DevOps Engineer

Matchtech; Bristol; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

A leading technology recruitment agency is seeking a hands-on DevOps Infrastructure IT Engineer for a role in the defence sector, based in Bristol. This permanent position requires strong on-premises engineering skills in both Linux and Windows environments, with a focus on security. Candidates must be British citizens and hold SC clearance (or be eligible). Enjoy working collaboratively on infrastructure projects in a hybrid work model, balancing on-site responsibilities with flexibility.

Qualifications

• Strong experience in on-premises infrastructure solutions.
• Expertise in both Linux and Windows environments.
• Demonstrated operational thinking and security awareness.
• Firewall configuration and secure boundary design.
• Patch management and vulnerability remediation in secure environments.
• Experience in air-gapped or secure on-prem environments.
• Understanding of Defence security frameworks and MoD/ECB controls.

Responsibilities

• Design, deploy, configure, and support on-premises infrastructure.
• Perform system hardening and health checks according to defence standards.
• Perform system hardening and security uplift aligned with defence standards.
• Maintain and improve documentation, runbooks, and technical processes.

Skills

Linux proficiency

Windows Server expertise

Active Directory knowledge

Problem-solving

Strong customer presence

VMware

Hyper-V

Firewall

Patch management

Air-gapped environments

Defence security frameworks

Tools

VMware

Hyper-V

Firewall configuration

Job description

DevOps Infrastructure IT Engineer Defence Sector

Location: Bristol - Hybrid 3 days a week on site

Employment: Permanent

Clearance: SC required (or eligible) — British Citizens only

Start: ASAP (subject to vetting)

About the Role

We’re seeking a hands-on, pragmatic DevOps Infrastructure IT Engineer to design, build, deliver, and support secure on-premises infrastructure across both internal systems and client environments.

This role is ideal for someone who thrives in highly secure, defence-aligned, fully on‑site engineering environments, working across the full stack—from Windows and Linux to firewalls, networking, virtualisation, and cyber security.

You will act as both a practitioner and a technical lead, collaborating with project delivery teams to ensure infrastructure is robust, compliant, and delivered with precision.

Important: This role is not cloud-focused. Candidates must demonstrate strong on‑prem engineering capability, Linux and Windows proficiency, and practical, step‑by‑step operational thinking.

Key Responsibilities

Infrastructure Delivery & Operations

Deliver full lifecycle on‑prem infrastructure solutions: design - deploy - configure - document - support.

Hands‑on ownership of:

• Windows Server, AD, Group Policy, DNS/DHCP
• Linux (Ubuntu / RHEL variants) – patching, updates, troubleshooting, CLI‑based operations
• VMware or Hyper‑V virtualisation
• Perform system hardening, health checks, and security uplift aligned with defence standards.
• Maintain and improve documentation, build standards, runbooks, and technical processes.

Technical Requirements

• Strong experience with both Linux and Windows Server environments.
• Expert knowledge of Active Directory, Group Policy, DNS, DHCP.
• VMware or Hyper‑V virtualisation.
• Firewall configuration and secure boundary design.
• Patch management, vulnerability remediation, secure system build.
• Experience working in air‑gapped or secure on‑prem environments.
• Understanding of Cyber Essentials, Defence, or MoD security frameworks.

Desirable (not mandatory)

• Microsoft certifications (MCSA, MS-102, AZ-104)
• VCP (VMware Certified Professional)
• CompTIA Security+ or equivalent
• PRINCE2 or ITIL Foundation

Soft Skills & Fit

We’re looking for someone who:

• Is a confident, capable on‑site engineer with strong customer presence.
• Loves hands‑on problem solving in real infrastructure — not just high‑level architecture.
• Communicates clearly with clients and colleagues.
• Is adaptable across industries (defence, engineering, manufacturing).
• Performs well under pressure and delivers against deadlines.
• Is happy to "turn their hand to anything" across infrastructure delivery.

Security & Eligibility

To meet MoD and client site requirements:

• British Citizenship is mandatory.
• Must have 5 years’ continuous, checkable UK residency.
• SC clearance required (or willingness/eligibility to undergo it).

Why This Role Will Suit You

This position is perfect if you enjoy:

• Working end‑to‑end on infrastructure—not just monitoring, not just cloud.
• Being hands‑on with Linux and Windows admin every day.
• Building and supporting secure systems used by defence‑aligned customers.
• Being part of a collaborative, on‑site engineering culture.

How to Apply

If you’re a practical, detail‑oriented engineer who thrives in hands‑on, secure on‑prem environments — we’d love to hear from you.