AtPrincipal33we strive to make happiness at work a reality. Because it's not just about the money, it's also about the work environment and appreciation. It's about creating the best team setup you can imagine and getting involved in the things you're passionate about. And you can be a part of it, because it's fun to get things doneWe want our employees to innovate and we allow them to do what they are truly passionate about. Based on this conviction, Principal33 aligns its strategy around its vision: to become a leading IT service company and a better working-life balance. With currently over 200 employees from different countries, we are actively shaping the future of work.Key Responsibilities:Technical Leadership & ArchitectureAct as the senior technical authority for server security across Windows and Linux platformsDefine and maintain secure server architecture standards and patternsLead the design and implementation of secure, scalable server solutionsProvide expert guidance on security risks, mitigations, and architectural trade-offsReview and approve technical designs from junior engineers and project teamsServer Security & HardeningDesign, build, and maintain hardened server environments aligned to CIS, NIST, and ISO 27001 standardsEnsure secure configuration of operating systems, middleware, and core infrastructure servicesLead implementation of privileged access management (PAM) and secure service account practicesOwn and continuously improve server security baselinesVulnerability & Patch ManagementOwn the server vulnerability management lifecycle, from discovery to remediationLead prioritisation and remediation of critical and high-risk vulnerabilitiesDefine patching strategies, maintenance windows, and exception processesWork with Security Operations and Risk teams to manage residual risk and risk acceptanceIdentity, Access & AuthenticationLead secure integration with identity platforms (e.g. Active Directory, Azure AD, LDAP)Design and enforce least-privilege access and role-based access controlsImplement advanced authentication methods including MFA, certificates, and conditional accessReview and improve access governance processesMonitoring, Incident Response & Threat MitigationDesign and maintain server security monitoring, logging, and alerting strategiesIntegrate server platforms with SIEM and SOC toolingAct as a senior escalation point during security incidentsLead root cause analysis and post-incident improvement actionsCloud & Hybrid SecuritySecure server workloads across cloud platforms (Azure, AWS) and hybrid environmentsDefine security controls for virtual machines, containers, and infrastructure servicesChampion infrastructure-as-code and automation with security embedded by defaultWork with Cloud and Architecture teams on Zero Trust and modern security modelsGovernance, Compliance & Continuous ImprovementSupport audits and regulatory requirements (e.g. ISO 27001, SOC 2, GDPR)Produce and maintain security standards, technical documentation, and runbooksIdentify opportunities to improve tooling, automation, and operational efficiencyContribute to security roadmaps and strategic initiativesMentoring & CollaborationMentor and support junior and mid-level engineersPromote security best practices across infrastructure and engineering teamsCommunicate complex technical risks clearly to non-technical stakeholdersRequirements:Must-Have QualificationsExtensive experience securing enterprise Windows and Linux server environmentsStrong expertise in server hardening, vulnerability management, and patchingDeep knowledge of Active Directory, identity integration, and access controlsExperience leading complex technical initiatives and resolving high-severity incidentsStrong understanding of enterprise security frameworks and best practicesProven ability to influence, mentor, and lead technicallyDesirableStrong experience with Azure and/or AWS server securityAutomation and scripting skills (PowerShell, Bash, Terraform, ARM, etc.)Experience with SIEM, EDR, and endpoint/server protection platformsKnowledge of Zero Trust architectures and cloud-native security controlsExperience securing containerised workloads (Docker, Kubernetes)Qualifications & Certifications (Desirable)Microsoft, Linux, or Cloud certifications (e.g. AZ-104, AZ-500, RHCE)Security certifications such as CISSP, Security+, GIACITIL or similar service management qualificationsPersonal AttributesStrong security mindset with excellent attention to detailConfident decision-maker and technical leaderCalm and effective under pressure, particularly during incidentsClear communicator with the ability to influence senior stakeholdersProactive, adaptable, and committed to continuous improvementWhat we offerBenefitsFulltime employment or contractor basedDay off on your birthdayReferral bonus if you bring your contactsGifts for special occasions1 free week per year at our company apartment in sunny Valencia, SpainInternational and multicultural environment(Self)-DevelopmentContinuous training, we will help you improve your technical skills, evolve in the tech community and develop as a professional.We are an active part of the tech-community. You may have the opportunity to attend and participate in local and international tech-events.Wanna join?