Infrastructure & Network Engineer — Secure Operations

Description MER Group is looking for an Infrastructure & Network Engineer to manage a multi-site environment—including servers, virtualization, networking and communications, backup, and recovery—and to embed security requirements into the implementation phase. This role owns configuration and hardening baselines, ensures the resilience of core systems, and controls the production readiness gate. Responsibilities • Own configuration and hardening baselines for all platforms, including documented periodic reviews. • Manage Windows Server, Active Directory, and the virtualization layer. • Manage the FortiGate/FortiSwitch fabric, including policies, VLANs, and segmentation. • Implement outbound traffic controls and transition from broad allow rules to clearly defined restrictive policies. • Consolidate remote access and reduce unmanaged parallel access channels. • Ensure complete backup coverage for core systems, including actual recovery testing—not configuration alone. • Define RTO and RPO targets and develop a disaster recovery plan, including conducting recovery exercises. • Own and enforce the production readiness gate, including for external vendors. • Implement configuration as code so that baselines are consistently enforced rather than dependent on individual memory. Requirements Mandatory Requirements: • Experience: 3–5 years in enterprise infrastructure • Servers: Windows Server, Active Directory, and virtualization • Networking: Fortinet firewalls—policies, VLANs, and segmentation • Backup: Hands-on backup and real-world recovery experience—not policy configuration alone • Scripting: PowerShell—working scripts with error handling and logging • Hardening: Configuration baselines based on CIS or an equivalent standard • Work practices: Documentation and version control • Languages: Hebrew and technical English Significant Advantages: • Experience working in multi-site and international environments • Configuration as code using Ansible, Terraform, DSC, or an equivalent tool • Experience implementing Privileged Access Management (PAM) • Experience writing and executing disaster recovery plans and exercises • Certifications: NSE 4 or higher, Azure Administrator