Senior Infrastructure & Security Engineer

We need to output HTML fragment with sections: About the role? The posting includes description at top: "HKA is a global leader...". That's about the company. Could be "About the role"? Actually "About the role" is typical heading for description of role. The posting includes "The Opportunity" paragraph describing role. Also "Responsibilities" list. "Required Qualifications and Experience" list. "Preferred Experience" list. "Compensation" paragraph with salary and benefits. Also "Benefits" details. Also maybe "Pay" and "Schedule"? Not present. So we should include sections: About the role (maybe using the introductory paragraphs before Responsibilities). Responsibilities (list). Qualifications (maybe combine Required Qualifications and Experience). Preferred Experience could be under Qualifications or separate? The instruction: use headings for section headings e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have Required Qualifications and Experience (that's Qualifications). Preferred Experience could be under Qualifications as additional bullet? Could also be under Skills? But better to keep Qualifications heading and include both required and preferred? However we must not invent sections with filler. We have content for Qualifications (required) and Preferred Experience. Could combine under Qualifications heading with subheadings? Not allowed to add extra headings beyond those listed. Could put both required and preferred under Qualifications, maybe separate paragraphs. That's fine. We also have Compensation and Benefits details. So we can have Pay section (salary range) and Benefits section (benefits list). The posting includes compensation paragraph with salary and benefits details. So we can split: Pay: salary range. Benefits: list of benefits. We must not repeat job title as heading. No Job ID. We must remove boilerplate: cookie/navigation/legal/EEO etc. At end there is lots of boilerplate about fairness, scam warnings, etc. Remove those. We must preserve all substantive information. So we need to keep the descriptive paragraphs about HKA, The Opportunity, responsibilities, qualifications, preferred experience, compensation, benefits. We need to output only HTML fragment, no /. Use

for section headings. Use

• for any list of duties/requirements/benefits. Use

  for prose. We must not create sections with filler like "commensurate with experience". Not present. Let's extract content. Introductory paragraphs: "HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise. As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors." Then: "As Part Of The HKA Team You Can Expect A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individualThe opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy." That seems like a run-on but we keep as is. Then: "The Opportunity HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more. The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility. This is a hybrid role open to candidates within commuting range of a number of our offices in the Pacific and Mountain Time Zones. Candidates located near our offices in the Central Time Zone may also be considered." That's the role description. Then Responsibilities heading with bullet list. Responsibilities list: - Infrastructure & Cloud Operations Manage and optimize Azure environments, ensuring high availability, performance, scalability, and cost efficiency. Maintain Azure infrastructure services including virtual machines, networking, storage, and identity management. Monitor system performance and availability using Azure Monitor, Log Analytics, and related monitoring tools. Support incident response, root cause analysis, and continuous service improvement initiatives. - Security Engineering & Identity Management Administer and enhance Microsoft security technologies including Defender, Sentinel, Entra ID, Purview, and Intune. Manage identity and access management controls, including conditional access policies and identity protection. Implement and support Zero Trust security principles and architectures. Establish continuous verification, risk-based access controls, least-privilege access models, and just-in-time administration. Perform security reviews of new technologies, infrastructure changes, and architectural designs. - Security Operations & Risk Management Collaborate with Security Operations teams to monitor, investigate, and respond to cybersecurity incidents. Lead technical response activities for security events when required. Conduct threat modeling, security assessments, and risk evaluations. Perform regular security posture reviews and develop remediation plans to reduce organizational risk. Track and support risk reduction initiatives across the enterprise. - Governance & Compliance Support alignment with industry security frameworks and regulatory requirements, including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials. Promote security best practices and contribute to the continuous improvement of cybersecurity standards and processes. Ensure infrastructure and security solutions align with business requirements and operational objectives. We need to format as

  • for any list of duties/requirements/benefits. The responsibilities are hierarchical; we could make each top-level bullet as
  • containing the heading and then sub-items maybe as nested
    . That's acceptable. Next: Required Qualifications and Experience list: - U.S. citizenship required due to access requirements for client systems and Microsoft GCC High environments. - 7+ years of infrastructure engineering experience, with a strong focus on Microsoft technologies. - 5+ years of hands-on cybersecurity experience within Microsoft cloud and security environments. - Strong communication with high emotional intelligence, including the ability to understand audience, context, and impact to effectively communicate to a wide variety of audiences. - Strong experience with Azure services, including infrastructure, networking, storage, and identity management. - Experience implementing and supporting Zero Trust security architectures. - Deep understanding of identity and access management, authentication, authorization, and privileged access controls. - Experience managing enterprise cloud security programs and security initiatives. - Knowledge of infrastructure security principles, including endpoint security, encryption, identity protection, and threat mitigation. - Experience with automation and scripting using PowerShell and/or Azure CLI. - Strong analytical, troubleshooting, and incident response skills. - Relevant Microsoft Certifications Include Azure Administrator Associate (AZ-104) Azure Solutions Architect Expert (AZ-305) Azure Security Engineer Associate (AZ-500) Cybersecurity Architect Expert (SC-100) Identity and Access Administrator Associate (SC-300) We need to keep as list items. Preferred Experience list: - Experience supporting global or multi-region enterprise environments. - Experience with Microsoft Defender XDR, Sentinel, Purview, and Intune in large-scale environments. - Experience conducting threat modeling, security architecture reviews, and risk assessments. - Familiarity with security and compliance frameworks including ISO 27001, NIST CSF, NIST 800-171, CMMC, HIPAA, and Cyber Essentials. - Experience leading major infrastructure, security, or cloud transformation initiatives. - Knowledge of cloud governance, security automation, and infrastructure-as-code practices. - Strong understanding of modern cybersecurity threats, trends, and industry best practices. Compensation: "HKA offers an annual salary range of $110,000 to $140,000, along with a competitive benefits package designed to support your health, financial well-being, and work-life balance." Benefits list: "Benefits include medical, dental, and vision coverage, a 401(k) plan with company match, 20 days of paid time off plus additional company holidays and wellness time, performance bonus opportunities, and access to robust training, professional development, and career advancement programs across our global organization." We could also include the sentence about inclusive culture etc but that's maybe boilerplate? It's about culture but not required. Might keep as part of Benefits? It's not a benefit per se but could be included in Benefits section? The instruction: include a section ONLY when posting has real, specific content for it. The culture statement is generic but still specific? It's about inclusive and collaborative culture. Might be considered boilerplate? It's not standard EEO but still generic. Safer to omit? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate. The culture statement is not exactly EEO but could be considered fluff. Might be safe to keep as part of Benefits? But it's not a benefit. Could be omitted. We'll include Pay and Benefits sections. Pay:

    HKA offers an annual salary range of $110,000 to $140,000.

    Benefits:
    • medical, dental, and vision coverage
    • a 401(k) plan with company match
    • 20 days of paid time off plus additional company holidays and wellness time
    • performance bonus opportunities
    • access to robust training, professional development, and career advancement programs across our global organization
    We also need to include the sentence about competitive benefits package designed to support... maybe incorporate into Benefits section preamble

    ...competitive benefits package designed to support your health, financial well-being, and work-life balance.

    then list. Now About the role section: combine the introductory paragraphs and The Opportunity paragraph. Could be multiple

    elements. We must not repeat job title as heading. So we will have:

    About the role

    HKA is a global leader in risk mitigation, dispute resolution, and expert witness services. We tackle complex challenges with our multi-disciplinary expertise. As trusted consultants and advisors, we deliver solutions in uncertain and disputed situations, ensuring the best outcomes for clients worldwide. Our experts have testified globally on major cases spanning across a wide range of industries and sectors.

    As Part Of The HKA Team You Can Expect A strong collaborative culture with a mutual pursuit of your success alongside the success of our teams.Autonomy to solve problems creatively, contribute to our innovative direction, and be valued as an individualThe opportunity to work on enterprise-scale infrastructure and cybersecurity initiatives, leveraging modern cloud and security technologies while helping shape HKA's global IT strategy.

    The Opportunity HKA's Global IT team is looking for a Senior Infrastructure and Security Engineer to play a key role in strengthening and evolving our enterprise security and cloud infrastructure. This position will be based in the USA, reports to our Infrastructure Services Manager who is based in the UK and be part of an international team with colleagues across the globe including USA, UK, South Africa, Australia and more. The role also offers the opportunity to work with leading Microsoft technologies including Azure, Entra ID, Defender, Sentinel, Purview, and Intune while helping drive Zero Trust adoption and cybersecurity best practices. You'll have a direct impact on the security, resilience, and performance of systems that support colleagues and clients around the world. If you enjoy solving complex technical challenges and influencing security strategy in a global environment, this role offers both technical depth and visibility. This is a hybrid role open to candidates within commuting range of a number of our offices in the Pacific and Mountain Time Zones. Candidates located near our offices in the Central Time Zone may also be considered.

    Then Responsibilities.