> Markdown version of [/jobs/ext/2440366-infrastructure-and-security-engineer](https://www.wearedevelopers.com/jobs/ext/2440366-infrastructure-and-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure and Security Engineer - **Company:** HARDEMAN KEMPTON & ASSOC INC - **Location:** Phoenix, AZ, United States - **Experience:** Expert - **Salary:** $110,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** User Authentication, Microsoft Azure, Microsoft Online Services, Cyber Security, Identity and Access Management, Microsoft Software, Windows PowerShell, Phishing, Zero Trust Network Access, Azure Powershell, Cyber Threat Analysis, Microsoft InTune, Infrastructure Automation Frameworks, Cloud Migration, Security Orchestration, Automation & Response - **Published:** August 14, 2026 - **Apply:** https://careers.hka.com/jobs/8212888-senior-infrastructure-and-security-engineer ## About the Role * U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments. * 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies. * 5+ years of hands-on cybersecurity experience within Microsoft cloud and security environments. * Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences. * Strong experience with Azure services, including infrastructure, networking, storage, and identity management. * Experience implementing and supporting Zero Trust security architectures. * Deep understanding of identity and access management, authentication, authorization, and privileged access controls. * Experience managing enterprise cloud security programs and security initiatives. * Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation. * Experience with automation and scripting using PowerShell and/or Azure CLI. * Strong analytical, troubleshooting, and incident response skills., * Experience supporting global or multi-region enterprise environments. * Experience with Microsoft Defender XDR, Sentinel, Purview, and Intune in large-scale environments. * Experience conducting threat modeling, security architecture reviews, and risk assessments. * Familiarity with security and compliance frameworks including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials. * Experience leading major infrastructure, security, or cloud transformation initiatives. * Knowledge of cloud governance, security automation, and infrastructure-as-code practices. * Strong understanding of modern cybersecurity threats, trends, and industry best practices. ## Description Infrastructure & Cloud Operations * Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency. * Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management. * Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools. * Support incident response, root cause analysis, and continuous service improvement initiatives. Security Engineering & Identity Management * Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra ID, Purview, and Intune. * Manage identity and access management controls, including conditional access policies and identity protection. * Implement and support Zero Trust security principles and architectures. * Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration. * Perform security reviews of new technologies, infrastructure changes, and architectural designs. Security Operations & Risk Management * Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents. * Lead technical response activities for security events when required. * Conduct threat modeling, security assessments, and risk evaluations. * Perform regular security posture reviews and develop remediation plans to reduce organizational risk. * Track and support risk reduction initiatives across the enterprise. Governance & Compliance * Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials. * Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes. * Ensure infrastructure and security solutions align with business requirements and operational objectives. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)