[Hiring] Infrastructure Security Specialist @Revvity

Role Description

The On-Premises Security Engineer is responsible for protecting enterprise data center infrastructure, with specialized ownership of security engineering for VMware vSphere, vCenter Server, ESXi hosts, virtual machines, and the supporting identity, network, storage, backup, logging, and management services. The role establishes and maintains secure configurations, monitors for threats and control failures, drives vulnerability remediation, supports incident response, and provides security guidance throughout the infrastructure lifecycle.

Working closely with On-Premises Operations, Security Operations, Infrastructure Engineering, Network, Storage, Backup, R&D, QA, Compliance, and corporate IT teams, the engineer converts security requirements into practical, supportable controls that protect availability, integrity, confidentiality, and recoverability without introducing unnecessary operational risk.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field, or equivalent practical experience.
• 5+ years of hands-on experience in information security, infrastructure security, systems engineering, or data center operations, including substantial experience securing VMware environments.
• Hands-on experience with VMware vSphere, vCenter Server, ESXi, clusters, virtual networking, datastores, permissions, certificates, logging, patching, and lifecycle management.
• Strong knowledge of infrastructure security principles, including system hardening, vulnerability management, privileged access, network segmentation, encryption, logging, monitoring, incident response, backup security, and disaster recovery.
• Experience securing Windows Server and Linux systems and working with Active Directory, DNS, DHCP, PKI/certificates, enterprise networking, firewalls, load balancers, shared storage, and backup platforms.
• Experience with SIEM, vulnerability management, endpoint protection, configuration compliance, and security incident-management tools.
• Ability to interpret technical logs and security alerts, perform structured troubleshooting, collect defensible evidence, assess risk, and coordinate remediation across multiple teams.
• Strong written and verbal communication skills, disciplined documentation practices, and the ability to explain technical risk to non-technical stakeholders.

Requirements

• Implement and review least-privilege access, role-based access control, separation of duties, privileged access workflows, service accounts, and administrative group membership across VMware management services.
• Secure vCenter Single Sign-On and connected identity sources, including Active Directory or federated identity integrations; review authentication, authorization, and privileged activity for anomalous or unauthorized behavior.
• Perform or coordinate vulnerability assessments, configuration reviews, and security testing across hypervisors, management appliances, guest operating systems, and supporting infrastructure.
• Integrate VMware and supporting infrastructure telemetry with the enterprise SIEM and security monitoring ecosystem; ensure security-relevant events are collected, normalized, retained, and usable for investigation.
• Provide security engineering and assurance throughout data-center consolidation and workload migration activities, including pre-migration risk assessments, target-state security requirements, migration validation, and post-migration control verification.
• Validate that VMware security controls align with backup, recovery, disaster recovery, and business continuity requirements, including administrative isolation and recoverability of critical workloads.
• Provide security subject-matter expertise to infrastructure, engineering, application, compliance, and business teams on secure on-premises architecture and VMware operations.

Benefits

• Competitive salary and performance-based bonuses.
• Comprehensive health insurance plans.
• Flexible work hours and remote work options.
• Professional development and training opportunities.
• Retirement savings plans with company matching.