Infrastructure & Security Engineer (M/F/X) – Permanent Contract

The Infrastructure & Security Engineer is responsible for administering CMCM’s systems and networks, with a strong focus on technical security. He works alongside the System & Network Engineer on day-to-day operations and is responsible for securing the infrastructure.
You will join the IT Operations & Security team, which currently consists of five people, and contribute to the digital transformation of CMCM, Luxembourg’s leading non-profit, solidarity-based mutual health insurance provider, which covers approximately 280,000 people.
You will report to the Head of IT Operations & Security and work closely with the System & Network Engineer, as well as with the application team, an external CISO, and the DPO.

Infrastructure Operations - about half the time

• Ensure the availability of networks, servers, storage, and virtualization, working on a rotating basis with your partner: applying patches, performing backups, and monitoring systems.
• Resolve infrastructure incidents escalated by support.
• Set up project environments (DEV, UAT, PROD), including on Azure.

Securing configurations and access - about one-third of the time

• Define baseline configurations for servers, workstations, and network equipment, and correct any deviations.
• Validate the security of each new piece of equipment or service before it goes live.
• Manage accounts and permissions (Active Directory, Entra ID, MFA) and reduce the number of privileged accounts.
• Facilitate access reviews with application managers.

Vulnerability and Security Incident Management

• Initiate vulnerability scans, prioritize fixes, and track them until they are verified.
• Serve as the technical point of contact for external auditors and penetration testers.
• Handle first-level security incidents: assess, contain, and escalate.

Education and Professional Experience

You hold a degree equivalent to at least a three-year post-secondary degree and have three (3) to five (5) years of experience in systems and network administration, with proven expertise in infrastructure security. You enjoy hands-on work and are eager to share your expertise as part of a two-person team.

Technical Skills

Essential Skills

• Fluency in French and a working knowledge of technical English.
• Daily experience with Windows Server and Active Directory.
• Knowledge of Azure, Entra ID, certificates, and the TLS protocol.
• Proficiency in networking: VLANs, VPNs, DNS, and firewalls.
• Proven experience in hardening configurations, vulnerability management, and managing access and privileged accounts.

The following are assets

• Skills in virtualization, backup, and recovery.
• Knowledge of Linux and experience with scripting in PowerShell, Bash, or Python.
• Knowledge of SIEM or EDR solutions, and familiarity with ISO 27001, NIST, or GDPR.
• Certifications such as Security+, AZ-500, or SC-200.
• Initial experience or strong interest in AI and agents, particularly their security: agent access to data, agent identities and permissions, and data leak prevention.

Soft Skills

• Enjoy working in pairs and collaborating with internal teams and external stakeholders.
• Ability to share your knowledge and support your security partner’s professional development.
• Ability to explain a technical risk to a non-technical audience.
• Attention to detail in documenting actions and configurations.

• Full-time permanent position
• Work location: Luxembourg City
• One day of remote work per week and one week of on-call duty per month, on a rotating basis with your partner.
• Collective bargaining agreement offering numerous benefits

Start date: based on your availability