> Markdown version of [/jobs/ext/2050471-it-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/2050471-it-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # It Infrastructure Security Engineer - **Company:** Nexthink - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing Security, Continuous Integration, Linux, Github, Python (Programming Language), Key Management, Network Security, Windows Servers, Network Segmentation, Windows PowerShell, Azure Active Directory, Ansible, VMware VSphere, Software Vulnerability Management, Scripting, Information Technology, Hashicorp, Terraform - **Published:** August 14, 2026 - **Apply:** https://www.buscojobs.com.es/it-infrastructure-security-engineer-en-madrid-ID-367065512 ## About the Role * 4+ years in infrastructure or security engineering * Experience hardening Windows Server, Linux, and VMware vSphere * Working experience with Active Directory, Group Policy, and Microsoft Entra ID * Experience with Azure/AWS security controls * Scripting xqbhyrx fluency in Python, PowerShell, or Bash * Experience with Infrastructure as Code (Terraform or Ansible) * Knowledge of GitHub and GitHub Actions for CI/CD and HashiCorp Vault for secrets management * Familiarity with vulnerability management, cloud security certifications, and ISO/SOC 2/FedRAMP exposure is a plus * Professional level English; Spanish is a plus ## Description Experteer OverviewPara una comprensión completa de esta oportunidad y de lo que se requerirá para ser un candidato exitoso, siga leyendo.In this role you will engineer and operate security controls for Nexthink's corporate infrastructure across non-cloud, cloud, and internal networks.You'll harden systems, manage patching and cloud posture, and implement segmentation to protect critical assets.You'll collaborate with IT and security teams to maintain compliance and support audits, while driving automation and policy-based configurations at scale.This is a hands-on position with real impact on secure, reliable digital employee experiences.Compensaciones / Beneficios* Contribute to hardening baselines for Windows and Linux VM fleets* Support security controls for Active Directory, Group Policy, and Microsoft Entra ID* Drive patch automation and emergency patching to meet CVE SLAs* Contribute to cloud security posture management (Azure and AWS)* Implement and maintain policy-as-code for cloud baselines and remediate drift* Help implement micro-segmentation and trust-model controls* Validate east-west traffic and network security control compliance* Maintain patch, vulnerability, and configuration evidence for audits* Track and remediate audit findings within defined timelines* Participate in internal/external security audits, including evidence gathering and control walkthroughsResponsabilidades* 4+ years in infrastructure or security engineering* Experience hardening Windows Server, Linux, and VMware vSphere* Working experience with Active Directory, Group Policy, and Microsoft Entra ID* Experience with Azure/AWS security controls* Scripting xqbhyrx fluency in Python, PowerShell, or Bash* Experience with Infrastructure as Code (Terraform or Ansible)* Knowledge of GitHub and GitHub Actions for CI/CD and HashiCorp Vault for secrets management* Familiarity with vulnerability management, cloud security certifications, and ISO/SOC 2/FedRAMP exposure is a plus* Professional level English; Spanish is a plusRequisitos principales* Permanent contract* Hybrid work model* Private Health Insurance* Unlimited vacation* Volunteer days* Gym subsidy ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)