Senior Technical Engineer

Job Description

What YOU’LL DO:

As a Senior Technical Engineer you will implement, operate and continuously improve security across enterprise-scale cloud and on-premises infrastructure. Covering Azure , Google Cloud (GCP) and data center environments, this role works closely with engineering, operations and Cyber Security teams to reduce risk and maintain secure, resilient platforms.

The role combines security engineering and operational execution across cloud services, Windows and Linux servers, virtualization, networks, storage and backup platforms, including the identity and connectivity services that link these environments.

The focus is on practical control implementation, security posture management, vulnerability remediation and incident readiness, using Microsoft Defender, Google Security Command Center (SCC) and relevant security tooling. The specialist translates approved security standards and architectural guidance into effective, measurable operational controls.

Key responsibilities:

• Implement and maintain security controls across Azure, GCP and on premises infrastructure in line with enterprise security standards and approved architecture.
• Assess security posture, identify misconfigurations and drive remediation of vulnerabilities and control gaps with platform owners.
• Apply secure configuration baselines and system hardening across servers, virtualization, networks, storage and backup platforms.
• Implement identity and access controls, including least privilege, role-based access, privileged access management and periodic access reviews across cloud IAM, Microsoft Entra ID and Active Directory.
• Configure and maintain endpoint and workload protection, security logging and monitoring integrations with central security operations.
• Work with network teams to implement segmentation, firewall rules and secure hybrid connectivity.
• Coordinate risk-based patching and vulnerability remediation, validate fixes and track exceptions through the agreed risk process.
• Implement and maintain encryption, certificate and secrets management controls across hybrid environments
• Embed security checks into infrastructure provisioning and change processes; automate repeatable controls using Terraform and scripting.
• Support security assessments, audit evidence collection and alignment with GDPR, SOC-related control requirements, ISO 27001 and ISO 27017.
• Investigate and triage findings from SCC, Microsoft Defender and on-premises security tools; coordinate containment and remediation with Cyber Security and infrastructure teams.
• Support incident investigations, recovery exercises and lessons-learned; maintain security runbooks and report on posture, remediation progress and outstanding risks.
• Work directly with cloud, data center, network and product teams to implement practical security controls.
• Act as a security enabler, balancing risk reduction with service availability and delivery needs.
• Partner with security architects and Cyber Security teams to translate requirements into tested configurations and operational procedures.
• Coordinate with managed service providers and platform owners on remediation ownership, priorities and timely closure.
• Develop reusable automation, implementation guidance and knowledge articles that improve consistency across cloud and on-premises operations.
• Contribute to Security Champions networks and share practical security knowledge with engineering and operations teams.

WHO YOU’LL WORK WITH

At H&M you will be the part of The Cloud & Data Center (DC) area which is the backbone of our digital infrastructure, enabling secure, scalable, and resilient IT services for the entire organization. Our hybrid approach leverages both on-premises data centres and leading public cloud platforms (Azure, Google Cloud) to deliver high availability, performance, and global reach.

Global Footprint: Multiple hubs and data centres across Europe, Asia, and North America, with key locations in Sweden, Amsterdam, Dublin, Singapore, Hong Kong, and the US.

Hybrid & Multi-Cloud: Strategic use of Azure and Google Cloud for core workloads, with on-premises co-location sites for specialized needs.

Operational Excellence: 24/7 incident management, proactive monitoring, and lifecycle management ensure business continuity and compliance.

WHO YOU ARE

We are looking for people with:

• 6-10 years of experience in information security or infrastructure security, including 3+ years in hands-on security engineering or specialist roles across cloud and on-premises environments.
• Strong practical experience securing Azure and/or GCP , with the ability to support security controls across both platforms.
• Datacenter knowledge is a must
• Hands-on experience with Microsoft Defender, Google Security Command Center and vulnerability assessment and remediation tooling.
• Strong knowledge of Windows and Linux security, Active Directory, virtualization and data center infrastructure protection.
• Practical experience with cloud IAM , Microsoft Entra ID, privileged access management and least-privilege controls.
• Working knowledge of network security, segmentation, firewalls, hybrid connectivity, encryption, certificates and secrets management.
• Experience with security logging, SIEM integration, incident triage and collaboration with security operations teams.
• Ability to automate security configurations and checks using Terraform, PowerShell, Python or equivalent tools, and integrate controls into DevOps workflows.
• Practical understanding of GDPR , SOC -related controls, ISO 27001 and ISO 27017 , including audit evidence and control validation.
• Experience working in agile, product-centric organizations and coordinating remediation across engineering, operations and managed service providers.

WHY YOU’LL LOVE WORKING HERE

At H&M, we are proud to be a vibrant and welcoming company. We offer all our employees at H&M attractive benefits with extensive development opportunities around the globe. All our employees receive a staff discount card, usable on all our H&M brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET, Afound.

JOIN US

Our uniqueness comes from a combination of many things – our inclusive and collaborative culture, our strong values, and opportunities for growth. But most of all, it’s our people who make us who we are.

Take the next step in your career together with us. The journey starts here.

Additional Information

This position is exclusively for internal movement, open on Smart Recruiter till 19 November 2026 . Don't miss your chance to be at the forefront of our exciting development phase!