System Security Engineer

We are looking for an experienced System Security Engineer to strengthen and maintain the security of our IT infrastructure. The ideal candidate will have strong expertise in operating system security, endpoint protection, Active Directory, and infrastructure hardening. Review AD structure and hardening posture. Execute AD restructuring (OU/GPO redesign) and apply hardening remediations using Ansible/CAC automation Validate compliance against CIS benchmarks, establish continuous monitoring, and hand over documentation/runbooks Execute migration of 92 EOL/EOS operating systems and 85 databases to supported versions, validate post-migration stability Ensures secure configuration, hardening, and monitoring of servers, endpoints, and operating systems. Implement OS hardening (Windows, Linux) based on CIS benchmarks. Manage endpoint security tools (EDR, AV, DLP). Conduct patch management and vulnerability remediation. Support incident response and forensic investigations. Maintain system security documentation and SOPs. Required Skills & Experience 4+ years in system security or infrastructure security. Strong understanding of AD, GPOs, and server security