> Markdown version of [/jobs/ext/1987249-it-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/1987249-it-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Infrastructure Security Engineer

- **Company:** Nexthink
- **Location:** Madrid, Spain (Remote available)
- **Salary:** €33,000.0 - €49,000.0
- **Contract:** Permanent contract
- **Skills:** Private Networks, Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Linux, Github, Python (Programming Language), Key Management, Network Security, Windows Servers, Network Segmentation, Windows PowerShell, Azure Active Directory, Ansible, VMware VSphere, Software Vulnerability Management, Policy as Code, Scripting, Cloud Platform System, Information Technology, Hashicorp, Terraform
- **Published:** August 8, 2026
- **Apply:** https://jobs.smartrecruiters.com/Nexthink/744000142160409-it-infrastructure-security-engineer-

## About the Role

* 4+ years in infrastructure or security engineering, with exposure to both non-cloud and cloud environments
 * Experience hardening Windows Server, Linux, and VMware vSphere
 * Working experience with Active Directory, Group Policy, and Microsoft Entra ID
 * Experience with Azure/AWS security controls
 * Scripting fluency in Python, PowerShell, or Bash
 * Experience with Infrastructure as Code, such as Terraform or Ansible
 * Knowledge of GitHub and GitHub Actions for CI/CD pipelines, with a notion of HashiCorp Vault for secrets management
 * Familiarity with vulnerability management platforms, cloud security certification (Azure/AWS), and ISO/SOC 2 Type 2/FedRAMP exposure are a plus
 * Professional level of spoken and written English, Spanish is a plus

## Description

We are looking for an Infrastructure Security Engineer who will engineer and operate the technical security controls protecting Nexthink's corporate infrastructure, spanning non-cloud, cloud, and internal network environments.

You will report to the Infrastructure Security Lead, executing the hardening, patching, cloud posture, and segmentation.

Your main responsibilities will include:

 * Contribute to hardening baselines across the VM fleet (Windows, Linux)
 * Support security controls and initiative for Active Directory, Group Policy, and Microsoft Entra ID
 * Take part in patch automation, helping drive emergency patching coverage to SLA for critical CVEs
 * Contribute to cloud security posture management across Azure and AWS
 * Help implement and maintain policy-as-code for cloud configuration baselines, and support remediation of configuration drift
 * Help implement micro-segmentation policies and trust-model controls
 * Help validate east-west traffic flows and network security control compliance against corporate standards
 * Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits
 * Track and help remediate assigned exceptions and audit findings within defined timelines
 * Take part in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)