Infrastructure Compliance Analyst – Hybrid (Horsham, PA)

About the role

The Infrastructure Compliance Analyst III – Infrastructure Security acts as a senior security advisor for Infrastructure Engineering. Working closely with Cloud, Platform, SRE, and Systems Engineering teams, the analyst ensures that infrastructure services are secure, scalable, resilient, and meet compliance requirements.

Key responsibilities

• Partner with engineering teams throughout design, implementation, and operations to embed security, scalability, and compliance.
• Interpret security frameworks, regulatory mandates, and internal policies into actionable guidance for infrastructure engineers.
• Provide expertise on secure architecture, OS hardening, identity management, cloud and network security, encryption, and certificate management.
• Collaborate with GRC and Information Security to align on audit requirements, risk priorities, and remediation strategies.
• Guide vulnerability remediation, prioritize findings, and validate successful fixes.
• Develop and maintain secure configuration standards using DISA STIGs, vendor hardening guides, and internal baselines.
• Support implementation of compliant configurations across Windows, Linux, virtualization platforms, cloud services, identity platforms, storage systems, and broader enterprise infrastructure.
• Analyze vulnerability, compliance, and operational data to identify trends and recommend strategic security improvements.

Required profile

• Proven experience translating security frameworks and regulatory requirements into technical solutions.
• Strong understanding of governance, risk, and compliance processes.
• Ability to communicate complex security concepts to engineering and business stakeholders.
• Experience leading vulnerability remediation and configuration management initiatives.

Required skills

• Secure architecture design
• Operating system hardening (Windows, Linux)
• Identity management
• Cloud security
• Network security
• Encryption and certificate management
• Virtualization platforms
• Configuration standards (DISA STIGs, vendor hardening)