Windows server hardening consultant M/F

Share your Windows server hardening expertise !

Hays is looking for a Windows Server Hardening Consultant for one of its client based in Luxembourg.

• Freelance contrat or permanent contract via a payrolling company
• 1 remote day per week
• Location : Sandweiler (Luxembourg)

Your responsabilities :

• Windows Server security analysis
• Implementation of CIS Benchmarks
• Windows Server OS hardening
• Advanced Group Policy (GPO) configuration
• Active Directory (AD) security management
• Operational impact testing
• Hardening exception management
• PowerShell / DSC automation
• Security documentation
• Post-hardening Level 3 (L3) support
• Internal compliance audits
• Collaboration with infrastructure teams
• Security integration into IT projects
• Secure patch management
• Privileged account security management
• Security log management and analysis
• Microsoft security monitoring & threat intelligence

Your profile :

Technical Expertise

• Expert-level knowledge of Windows Server OS (2016/2019/2022) internals, services, security components, and registry-based configurations.
• Hands-on experience implementing CIS Windows Server Benchmarks (Level 1 & Level 2).
• Strong understanding of Active Directory, domain security policies, and Kerberos/NTLM authentication flows.
• Experience with Azure IaaS, including:
• Azure VM extensions
• Azure Policy
• Azure Automation / DSC
• Azure Monitor / Log Analytics

• Proficiency in PowerShell for automation, configuration, and troubleshooting.

Soft Skills

• Excellent analytical and diagnostic abilities.
• Strong communication skills for explaining complex technical impacts to non-technical stakeholders.
• Ability to work independently and serve as a trusted security advisor.

Preferred Qualifications

• CIS Benchmark certification or previous CIS hardening project experience.
• Microsoft certifications:
• AZ-104 (Azure Administrator)
• AZ-305 (Solutions Architect)
• SC-100/SC-200/SC-300 (Security)
• Experience with:
• Microsoft Defender for Cloud
• GPO modeling & Resultant Set of Policy (RSoP) analysis
• Blue Team / Security Operations