Experteer Overview In this role you will engineer and operate security controls across Nexthink’s corporate infrastructure, spanning on-premises and cloud environments. You will work with the Infrastructure Security Lead to harden systems, manage patches, and enforce cloud posture and segmentation. You’ll contribute to AD/Entra ID and policy-as-code initiatives, while ensuring compliance and secure configurations. This is a hands-on role with impact on security across Windows, Linux, VMware, and cloud services, helping Nexthink scale securely as it grows. Compensaciones / Beneficios • Contribute to hardening baselines for Windows and Linux VM fleet • Support security controls for Active Directory, Group Policy, and Microsoft Entra ID • Drive patch automation to meet SLA for critical CVEs • Contribute to cloud security posture management across Azure and AWS • Implement and maintain policy-as-code for cloud baselines and remediate configuration drift • Help implement micro-segmentation policies and trust-model controls • Validate east-west traffic and security control compliance against standards • Maintain patch, vulnerability,



and configuration evidence for audits • Track and remediate audit findings and exceptions within timelines • Participate in internal and external security audits, including evidence gathering and coordination Responsabilidades • 4+ years in infrastructure or security engineering • Experience hardening Windows Server, Linux, and VMware vSphere • Working experience with Active Directory, Group Policy, and Microsoft Entra ID • Experience with Azure/AWS security controls • Scripting fluency in Python, PowerShell, or Bash • Experience with Infrastructure as Code (Terraform or Ansible) • Knowledge of GitHub and GitHub Actions for CI/CD pipelines; familiarity with HashiCorp Vault for secrets management • Familiarity with vulnerability management platforms; cloud security certification (Azure/AWS); ISO/SOC 2 Type 2/FedRAMP exposure is a plus • Professional level English; Spanish is a plus Requisitos principales • Permanent contract • Hybrid work model • Private health insurance • Adaptable hours • Unlimited vacation plus 3 company-paid volunteer days • Gym subscription reimbursement

📌 IT Infrastructure Security Engineer (Madrid)
🏢 Nexthink
📍 Madrid