Windows Server Hardening Consultant (F/M)

About this vacancy

We are looking for an experienced Windows Server Hardening Consultant to analyze, deploy, and validate hardened security configurations for Windows Server virtual machines in a Microsoft Azure IaaS environment.

You will ensure alignment with CIS Windows Server Benchmarks (Level 1 & Level 2) and other security best practices, while assessing the operational impact of security controls and proactively proposing mitigations or fixes when compatibility issues or incidents occur.

What we expect from you

• Expert-level knowledge of Windows Server 2016/2019/2022 internals, services, security components, and registry-based configuration
• Hands-on experience implementing CIS Windows Server Benchmarks (Level 1 & Level 2)
• Strong understanding of Active Directory, domain security policies, and Kerberos/NTLM authentication flows
• Experience with Azure IaaS, including:
• Azure VM Extensions
• Azure Policy
• Azure Automation / DSC
• Azure Monitor / Log Analytics
• Strong PowerShell skills for automation, configuration, and troubleshooting
• Excellent analytical and diagnostic skills; ability to explain technical impacts clearly to non-technical stakeholders
• Ability to work independently and act as a trusted security advisor; strong problem-solving mindset with proactive mitigation proposals

Nice to have

• CIS Benchmark certification or proven CIS hardening project experience
• Microsoft certifications: AZ-104, AZ-305, SC-100/SC-200/SC-300
• Experience with Microsoft Defender for Cloud, GPO modeling & RSoP analysis, and Blue Team / Security Operations