Senior Infrastructure Security Engineer

About the role

Swan IT is searching for a Senior Infrastructure Security Engineer to join a client in Cape Town. The role will act as a technical leader, guiding security initiatives across Cybersecurity, Infrastructure and Operations teams.

Key responsibilities

• Design, configure and manage security settings for multi‑domain Active Directory environments, performing regular assessments and enforcing policies.
• Manage the lifecycle of AD accounts, groups and OUs, implement Role‑Based Access Control and least‑privilege models.
• Lead incident response for infrastructure security events, develop playbooks and work with the SOC to detect and mitigate threats such as Pass‑the‑Hash, Golden Ticket and Kerberoasting.
• Implement disaster‑recovery procedures for AD, oversee backup/restore processes and coordinate SIEM lifecycle management including upgrades and capacity planning.
• Collaborate with cybersecurity, compliance, architecture and operations teams, provide technical leadership, prepare security posture reports and manage third‑party consultants.

Required profile

• Bachelor’s degree in Computer Science, IT or related field (or equivalent experience).
• At least 7 years of IT security experience, with a minimum of 5 years focused on Active Directory.
• Proven experience securing multi‑domain AD forests and integrating AD with hybrid‑cloud environments.
• Hands‑on experience with networking, firewalls, Windows and Unix/Linux operating systems and internet protocols.
• Relevant certifications such as CISSP, CISM or Microsoft Certified: Identity and Access Administrator Associate.

Required skills

• Active Directory (multi‑domain forests)
• Role‑Based Access Control (RBAC)
• Incident response and playbook development
• Security Information and Event Management (SIEM)
• Microsoft Entra ID Protection
• Checkpoint and FortiGate firewalls
• Windows Server and Unix/Linux OS
• Networking and internet protocols
• Hybrid‑cloud AD integration
• Log analysis and monitoring tools