IT Security Engineer – Government & Critical Infrastructure

About the role

We are looking for an experienced IT Security Engineer to join a leading organization operating in the government and critical infrastructure sector. You will protect the enterprise IT environment by managing security technologies, monitoring threats, and ensuring compliance with industry standards.

Key responsibilities

• Administer, maintain and optimise enterprise security solutions such as firewalls, endpoint protection, email security, IDS/IPS, DLP, VPN and IAM.
• Monitor, investigate and respond to security alerts, incidents and service requests.
• Perform security patch management, system hardening and regular updates across all platforms.
• Conduct vulnerability assessments, coordinate remediation and track findings to closure.
• Design, implement and continuously improve security controls and operational procedures.
• Support infrastructure upgrades, server migrations and technology projects while applying security best practices.
• Develop and maintain IT security policies, standards and operating procedures.
• Participate in risk assessments, vendor security reviews and compliance initiatives (ISO 27001, NIST, MITRE ATT&CK).
• Prepare operational reports, security metrics and executive summaries.
• Provide on‑call support for critical security incidents when required.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or a related field.
• Minimum 7 years of experience in IT infrastructure and security, preferably in highly regulated environments such as government, defense or finance.
• Professional certifications highly preferred (CISSP, CISM, CompTIA Security+, CEH, GIAC, CCNP Security, CCIE Security, SANS).

Required skills

• Firewalls
• Endpoint Protection
• Email Security
• IDS/IPS
• Data Loss Prevention (DLP)
• VPN
• Identity and Access Management (IAM)
• Security patch management and system hardening
• Vulnerability assessment and remediation
• Security incident response
• Security frameworks (NIST, ISO 27001, MITRE ATT&CK)
• Security policy development and compliance reporting