Forensic DBA Specialist

Scrumconnect Consulting; Greater London; Presencial; GBP 90 000 - 120 000; Tempo integral

Resumo da oferta

Scrumconnect Ltd is seeking a Senior Forensic DBA to investigate and reconstruct incidents within critical databases for a UK public sector programme. You will collaborate with security, delivery and engineering teams to identify root causes, preserve evidence, and provide recommendations to prevent recurrence.

At SFIA Level 5 you will work independently, advise at senior levels, and set data logging and recovery standards across the programme.

Qualificações

• Extensive hands-on experience as a senior DBA with PostgreSQL expertise.
• Experience with AWS managed databases (RDS and Aurora).
• Proven ability in backup, PITR, logical replication, high availability and recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and root-cause analysis.
• Good understanding of Linux and bash scripting.
• Experience in central government or regulated environments.
• Data modelling and data warehouse concepts (3NF, dimensional).
• Migration experience (e.g. Oracle/MySQL to PostgreSQL).

Responsabilidades

• Investigate data incidents, establish root cause, and reconstruct events.
• Preserve and document evidence for security and compliance reviews.
• Advise on audit and logging design for future traceability.
• Support live incident response, including performance tuning and fault finding.
• Review backup, DR, replication, and archiving arrangements.
• Assist with database migrations and upgrades, including near-zero-downtime approaches.
• Write investigation reports and actionable recommendations.
• Advise developers on SQL, indexing and schema design.

Conhecimentos

PostgreSQL

AWS RDS

Security auditing

SQL performance tuning

Incident response

Linux

Bash scripting

Technical reporting

Stakeholder communication

Ferramentas

Git

Docker

Kubernetes

Descrição da oferta de emprego

We are looking for a senior Forensic DBA to investigate, reconstruct and explain what has

happened inside business-critical databases on a UK public sector programme. You will work

with security, delivery and engineering teams to find the root cause of data incidents, preserve

evidence, and make recommendations that stop them recurring.

At SFIA Level 5 you will work independently, advise at senior level, and set the standard for how

the programme logs, audits and recovers its data.

Key Responsibilities

• Investigate data incidents, such as unexpected changes, deletions, corruption, performance failures and suspected misuse, and establish the root cause.
• Reconstruct events using transaction logs, WAL archives, point-in-time recovery (PITR), audit logs and replication streams.
• Preserve and document evidence in a way that can be relied on in security and compliance reviews.
• Check data integrity and spot tampering or unauthorised access.
• Advise on audit and logging design (for example pgaudit and database activity monitoring) so future incidents can be traced.
• Support live incident response, including performance tuning and fault finding on
• Review backup, disaster recovery, replication and archiving arrangements.
• Support database migrations and upgrades, including near-zero-downtime approaches.
• Write clear investigation reports and recommendations for technical and non-technical
• Advise developers and architects on SQL, indexing and schema design.

What We are Looking For

• Extensive hands-on experience as a senior DBA, with strong PostgreSQL skills.
• Experience on AWS managed databases (RDS and Aurora).
• Proven experience with backup, PITR, logical replication, high availability and disaster recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and finding root causes.
• Good understanding of database security, auditing and logging.
• Linux and bash scripting.
• Strong written reporting and stakeholder communication.
• Able to work independently at SFIA Level 5.
• Experience of database or digital forensics, evidence handling or incident response.
• Experience in central government or other regulated environments.
• Infrastructure as code (Terraform).
• Data modelling and data warehouse experience (3NF, dimensional).
• Migration experience (for example Oracle or MySQL to PostgreSQL).
• Git, Docker and Kubernetes.

Why Join Scrumconnect Ltd?

At Scrumconnect, we are more than just a consultancy. We are a collaborative team focused on delivering impactful digital transformation services across government and enterprise organisations.

As part of our team, you will benefit from:

• Exposure to major public sector digital programmes.
• A collaborative and inclusive working culture.
• Hands‑on experience working within agile delivery environments.

Scrumconnect Ltd is committed to creating an inclusive workplace and welcomes applications from individuals of all backgrounds and experiences.