Security Infrastructure Engineer

Security Infrastructure Engineer

Reports To

Infrastructure Manager

Responsible For

Responsible for the implementation, operation, maintenance and continuous improvement of the organisation’s core IT infrastructure and project delivery, with a particular focus on security, resilience and compliance.

Provide 3rd line support to the Service Desk.

Working closely with infrastructure, networking and applications colleagues, the Security Infrastructure Engineer will help ensure that security is embedded into the design and operation of infrastructure rather than treated as a separate activity.

Key Tasks

• Maintain infrastructure services to agreed availability, performance and security standards.
• Implement secure configurations and system-hardening standards.
• Review and remediate infrastructure vulnerabilities.
• Support access-control processes, including access reviews, privileged-access checks and enforcement of least-privilege principles.
• Support endpoint and server security controls.
• Ensure appropriate logging and security monitoring is enabled and reviewed.
• Support encryption and certificate-management requirements.
• Review infrastructure against security standards and vendor recommendations.
• Identify unsupported and end-of-life systems and associated risks.
• Support security improvements across existing infrastructure.
• Oversee and contribute to system upgrades, patching, configuration changes and lifecycle-management activities.
• Monitor infrastructure security, compliance, capacity, performance, availability and overall health.
• Diagnose and resolve security incidents and infrastructure problems.
• Support backup, recovery, business continuity and disaster-recovery arrangements.
• Participate in infrastructure projects, migrations and technology refresh programmes.
• Manage infrastructure security through appropriate change, configuration and release-management processes.
• Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery and the continuous improvement of incident readiness.

Person Specification

Qualifications

• Educated to degree level or able to demonstrate equivalent professional experience, preferably within computing or a related discipline.
• CISSP, CCSP or Security+ certification would be advantageous but is not essential.

Experience

• 3–5+ years’ experience within security analysis, infrastructure, DevSecOps or a related role.
• Hands-on experience securing cloud platforms such as AWS, Azure or Google Cloud.
• Experience with identity and access management, including SSO, MFA, RBAC and privileged-access controls.
• Experience deploying and maintaining security technologies including SIEM, EDR, vulnerability-management, secrets-management and intrusion-detection tools.
• Experience with Linux administration, system hardening, patch management and configuration management.
• Experience investigating security incidents, reviewing logs, identifying root causes and implementing remediation.

Knowledge & Skills

Technical

Understanding, awareness or experience of the following:

• Strong knowledge of networking, including TCP/IP, DNS, firewalls, VPNs, proxies and load balancers.
• Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python or Bash.
• Familiarity with containers and orchestration platforms such as Docker and Kubernetes.
• Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001 or SOC 2.
• Ability to conduct threat modelling, infrastructure risk assessments and architecture reviews.
• Strong troubleshooting, documentation and cross-functional communication skills.

Personal

• Strong team player with excellent communication skills.
• Competent troubleshooting and problem-solving ability.
• Ability to clearly articulate project deliverables and technical designs.
• Ability to work independently, use initiative and perform effectively within a busy environment.