Senior Infrastructure and Security Engineer

HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more.

The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility.

This is a hybrid role open to candidates within commuting range of a number of our offices in the Pacific and Mountain Time Zones. Candidates located near our offices in the Central Time Zone may also be considered.

• Operate, maintain, and improve HKA’s global infrastructure across Windows, Microsoft 365, cloud, hybrid, networking, virtualization, storage, monitoring, backup, and disaster-recovery environments.

• Support Azure and hybrid-cloud services, including compute, networking, storage, identity, monitoring, resilience, backup/recovery, and cost management.

• Troubleshoot infrastructure incidents and service issues; lead root-cause analysis and implement lasting improvements.

• Maintain operational documentation, runbooks, recovery procedures, and technical standards.

• Administer and enhance Microsoft Defender XDR, Entra ID, and Intune.

• Manage endpoint security, device compliance, application deployment, patching, and secure configuration standards.

• Implement and maintain Conditional Access, MFA, RBAC, PIM, identity protection, least-privilege access, and access-governance controls.

• Support Microsoft 365 security controls across identity, endpoints, devices, applications, and collaboration services.

• Investigate security events and infrastructure risks; support technical response, remediation, and follow-up actions.

• Partner with Security Operations and other IT teams to improve monitoring, vulnerability remediation, endpoint protection, and security posture.

• Help mature HKA’s use of Microsoft Sentinel, including security monitoring, investigation, detection improvement, and response workflows.

• Help develop Microsoft Purview capabilities for data protection, information governance, classification, and related controls.

• Automate repeatable infrastructure and security tasks using PowerShell, Azure CLI, or similar tools.

• Participate in infrastructure changes, security reviews, technology assessments, and architecture discussions to ensure solutions are secure, reliable, supportable, and aligned with business needs.

• Contribute to security standards, operational processes, and risk-reduction initiatives across the global technology environment.

• Work closely with global IT colleagues, security teams, vendors, and business stakeholders to improve the reliability, security, and performance of HKA systems.

• U.S. citizenship is required due to access requirements for client systems and Microsoft GCC High environments.

• 7+ years of progressive IT experience, including at least 3 years of hands-on infrastructure engineering or systems administration in a production environment.

• Hands-on responsibility for enterprise infrastructure across servers, networking, virtualization, cloud or hybrid systems, backup/disaster recovery, monitoring, and incident troubleshooting.

• Hands-on administration of Microsoft Defender XDR or Microsoft Defender security products, including endpoint security, alert investigation, incident response, remediation, or security policy management.

• Hands-on administration of Microsoft Entra ID, including Conditional Access, MFA, RBAC, PIM, identity protection, or access governance.

• Hands-on administration of Microsoft Intune, including endpoint configuration, device compliance, MDM/MAM, Autopilot, application deployment, or endpoint-security policy.

• Experience securing and supporting Windows, Active Directory, Microsoft 365, endpoint, and hybrid infrastructure environments.

• Experience automating infrastructure or security tasks using PowerShell, Azure CLI, or similar scripting and automation tools.

• Strong troubleshooting, incident-response, root-cause-analysis, and documentation skills.

• Ability to communicate clearly with technical and nontechnical stakeholders across a global organization.

• Azure Administrator Associate (AZ-104)

• Azure Solutions Architect Expert (AZ-305)

• Azure Security Engineer Associate (AZ-500)

• Cybersecurity Architect Expert (SC-100)

• Identity and Access Administrator Associate (SC-300)