Forensic DBA

scrumconnect ltd; Greater London; Híbrido; GBP 80.000 - 105.000; Jornada completa

Descripción de la vacante

Scrumconnect Ltd is seeking a senior Forensic DBA to investigate and explain data incidents within critical databases on a UK public sector programme. You will reconstruct events from logs and audits, preserve evidence, and advise on future secure logging and recovery strategies.

Working hybrid with occasional client visits to London or Staines, you will operate at SFIA Level 5, providing independent analysis, reporting, and recommendations to senior stakeholders.

Formación

• SC cleared is mandatory.
• Senior DBA with extensive PostgreSQL experience.
• Experience with AWS managed databases (RDS/Aurora).
• Proven backup, PITR, replication and DR capabilities.
• Strong SQL and performance tuning skills.
• Experience diagnosing live production incidents.
• Good understanding of database security, auditing and logging.
• Linux and bash scripting proficiency.

Responsabilidades

• Investigate data incidents and establish root causes.
• Reconstruct events using logs, PITR and replication streams.
• Preserve and document evidence for security reviews.
• Check data integrity and detect tampering or unauthorized access.
• Advise on audit/logging design for future traceability.
• Support live incident response and performance tuning on production DBs.
• Review backup, DR, replication, and archiving setups.
• Support migrations and upgrades with near-zero downtime.
• Write clear investigation reports for technical and non-technical audiences.
• Advise on SQL, indexing and schema design.

Conocimientos

PostgreSQL

AWS RDS/Aurora

SQL tuning

Incident diagnosis

Linux Bash

Security auditing

Reporting

Independence SFIA5

Herramientas

Terraform

Docker

Kubernetes

Git

Descripción del empleo

Forensic DBA

Location: Hybrid, with a client visit to London or Staines once a week
Contract Type: Contract, Outside IR35
Rate: Up to £500 per day, Outside IR35
Security Clearance: SC cleared is mandatory
Start Date: ASAP

The Role

We're looking for a senior Forensic DBA to investigate, reconstruct and explain what has happened inside business-critical databases on a UK public sector programme. You will work with security, delivery and engineering teams to find the root cause of data incidents, preserve evidence, and make recommendations that stop them recurring.

At SFIA Level 5 you'll work independently, advise at senior level, and set the standard for how the programme logs, audits and recovers its data.

Key Responsibilities

• Investigate data incidents, such as unexpected changes, deletions, corruption, performance failures and suspected misuse, and establish the root cause.

• Reconstruct events using transaction logs, WAL archives, point-in-time recovery (PITR), audit logs and replication streams.

• Preserve and document evidence in a way that can be relied on in security and compliance reviews.

• Check data integrity and spot tampering or unauthorised access.

• Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced.

• Support live incident response, including performance tuning and fault finding on production databases.

• Review backup, disaster recovery, replication and archiving arrangements.

• Support database migrations and upgrades, including near-zero-downtime approaches.

• Write clear investigation reports and recommendations for technical and non-technical audiences.

• Advise developers and architects on SQL, indexing and schema design

What We're Looking For

Essential:

• SC cleared, mandatory.

• Extensive hands-on experience as a senior DBA, with strong PostgreSQL skills.

• Experience on AWS managed databases (RDS and Aurora).

• Proven experience with backup, PITR, logical replication, high availability and disaster recovery.

• Strong SQL and performance tuning skills, including index strategy.

• Experience diagnosing live production incidents and finding root causes.

• Good understanding of database security, auditing and logging.

• Linux and bash Scripting.

• Strong written reporting and stakeholder communication.

• Able to work independently at SFIA Level 5.

Desirable:

• Experience of database or digital forensics, evidence handling or incident response.

• Experience in central government or other regulated environments.

• Infrastructure as code (Terraform).

• Data modelling and data warehouse experience (3NF, dimensional).

• Migration experience (for example Oracle or MySQL to PostgreSQL).

• Git, Docker and Kubernetes.

Why Join Scrumconnect Ltd?

At Scrumconnect, we are more than just a consultancy. We are a collaborative team focused on delivering impactful digital transformation services across government and enterprise organisations.

As part of our team, you will benefit from:

• Exposure to major public sector digital programmes.

• A collaborative and inclusive working culture.

• Hands-on experience working within agile delivery environments.

Scrumconnect Ltd is committed to creating an inclusive workplace and welcomes applications from individuals of all backgrounds and experiences.