Infrastructure Security Engineer

TL;DR

Infrastructure Security Engineer (Cloud and Enterprise Infrastructure): Engineering and operating security controls for corporate Windows, Linux, VMware, cloud, and internal network environments with an accent on hardening, patching, cloud posture management, and segmentation. Focus on automating critical vulnerability remediation, enforcing policy-as-code and configuration baselines, and validating controls for compliance audits.

Location: Madrid, Spain; hybrid work model with office and remote work

Salary: €33,000–€49,000 gross per year; total on-target earnings of €36,000–€54,000 including an annual performance bonus.

Company

hirify.global provides digital employee experience management software that combines real-time analytics, automation, and employee feedback to help IT teams monitor and optimize digital workplaces.

What you will do

• Develop and maintain hardening baselines for Windows and Linux virtual machine fleets.
• Operate security controls for Active Directory, Group Policy, and Microsoft Entra ID.
• Improve patch automation and emergency patching coverage for critical CVEs.
• Manage cloud security posture and policy-as-code baselines across Azure and AWS.
• Implement micro-segmentation and trust-model controls while validating east-west traffic flows.
• Maintain compliance evidence, remediate exceptions and audit findings, and coordinate internal and external security audits.

Requirements

• 4+ years of experience in infrastructure or security engineering across cloud and non-cloud environments.
• Experience hardening Windows Server, Linux, and VMware vSphere.
• Working knowledge of Active Directory, Group Policy, and Microsoft Entra ID.
• Experience with Azure and AWS security controls.
• Scripting fluency in Python, PowerShell, or Bash, plus Infrastructure as Code experience with Terraform or Ansible.
• Professional-level spoken and written English required.

Nice to have

• Knowledge of GitHub, GitHub Actions, and HashiCorp Vault.
• Familiarity with vulnerability management platforms and Azure or AWS security certifications.
• Exposure to ISO, SOC 2 Type 2, or FedRAMP requirements.
• Spanish language skills.

Culture & Benefits

• Permanent employment contract and competitive compensation package.
• Private health insurance, daily €11 meal vouchers, and flexible compensation for childcare and public transportation.
• Flexible hours, unlimited paid time off in addition to 23 holiday days, and three company-paid volunteer days.
• Up to €25 per month toward a gym subscription and reimbursement of English and Spanish classes.
• Central Madrid office, fresh refreshments, and regular company and team events.