Senior Network Engineer - Infra

Job Description Join our Cyber Security Engineering unit, where innovation and security drive us. We are transforming technology with modern Network Security, integrations and cloud services. We are looking for a highly skilled and experienced Senior Cyber Security Engineer to join our Network Security Engineering team. This role involves architecting, designing, implementing, and maintaining robust security measures to protect our global network infrastructure. The ideal candidate will blend theoretical knowledge with hands-on expertise. This role requires a deep understanding of cybersecurity principles, Network Security technologies, and the ability to collaborate across multiple globally dispersed stakeholders and teams. WHAT YOU’LL DO Lead the development, optimization and integration of network security policies, rules and monitoring across platforms such as NDR, SSE, SD‑WAN and proxy solutions Design and improve network security solutions across branches, stores and data centers, ensuring strong alignment with business and security needs Conduct security architecture reviews, risk assessments and threat modelling, and drive hardening initiatives across our network landscape Modernize network security by transitioning from legacy systems to modern SSE and ZTNA solutions, supported by clear roadmaps, policies and plans Monitor and enhance the performance, availability and reliability of network security solutions, ensuring compliance with ISO, NIST, GDPR and internal standards Design, configure and troubleshoot network security devices and services across on‑prem and cloud environments, providing advanced Level‑3 support when needed WHO YOU'LL WORK WITH You’ll join a friendly and collaborative Network Security Engineering team of seven, soon to be eight, working closely with colleagues across Business Tech. Your daily partners will include network SMEs, Cyber Security Advisors, Core Platforms and Global Infrastructure Services, as well as teams supporting stores, warehouses and new market entries. You’ll also connect with external partners and contribute to cross‑functional projects where network and cyber security come together. This is a highly collaborative environment where your expertise will help shape our security posture and uplift the team’s cyber maturity. WHO YOU ARE 6+ years of experience in cybersecurity engineering, with a focus on network environments Strong, practical knowledge of: Network security technologies (firewalls, IDS/IPS, SWG, SASE, VPN, CASB, ZTNA), Cloud platforms: Azure, GCP, Security architecture methodologies and governance frameworks Expertise in network security solutions and products provided by Cisco, HP Aruba, Zscaler and Citrix NetScaler (proven by certificates) Strong knowledge of risk assessment and security control frameworks (ISO 27001, NIST). Familiarity with security maturity models including C2M2 Excellent ability to translate security requirements into implementable engineering solutions. Strong understanding of IP networking and protocols, including IPsec, HSRP, BGP, OSPF, 802.11, and QoS. Understand regulatory and compliance requirements (GDPR, PCI-DSS, Schrems, etc.). Independent problem-solving, addressing complex security challenges with minimal supervision. Preferred qualifications: CCNP (Security) or higher-level certifications such as the CCIE. CISSP or OSCP security certifications. Azure Security Engineer, or GCP Security Engineer certification. Experience with Agile methodologies and tools (e.g., Jira/Confluence) WHO WE ARE H&M is a fashion brand that offers the latest styles and inspiration, from fashion pieces and unique designer collaborations to affordable wardrobe essentials. Our business idea is fashion & quality at the best price in a sustainable way. Learn more about H&M here. WHY YOU’LL LOVE WORKING HERE Benefits All our employees are included in our H&M Incentive Program (HIP) All our employees receive a staff discount card, which is usable on all our H&M Group brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET. Work-life balance, 30 days’ vacation and wellness allowance 4000 SEK/yearly Access to Benify, for discounts on e.g. Gym memberships, travel, hotels and many other great deals. Compensation boost during parental leave In addition to our global benefits, all our local markets offer different competitive perks and benefits. Please note that they may differ between employment type and countries. Inclusion & Diversity H&M is a part of H&M Group. At H&M Group, we’re determined to create and maintain inclusive, diverse and equitable workplaces throughout our organization. Our teams should consist of a variety of people that share and combine their knowledge, experience and ideas. Having a diverse workforce leads to a positive impact on how we address challenges, on what we perceive possible and on how we choose to relate to our colleagues and customers all over the world. Hence all diversity dimensions are taken into consideration in our recruitment process. We are committed to a recruitment process that is fair, equitable, and based on competency. We therefore kindly ask you to not attach a cover letter in your application.

About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world’s largest enterprises and government agencies take control of the cryptographic identities that safeguard every digital interaction. Behind the platform is a global team of people who care deeply about the work and each other. We move fast, think big, and show up for one another every day. If you’re looking for work that matters and a team that brings out your best, we hope you’ll trust your future with Keyfactor! Title: Senior Cloud Engineer Location: Stockholm, Sweden Experience: Senior Job Function: Cloud Operations Employment Type: Full-Time Industry: Computer and Network Security About the position The Senior Cloud Engineer designs, implements, and evolves complex cloud infrastructure and automation solutions with a high degree of autonomy. This role owns systems and solutions that have significant impact on service reliability, security posture, and operational scalability. Senior Cloud Engineers act as technical leaders within the team, contributing to standards, mentoring peers, and supporting cross-functional initiatives. The position can based in our Stockholm, we follow a hybrid work model with excellent flexible working practices. Applicants must hold a valid Right to Work in Sweden. Responsibilities Infrastructure as Code (IaC) Owns and evolves complex Infrastructure as Code solutions across the cloud environment Makes independent design decisions within established architectural standards Delivers improvements that enhance scalability, reliability, and team efficiency Provides technical guidance and review for less senior engineers Configuration Designs and maintains complex configuration management solutions Defines configuration patterns and best practices used across the environment Reviews and guides configuration work performed by other engineers Data Center Operations Maintains an accurate and up-to-date inventory of all physical hardware within the data center, such as HSMs, USBs, Smartcards, SSDs and Shock-Proof cases. Informs supervisor when certain materials are running low. Maintains detailed records of all data center operation activities, including changes to tamper evident bag numbers, incidents, and access to client materials. Follows proper procedures on strict guidelines for Root Signings, Disaster Recovery, CRLs and CSR signings. Ensures proper asset disposal procedures are followed. Is able to follow documented procedures on how to properly handle sophisticated hardware security modules and KVM devices. Can perform configurations of the hardware security module and KVM with supervision from more senior peers. Task Automation Designs and builds advanced automation solutions using scripting, APIs, and Azure-native services Drives automation initiatives that improve operational consistency and efficiency Supports process improvement through tooling and automation Networking Designs and implements cloud networking solutions within approved security and compliance constraints Applies deep knowledge of networking protocols and standards to support hosted services Participates in compliance audits and provides technical input Monitoring & Alerting Defines and improves monitoring, alerting, and observability strategies Ensures monitoring logic supports service reliability and rapid incident detection Mentors peers on monitoring best practices Patch Management Leads patch management strategies and execution Resolves escalated patching issues and drives process improvements Contributes to the evolution of patching standards and practices PKI Knowledge Applies strong understanding of PKI concepts in support of customer and hosted environments Performs PKI tasks for custom deployments Contributes to strategy and design discussions for hosted PKI services Produces technical documentation for PKI designs and processes Participates in cross-functional certificate reviews Product Knowledge Serves as a subject matter expert on Keyfactor’s hosted products Troubleshoots complex product issues across hosted environments Participates in strategy and design discussions for new product offerings Supports testing of new product versions and provides feedback to product teams Interfaces with customers on hosted architecture and security posture when required Minimum Qualifications, Education, and Skills High School Diploma or equivalent experience 5+ years of related work experience and strong knowledge within their functional area Expert-level knowledge of Microsoft Azure, including native services and tooling Deep hands-on experience with Infrastructure as Code (IaC) and configuration management tools Advanced proficiency in PowerShell scripting (high complexity) Extensive experience with Windows systems administration, including Windows Roles & Features and Active Directory Advanced problem-solving skills, with the ability to troubleshoot and resolve complex issues Strong written and verbal communication skills with a professional demeanor Strong organizational, time-management, and attention-to-detail skills Proven ability to collaborate effectively within and across cross-functional teams Self-motivated, able to manage complex work and projects to completion with minimal oversight Comfortable working in a fast-paced, deadline-driven environment Travel Requirements Up to 15% travel time required Compensation Salary will be commensurate with experience.