Infrastructure Security Specialist

Job Title: Infrastructure Security Specialist

Overview

The Infrastructure Security Specialist is responsible for designing, implementing, and managing security controls across IT infrastructure environments. The role focuses on protecting networks, servers, cloud platforms, and data centers against internal and external threats while ensuring compliance with organizational and regulatory standards.

Key Responsibilities

• Security Architecture & Implementation

• Design, implement, and maintain secure network and server infrastructures (on-premises and cloud).
• Deploy and manage firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and endpoint protection tools.
• Secure infrastructure-as-code (IaC) deployments in hybrid or multi-cloud environments.

• Monitoring & Incident Response

• Monitor infrastructure security events using SIEM tools (e.g., Splunk, QRadar, Azure Sentinel).
• Investigate and respond to security incidents, breaches, and vulnerabilities.
• Conduct root cause analyses and implement remediation strategies.

• Vulnerability Management

• Perform regular vulnerability assessments, patch management, and configuration hardening.
• Coordinate with infrastructure and DevOps teams to resolve security issues.

• Compliance & Governance

• Ensure infrastructure aligns with security frameworks (ISO 27001, NIST, CIS, GDPR, etc.).
• Maintain documentation, audit logs, and compliance reports.

• Access & Identity Management

• Manage identity, access, and privileged account controls across systems and networks.
• Implement zero-trust and least-privilege models.

• Collaboration & Training

• Collaborate with IT, DevOps, and cloud teams to integrate security best practices.
• Conduct training and awareness sessions for infrastructure teams.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• 68 years of experience in IT infrastructure and security operations.
• Strong knowledge of:
• Network protocols, firewalls, and VPNs
• Cloud platforms (AWS, Azure, GCP) and their security services
• Linux/Windows server hardening and endpoint security
• SIEM, vulnerability scanning, and EDR solutions
• Familiarity with scripting languages (PowerShell, Python, Bash) for automation.
• Understanding of regulatory compliance (ISO, SOC 2, GDPR, HIPAA).

Preferred Certifications

• CISSP, CISM, or CISA
• CompTIA Security+ or CySA+
• Microsoft Certified: Security Operations Analyst / Azure Security Engineer
• AWS Certified Security Specialty
• CCSP (Certified Cloud Security Professional)

Soft Skills

• Strong analytical and problem-solving ability.
• Excellent communication and documentation skills.
• Ability to work collaboratively across technical and business teams.
• Attention to detail and a proactive security mindset.