Infrastructure Security Engineer

Role Overview

A technology company formed by aviation and maritime industry leaders delivers advanced digital maritime applications through a unified platform. The Infrastructure Security Engineer strengthens the security of cloud and on‑premises infrastructure by designing, implementing, and monitoring security controls across Microsoft Azure, networks, and containerized environments. The role ensures resilience against cyber threats and compliance with industry and maritime regulations while collaborating with platform, DevOps, and product teams to embed security into all delivery stages.

Key Responsibilities

• Design and implement security controls across Azure infrastructure, Kubernetes clusters, and networks.
• Monitor, detect, and respond to infrastructure security incidents using tools such as Microsoft Defender for Cloud, Sentinel, and Azure Security Center.
• Conduct vulnerability assessments, patching, and hardening of servers, containers, and cloud services.
• Define and enforce identity and access management (IAM), least‑privilege models, and role‑based access controls.
• Support secure design of CI/CD pipelines, infrastructure‑as‑code, and containerized workloads.
• Collaborate with architects and engineers to conduct security reviews of new systems and deployments.
• Maintain and improve logging, monitoring, and alerting frameworks for proactive threat detection.
• Support compliance with regulatory and industry frameworks such as GDPR, ISO 27001, and maritime cybersecurity guidelines.
• Provide incident response expertise including forensic investigation and root cause analysis.
• Promote security awareness and training for engineering and operations teams.

Skills and Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience).
• 3–5 years of experience in infrastructure or cloud security engineering.
• Strong knowledge of Microsoft Azure security services (Defender, Sentinel, Security Center, Key Vault, Azure Policy).
• Hands‑on experience with firewalls, VPNs, WAFs, and intrusion detection/prevention systems.
• Experience with identity and access management including Azure AD, MFA, Conditional Access, and Privileged Identity Management (PIM).
• Familiarity with container and Kubernetes security (image scanning, secrets management, runtime policies).
• Knowledge of infrastructure‑as‑code security (Terraform, Bicep, ARM templates).
• Familiarity with monitoring and logging frameworks (Azure Monitor, Log Analytics, ELK/EFK).
• Understanding of security frameworks and standards (ISO 27001, NIST CSF, CIS benchmarks).
• Nice‑to‑have exposure to maritime OT/IT systems, IoT security, or safety‑critical environments.
• Strong analytical, incident response, and problem‑solving skills.
• Excellent communication and collaboration abilities with a proactive security‑first mindset.