Senior Infrastructure and Security Engineer

The Opportunity

HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more.

The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility.

This is a hybrid role with ideal locations of Phoenix, AZ or Las Vegas, NV.

Responsibilities

Infrastructure & Cloud Operations

• Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency.

• Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management.

• Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools.

• Support incident response, root cause analysis, and continuous service improvement initiatives.

Security Engineering & Identity Management

• Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra ID, Purview, and Intune.

• Manage identity and access management controls, including conditional access policies and identity protection.

• Implement and support Zero Trust security principles and architectures.

• Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration.

• Perform security reviews of new technologies, infrastructure changes, and architectural designs.

Security Operations & Risk Management

• Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents.

• Lead technical response activities for security events when required.

• Conduct threat modeling, security assessments, and risk evaluations.

• Perform regular security posture reviews and develop remediation plans to reduce organizational risk.

• Track and support risk reduction initiatives across the enterprise.

Governance & Compliance

• Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.

• Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes.

• Ensure infrastructure and security solutions align with business requirements and operational objectives.

Qualifications and Experience

Required

• U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments.

• 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies.

• 5+ years of hands-on cybersecurity experience within Microsoft cloud and security environments.

• Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences.

• Strong experience with Azure services, including infrastructure, networking, storage, and identity management.

• Experience implementing and supporting Zero Trust security architectures.

• Deep understanding of identity and access management, authentication, authorization, and privileged access controls.

• Experience managing enterprise cloud security programs and security initiatives.

• Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation.

• Experience with automation and scripting using PowerShell and/or Azure CLI.

• Strong analytical, troubleshooting, and incident response skills.

Relevant Microsoft certifications include:

• Azure Administrator Associate (AZ-104)

• Azure Solutions Architect Expert (AZ-305)

• Azure Security Engineer Associate (AZ-500)

• Cybersecurity Architect Expert (SC-100)

• Identity and Access Administrator Associate (SC-300)

Preferred

• Experience supporting global or multi-region enterprise environments.

• Experience with Microsoft Defender XDR, Sentinel, Purview, and Intune in large-scale environments.

• Experience conducting threat modeling, security architecture reviews, and risk assessments.

• Familiarity with security and compliance frameworks including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.

• Experience leading major infrastructure, security, or cloud transformation initiatives.

• Knowledge of cloud governance, security automation, and infrastructure-as-code practices.

• Strong understanding of modern cybersecurity threats, trends, and industry best practices.