.
• Translate security frameworks, regulatory requirements, and organizational security policies into actionable technical guidance.
• Provide subject matter expertise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices.
• Collaborate with GRC and Information Security teams on compliance objectives, security findings, audit requirements, and risk priorities.
• Guide vulnerability remediation by prioritizing findings, identifying remediation strategies, evaluating operational impacts, and validating successful remediation.
• Develop secure configuration standards using DISA STIGs, vendor guidance, and organizational security baselines.
• Support compliant configurations across Windows, Linux, virtualization platforms, cloud services, identity platforms, storage systems, and enterprise infrastructure.
• Analyze vulnerability, compliance, operational, and infrastructure data to identify trends, measure risk, and recommend improvements.
• Develop executive dashboards, metrics, and reporting on infrastructure security health, remediation progress, compliance status, risk trends, and operational maturity.
• Prioritize security initiatives with engineering leadership based on business risk, operational impact, and strategic objectives.
• Automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance.
• Evaluate emerging technologies, security controls, and infrastructure practices.
• Promote Security by Design across infrastructure planning, engineering standards, operational processes, and technology roadmaps.
• Provide technical leadership during cloud migrations, platform upgrades, operating system lifecycle management, and enterprise technology transformations.
• Participate in security architecture reviews, infrastructure design discussions, change management activities, and technical governance boards.
• Develop technical documentation, security standards, implementation guides, engineering playbooks, and operational procedures.
• Advise engineers on security best practices, secure engineering principles, and modern infrastructure security techniques.
• Advocate for Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management.
• Champion automation-first security practices.

Education

Bachelor’s degree in Information Security / CS / IT / Engineering, or equivalent experience

Tools

Qualys

Tenable

Rapid7

Tanium

Microsoft Intune

Microsoft Azure

AWS

Job description

• Partner with engineering teams throughout the design, implementation, and operational lifecycle to ensure infrastructure solutions are secure, scalable, resilient, and compliant
• Translate security frameworks, regulatory requirements, and organizational security policies into actionable technical guidance
• Provide subject matter expertise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices
• Collaborate with GRC and Information Security teams on compliance objectives, security findings, audit requirements, and risk priorities
• Guide vulnerability remediation by prioritizing findings, identifying remediation strategies, evaluating operational impacts, and validating successful remediation
• Develop secure configuration standards using DISA STIGs, vendor guidance, and organizational security baselines
• Support compliant configurations across Windows, Linux, virtualization platforms, cloud services, identity platforms, storage systems, and enterprise infrastructure
• Analyze vulnerability, compliance, operational, and infrastructure data to identify trends, measure risk, and recommend improvements
• Develop executive dashboards, metrics, and reporting on infrastructure security health, remediation progress, compliance status, risk trends, and operational maturity
• Prioritize security initiatives with engineering leadership based on business risk, operational impact, and strategic objectives
• Automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance
• Evaluate emerging technologies, security controls, and infrastructure practices
• Promote Security by Design across infrastructure planning, engineering standards, operational processes, and technology roadmaps
• Provide technical leadership during cloud migrations, platform upgrades, operating system lifecycle management, and enterprise technology transformations
• Participate in security architecture reviews, infrastructure design discussions, change management activities, and technical governance boards
• Develop technical documentation, security standards, implementation guides, engineering playbooks, and operational procedures
• Advise engineers on security best practices, secure engineering principles, and modern infrastructure security techniques
• Advocate for Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management
• Champion automation-first security practices

Requirements

• Comfortable using AI tools (e.g., Copilot, Claude) to accelerate compliance documentation and evidence review, with sound judgment on appropriate use given data sensitivity and regulatory requirements
• Bachelor’s degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent professional experience
• 7+ years of experience in infrastructure engineering, cybersecurity, cloud engineering, or enterprise systems administration
• Strong knowledge of Windows Server, Linux, Active Directory, Microsoft Entra ID, networking, virtualization, cloud infrastructure, and enterprise platforms
• Experience interpreting and implementing NIST SP 800-53, NIST Cybersecurity Framework (CSF), DISA STIGs, ISO/IEC 27001, and FedRAMP
• Experience with vulnerability management platforms such as Qualys, Tenable, or Rapid7
• Experience with enterprise endpoint management platforms such as Tanium or Microsoft Intune
• Experience supporting Microsoft Azure and AWS cloud environments
• Strong analytical skills with the ability to interpret large datasets and transform technical information into meaningful recommendations
• Excellent communication skills with the ability to explain complex security concepts to technical and non-technical audiences

Core Competencies

Demonstrates expertise in secure architecture, vulnerability management, and compliance frameworks, with a strong focus on cloud security and infrastructure best practices. Proficient in developing security standards and automating compliance processes to enhance operational maturity and risk management.

Highest-signal resume keywords

• Infrastructure Engineering
• Cybersecurity
• Cloud Security
• Vulnerability Management
• Compliance Frameworks

ATS Optimization Keywords

Hard Skills

• Windows Server
• Linux
• Active Directory
• Microsoft Entra ID
• Networking
• Virtualization
• Cloud Infrastructure
• NIST SP 800-53
• DISA STIGs
• ISO/IEC 27001

Soft Skills

• Analytical Skills
• Communication Skills

Industry Keywords

• Zero Trust
• Infrastructure as Code
• Policy as Code
• Continuous Compliance
• Secure Configuration Management

Tools & Technologies

• Qualys
• Tenable
• Rapid7
• Tanium
• Microsoft Intune
• Microsoft Azure
• AWS