Senior Infrastructure & Security Engineer
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Use - for any list of duties/requirements/benefits, and
for prose. Do NOT repeat the job title as a heading. Do NOT put Job ID / requisition numbers as headings. Include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. Prefer a few substantive sections over many thin ones.
We need to decide which sections to include: About the role (maybe the intro paragraph about HKA and the opportunity). Responsibilities (list). Qualifications and Experience (list). Compensation (salary range). Benefits (list of benefits). Possibly Skills? The qualifications include skills; but we can combine Qualifications and Experience as one section. Benefits separate. Pay separate? The instruction says we can have Pay section for salary. Benefits separate for benefits. Could combine Pay and Benefits into one Compensation section? But they gave examples: Benefits, Pay, Schedule. We can create Pay section for salary range, Benefits section for benefits list. No Schedule info.
We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. The posting includes some scam warning at end; we must remove that. Also "Fairness And Equality At HKA" etc. Remove.
We need to preserve all substantive information. Let's extract:
Intro: "HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise.As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors."
Then "As Part Of The HKA Team You Can Expect" bullet points (though not formatted as bullet list in text). It says:
- A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.
- Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individual
- The opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy.
These are prose sentences; could be put in
or
- . Since they are list-like, we can use
- .
Then "The Opportunity --" paragraph: description of role location, reporting, international team, Microsoft technologies, Zero Trust adoption, impact, hybrid role location info.
Then Responsibilities section with bullet points under headings: Infrastructure & Cloud Operations, Security Engineering & Identity Management, Security Operations & Risk Management, Governance & Compliance. Each has sub-bullets.
We need to output
Responsibilities
then a - for each duty? Could flatten all responsibilities into a single list, but better to keep subheadings? The instruction only says use
for section headings, not subheadings. Could we include subheadings as or just plain text inside - ? Probably we can keep them as part of
- text. Simpler: produce a flat list of all responsibilities.
Similarly Qualifications and Experience: list of required and preferred items. Could separate Required and Preferred as subheadings? Not required but we could include as
? Not allowed? Only for section headings. Could we still use ? The instruction says use for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but to be safe we can just list all qualifications in a single - . Might lose distinction between required and preferred but still preserve all info. Could add a note inside
- like "Required: ..." and "Preferred: ...". That preserves.
Compensation: salary range $110,000 to $140,000.
Benefits: list: medical, dental, vision coverage; 401(k) plan with company match; 20 days of paid time off plus additional company holidays and wellness time; performance bonus opportunities; access to robust training, professional development, and career advancement programs across global organization.
Also mention inclusive culture etc but that's more about culture; could be part of About the role.
We need to avoid filler like "commensurate with experience". Not present.
Now construct HTML:
maybe not needed; just output fragments.
We'll have:
About the role
HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise. As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors.
- A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.
- Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individual.
- The opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy.
Then maybe another for The Opportunity description.
The Opportunity
HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more. The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility. This is a hybrid role open to candidates within commuting range of a number of our offices in the Pacific and Mountain Time Zones. Candidates located near our offices in the Central Time Zone may also be considered.
Then Responsibilities:
Responsibilities
- Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency.
- Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management.
- Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools.
- Support incident response, root cause analysis, and continuous service improvement initiatives.
- Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra ID, Purview, and Intune.
- Manage identity and access management controls, including conditional access policies and identity protection.
- Implement and support Zero Trust security principles and architectures.
- Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration.
- Perform security reviews of new technologies, infrastructure changes, and architectural designs.
- Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents.
- Lead technical response activities for security events when required.
- Conduct threat modeling, security assessments, and risk evaluations.
- Perform regular security posture reviews and develop remediation plans to reduce organizational risk.
- Track and support risk reduction initiatives across the enterprise.
- Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.
- Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes.
- Ensure infrastructure and security solutions align with business requirements and operational objectives.
Then Qualifications and Experience:
Qualifications and Experience
- Required: U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments.
- Required: 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies.
- Required: 5+ years of hands-on cybersecurity experience within Microsoft cloud and security environments.
- Required: Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences.
- Required: Strong experience with Azure services, including infrastructure, networking, storage, and identity management.
- Required: Experience implementing and supporting Zero Trust security architectures.
- Required: Deep understanding of identity and access management, authentication, authorization, and privileged access controls.
- Required: Experience managing enterprise cloud security programs and security initiatives.
- Required: Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation.
- Required: Experience with automation and scripting using PowerShell and/or Azure CLI.
- Required: Strong analytical, troubleshooting, and incident response skills.
- Required: Relevant Microsoft Certifications Include: Azure Administrator Associate (AZ-104), Azure Solutions Architect Expert (AZ-305), Azure Security Engineer Associate (AZ-500), Cybersecurity Architect Expert (SC-100), Identity and Access Administrator Associate (SC-300).
- Preferred: Experience supporting global or multi-region enterprise environments.
- Preferred: Experience with Microsoft Defender XDR, Sentinel, Purview, and Intune in large-scale environments.
- Preferred: Experience conducting threat modeling, security architecture reviews, and risk assessments.
- Preferred: Familiarity with security and compliance frameworks including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.
- Preferred: Experience leading major infrastructure, security, or cloud transformation initiatives.
- Preferred: Knowledge of cloud governance, security automation, and infrastructure-as-code practices.
- Preferred: Strong understanding of modern cybersecurity threats, trends, and industry best practices.
Then Pay:
Pay
HKA offers an annual salary range of $110,000 to $140,000.
Then Benefits:
Benefits
- Medical, dental, and vision coverage
- 401(k) plan with company match
- 20 days of paid time off plus additional company holidays and wellness time
- Performance bonus opportunities
- Access to robust training, professional development, and career advancement programs across our global organization
We should also include the statement about inclusive culture etc? Could be part of About the role but we already have that. Could add a about culture: "At HKA we recognize that our people are critical to our ongoing success. Our priority is to provide an inclusive and collaborative culture aimed at providing the best opportunities for our people to thrive and develop in their chosen career path."
for prose. Do NOT repeat the job title as a heading. Do NOT put Job ID / requisition numbers as headings. Include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. Prefer a few substantive sections over many thin ones. We need to decide which sections to include: About the role (maybe the intro paragraph about HKA and the opportunity). Responsibilities (list). Qualifications and Experience (list). Compensation (salary range). Benefits (list of benefits). Possibly Skills? The qualifications include skills; but we can combine Qualifications and Experience as one section. Benefits separate. Pay separate? The instruction says we can have Pay section for salary. Benefits separate for benefits. Could combine Pay and Benefits into one Compensation section? But they gave examples: Benefits, Pay, Schedule. We can create Pay section for salary range, Benefits section for benefits list. No Schedule info. We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. The posting includes some scam warning at end; we must remove that. Also "Fairness And Equality At HKA" etc. Remove. We need to preserve all substantive information. Let's extract: Intro: "HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise.As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors." Then "As Part Of The HKA Team You Can Expect" bullet points (though not formatted as bullet list in text). It says: - A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams. - Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individual - The opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy. These are prose sentences; could be put in
or
- . Since they are list-like, we can use
- .
Then "The Opportunity --" paragraph: description of role location, reporting, international team, Microsoft technologies, Zero Trust adoption, impact, hybrid role location info.
Then Responsibilities section with bullet points under headings: Infrastructure & Cloud Operations, Security Engineering & Identity Management, Security Operations & Risk Management, Governance & Compliance. Each has sub-bullets.
We need to output
Responsibilities
then a- for each duty? Could flatten all responsibilities into a single list, but better to keep subheadings? The instruction only says use
for section headings, not subheadings. Could we include subheadings as or just plain text inside
- ? Probably we can keep them as part of
- text. Simpler: produce a flat list of all responsibilities. Similarly Qualifications and Experience: list of required and preferred items. Could separate Required and Preferred as subheadings? Not required but we could include as
? Not allowed? Only
for section headings. Could we still use
? The instruction says use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). It doesn't forbid other headings, but to be safe we can just list all qualifications in a single
- . Might lose distinction between required and preferred but still preserve all info. Could add a note inside
- like "Required: ..." and "Preferred: ...". That preserves.
Compensation: salary range $110,000 to $140,000.
Benefits: list: medical, dental, vision coverage; 401(k) plan with company match; 20 days of paid time off plus additional company holidays and wellness time; performance bonus opportunities; access to robust training, professional development, and career advancement programs across global organization.
Also mention inclusive culture etc but that's more about culture; could be part of About the role.
We need to avoid filler like "commensurate with experience". Not present.
Now construct HTML:
maybe not needed; just output fragments.
We'll have:
About the role
HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise. As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors.
- A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.
- Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individual.
- The opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy.
for The Opportunity description.
The Opportunity
HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more. The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility. This is a hybrid role open to candidates within commuting range of a number of our offices in the Pacific and Mountain Time Zones. Candidates located near our offices in the Central Time Zone may also be considered.
Then Responsibilities:Responsibilities
- Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency.
- Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management.
- Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools.
- Support incident response, root cause analysis, and continuous service improvement initiatives.
- Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra ID, Purview, and Intune.
- Manage identity and access management controls, including conditional access policies and identity protection.
- Implement and support Zero Trust security principles and architectures.
- Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration.
- Perform security reviews of new technologies, infrastructure changes, and architectural designs.
- Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents.
- Lead technical response activities for security events when required.
- Conduct threat modeling, security assessments, and risk evaluations.
- Perform regular security posture reviews and develop remediation plans to reduce organizational risk.
- Track and support risk reduction initiatives across the enterprise.
- Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.
- Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes.
- Ensure infrastructure and security solutions align with business requirements and operational objectives.
Qualifications and Experience
- Required: U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments.
- Required: 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies.
- Required: 5+ years of hands-on cybersecurity experience within Microsoft cloud and security environments.
- Required: Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences.
- Required: Strong experience with Azure services, including infrastructure, networking, storage, and identity management.
- Required: Experience implementing and supporting Zero Trust security architectures.
- Required: Deep understanding of identity and access management, authentication, authorization, and privileged access controls.
- Required: Experience managing enterprise cloud security programs and security initiatives.
- Required: Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation.
- Required: Experience with automation and scripting using PowerShell and/or Azure CLI.
- Required: Strong analytical, troubleshooting, and incident response skills.
- Required: Relevant Microsoft Certifications Include: Azure Administrator Associate (AZ-104), Azure Solutions Architect Expert (AZ-305), Azure Security Engineer Associate (AZ-500), Cybersecurity Architect Expert (SC-100), Identity and Access Administrator Associate (SC-300).
- Preferred: Experience supporting global or multi-region enterprise environments.
- Preferred: Experience with Microsoft Defender XDR, Sentinel, Purview, and Intune in large-scale environments.
- Preferred: Experience conducting threat modeling, security architecture reviews, and risk assessments.
- Preferred: Familiarity with security and compliance frameworks including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials.
- Preferred: Experience leading major infrastructure, security, or cloud transformation initiatives.
- Preferred: Knowledge of cloud governance, security automation, and infrastructure-as-code practices.
- Preferred: Strong understanding of modern cybersecurity threats, trends, and industry best practices.
Pay
HKA offers an annual salary range of $110,000 to $140,000.
Then Benefits:Benefits
- Medical, dental, and vision coverage
- 401(k) plan with company match
- 20 days of paid time off plus additional company holidays and wellness time
- Performance bonus opportunities
- Access to robust training, professional development, and career advancement programs across our global organization
about culture: "At HKA we recognize that our people are critical to our ongoing success. Our priority is to provide an inclusive and collaborative culture aimed at providing the best opportunities for our people to thrive and develop in their chosen career path."
- for each duty? Could flatten all responsibilities into a single list, but better to keep subheadings? The instruction only says use
- .
Then "The Opportunity --" paragraph: description of role location, reporting, international team, Microsoft technologies, Zero Trust adoption, impact, hybrid role location info.
Then Responsibilities section with bullet points under headings: Infrastructure & Cloud Operations, Security Engineering & Identity Management, Security Operations & Risk Management, Governance & Compliance. Each has sub-bullets.
We need to output