Server Security Engineer

About The Job:

• Experience: 8-12 Years
• Urgent requirement for a Server Security Engineer to support a vulnerability remediation program for an Internal Migration project.
• Looking for an experienced hands-on engineer who can actively drive remediation activities rather than focusing solely on advisory or reporting functions.
• Primary focus is on Windows Server Security; Linux expertise is desirable and considered a plus.

Essential Job Functions:

• Triaging the vulnerability backlog, validating exposure, and establishing ownership for identified security findings.
• Define and implement approved TLS, cipher, and SSH security baselines across Windows servers, Linux servers, web servers, Java runtimes, and load balancers.
• Replace self-signed and untrusted certificates with certificates issued from internal PKI environments and implement certificate renewal automation.
• Apply Windows security policy remediations, including SMB Signing and Remote Desktop Network Level Authentication (NLA) using centralized administration methods.
• Harden SSH configurations and remediate OpenSSH-related security vulnerabilities.
• Migrate legacy protocols and services, including implementation of SNMPv3 and removal of Telnet and other insecure services.
• Secure exposed management interfaces and vulnerable network services.
• Automate remediation activities using PowerShell, Bash, scripting frameworks, and infrastructure automation tools.
• Produce audit-ready remediation evidence and document compensating controls where required.
• Collaborate with infrastructure, application, and operations teams to assess risks, plan remediation activities, and execute changes.

Qualifications:
Required Skills & Experience

• 6-10 years of infrastructure engineering or infrastructure security experience with proven large-scale vulnerability remediation delivery.
• Strong expertise in Windows Server administration and Group Policy management.
• Hands-on experience with:
  • Public Key Infrastructure (PKI)
  • Certificate Management
  • TLS / SSL Configuration
  • Cryptographic Standards and Security Hardening
• Experience with Red Hat Linux administration and OpenSSH hardening (preferred but optional).
• Hands-on experience using vulnerability management platforms such as:
  • Wiz
  • Nessus
  • Qualys
• Strong scripting and automation expertise using:
  • PowerShell
  • Ansible
  • Python
  • Bash
• Ability to work closely with application owners to assess compatibility impacts and execute structured change management processes.

Preferred Experience

• VMware security hardening.
• Implementation of CIS Benchmarks and/or DISA STIG standards.
• Load Balancer SSL Profile configuration experience using:
  • NetScaler
  • HAProxy
  • Equivalent load balancing technologies
• Experience working within regulated, compliance-driven, or audited environments.

Key Competencies

• Vulnerability Management & Remediation
• Server Security Hardening
• Windows Infrastructure Security
• PKI & Certificate Lifecycle Management
• TLS/SSL & Cryptography
• Infrastructure Automation
• Security Compliance & Audit Readiness
• Risk Assessment & Mitigation
• Change Management
• Cross-functional Collaboration

How to Apply:Interested candidates are encouraged to respond/submit their updated resumes, and for additional job opportunities, please visitJobs In India – VARITE.