IT Infrastructure Security Engineer

Nexthink is the leader in digital employee experience management software. The company provides IT leaders with unprecedented insight allowing them to see, diagnose and fix issues at scale impacting employees anywhere, with any application or network, before employees notice the issue. As the first solution to allow IT to progress from reactive problem solving to proactive optimization, Nexthink enables its more than 1,500 customers to provide better digital experiences to more than 25+ million employees. Dual headquartered in Lausanne, Switzerland and Boston, Massachusetts, Nexthink has 9 offices worldwide. #LI-Hybrid We are looking for an Infrastructure Security Engineer who will engineer and operate the technical security controls protecting Nexthink's corporate infrastructure, spanning non-cloud, cloud, and internal network environments. You will report to the Infrastructure Security Lead, executing the hardening, patching, cloud posture, and segmentation. Your main responsibilities will include: Contribute to hardening baselines across the VM fleet (Windows, Linux) Support security controls and initiative for Active Directory, Group Policy, and Microsoft Entra ID Take part in patch automation, helping drive emergency patching coverage to SLA for critical CVEs Contribute to cloud security posture management across Azure and AWS Help implement and maintain policy-as-code for cloud configuration baselines, and support remediation of configuration drift Help implement micro-segmentation policies and trust-model controls Help validate east-west traffic flows and network security control compliance against corporate standards Maintain patch, vulnerability, and configuration evidence to support compliance and certification audits Track and help remediate assigned exceptions and audit findings within defined timelines Take part in internal and external security audits, including evidence gathering, auditor coordination, and control walkthroughs 4+ years in infrastructu