Experteer Overview

Para una comprensión completa de esta oportunidad y de lo que se requerirá para ser un candidato exitoso, siga leyendo.
In this role you will engineer and operate security controls for Nexthink’s corporate infrastructure across non-cloud, cloud, and internal networks. You’ll harden systems, manage patching and cloud posture, and implement segmentation to protect critical assets. You’ll collaborate with IT and security teams to maintain compliance and support audits, while driving automation and policy-based configurations at scale. This is a hands-on position with real impact on secure, reliable digital employee experiences.

Compensaciones / Ventajas
• Contribute to hardening baselines for Windows and Linux VM fleets
• Support security controls for Active Directory, Group Policy, and Microsoft Entra ID
• Drive patch automation and emergency patching to meet CVE SLAs
• Contribute to cloud security posture management (Azure and AWS)
• Implement and maintain policy-as-code for cloud baselines and remediate drift
• Help implement micro-segmentation and trust-model controls
• Validate east-west traffic and network security control compliance
• Maintain patch,



vulnerability, and configuration evidence for audits
• Track and remediate audit findings within defined timelines
• Participate in internal/external security audits, including evidence gathering and control walkthroughs

Responsabilidades
• 4+ years in infrastructure or security engineering
• Experience hardening Windows Server, Linux, and VMware vSphere
• Working experience with Active Directory, Group Policy, and Microsoft Entra ID
• Experience with Azure/AWS security controls
• Scripting xqbhyrx fluency in Python, PowerShell, or Bash
• Experience with Infrastructure as Code (Terraform or Ansible)
• Knowledge of GitHub and GitHub Actions for CI/CD and HashiCorp Vault for secrets management
• Familiarity with vulnerability management, cloud security certifications, and ISO/SOC 2/FedRAMP exposure is a plus
• Professional level English; Spanish is a plus

Requisitos principales
• Permanent contract
• Hybrid work model
• Private Health Insurance
• Unlimited vacation
• Volunteer days
• Gym subsidy

📌 IT Infrastructure Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid