Build Secure, Resilient Global Infrastructure. The Server Security Engineer is responsible for planning, implementing, operating, and continuously improving global Windows Server and Azure infrastructure services. The role’s primary focus is on Windows Server engineering, endpoint security, vulnerability management, security patching, and system hardening. Responsibilities include, but are not limited to, owning assigned technical domains and working closely with the Product Owner to translate business and service requirements into secure, reliable, supportable, and scalable technical solutions. This role collaborates closely with Global IT teams, cybersecurity teams, application owners, vendors, and other stakeholders. In addition to ensuring stable day-to-day operations, this role contributes to service roadmaps, architecture and technical design, lifecycle management, automation, documentation, and continuous service improvement. This role provides advanced support for complex incidents and problem management while ensuring global infrastructure services meet security, availability, performance, and compliance requirements. To be considered for this position, applicants must be legally authorized to work in the United States without current or future sponsorship. What You’ll Do • Lead planning, engineering, operation and continuous improvement of Windows Server security services across a global hybrid infrastructure landscape. • Manage assessment, deployment and validation of Windows Server security updates using enterprise patch management and automation tools. • Manage and continuously enhance endpoint protection, detection and response capabilities across Windows Server environment. • Provide advanced troubleshooting, resolution, and root cause analysis for Windows Server security incidents and configuration issues. • Develop and maintain secure Windows Server configurations and hardening, operational procedures and security baselines in alignment with company cybersecurity standards. • Collaborate with Global IT teams, cybersecurity teams, application owners, vendors and other stakeholders to implement consistent and scalable security controls. • Partner with the Product Owner to define requirements, prioritize initiatives, manage technical risks, and deliver Windows Server security roadmap objectives. • Monitor industry trends, emerging threats, and technological developments to drive continuous service improvement. What You’ll Bring • This position is not eligible for employer-sponsored work authorization or visa sponsorship (including initial, transfer, or extension), and candidates must be authorized to work in the United States at the time of application and remain authorized for the duration of employment without the need for sponsorship. • Bachelor’s degree in Information Technology, Computer Science, or Engineering, required Master or PhD are an added advantage • Minimum five (5) years of experience in managing and securing enterprise scale Windows Server estate in a hybrid infrastructure landscape, required • Hands on engineering experience with Microsoft Configuration Manager (SCCM/MECM), Windows Server endpoint protection, and Endpoint Detection and Response (EDR) technologies in enterprise environments • Experience with cloud-based infrastructure services, preferably Microsoft Azure, including virtual machine platforms, monitoring and infrastructure operations • Strong understanding of server security best practices, standards, controls, and compliance requirements • Strong analytical, troubleshooting, and problem-solving skills with an affinity for infrastructure and security technologies • Demonstrated willingness to learn, adapt, and continuously improve in a rapidly evolving technology landscape • Ability to understand business requirements and translate them into secure, reliable, and value creating technical solutions • Excellent interpersonal, organizational, communication, and team skills in an international environment • Fluent in English (verbally and written) Hilti, Inc is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity, gender expression, veteran status, or disability.