Security Infrastructure Engineer

Security Infrastructure Engineer

The Role

An exciting opportunity for a Security Infrastructure Engineer to support and enhance a secure, resilient, and highly regulated IT environment. You'll be responsible for maintaining core infrastructure, embedding security best practices, providing 3rd line support, and delivering security-focused projects and improvements.

Key Responsibilities

• Maintain secure, reliable, and high-performing infrastructure services.
• Implement system hardening, patching, and vulnerability remediation.
• Support identity and access management, including privileged access controls.
• Manage security monitoring, logging, encryption, and certificate management.
• Investigate security incidents and drive corrective actions.
• Support backup, disaster recovery, and business continuity processes.
• Deliver infrastructure upgrades, migrations, and technology refresh projects.
• Ensure compliance with security standards and change management processes.
• Contribute to cyber incident response and continual security improvement initiatives.

Requirements

• 5+ years' experience in security engineering, infrastructure, DevSecOps, or systems administration.
• Strong experience securing Windows/Linux environments and cloud platforms (Azure, AWS, or GCP).
• Knowledge of IAM, MFA, SIEM, EDR, vulnerability management, and security monitoring tools.
• Strong networking knowledge including TCP/IP, DNS, Firewalls, VPNs, and load balancing.
• Experience with automation and Infrastructure as Code tools such as Terraform, Ansible, Python, or PowerShell.
• Familiarity with Docker, Kubernetes, and recognised security frameworks such as NIST or ISO 27001.
• Excellent troubleshooting, documentation, and communication skills.

Additional Requirements

• Ability to obtain and maintain enhanced security vetting.
• Eligible to work within a highly regulated environment subject to strict security and information-handling controls.
• Ability to meet requirements relating to access to controlled technologies and sensitive projects.