Infrastructure Engineer

Stratospherec Ltd; Gloucester; On-site; GBP 55,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Private dental insurance

Perkbox employee perks and discounts

Pension scheme

Flexibility around working hours

Job summary

Stratospherec Ltd in Bristol is seeking an Infrastructure Engineer with cybersecurity knowledge to own the infrastructure and security of SaaS platforms and internal operations. You will combine hands-on work with operational oversight, collaborating with Engineering to keep systems secure and reliable for growth.

The role involves managing a Microsoft/Azure environment, leading security improvements, and potentially taking on line management as the team grows.

Qualifications

• Strong hands-on infrastructure background with cyber security experience.
• Experience with Active Directory, Group Policy and patch management.
• Knowledge of hybrid identity using Entra ID and Entra Connect.

Responsibilities

• Manage hybrid identity across AD and Entra ID, including policies and access reviews.
• Administer Windows Server, M365 and Azure infrastructure (VMs, networking, storage, RBAC).
• Maintain network services: DNS, DHCP, NAT, VPNs, certificates; manage UniFi.
• Administer IIS, website deployment and troubleshooting.
• Identify vulnerabilities, prioritise remediation, maintain secure configs and patching.
• Support Cyber Essentials certification, security reviews and audits.
• Manage backups and business continuity procedures; respond to incidents.
• Own infrastructure and cyber security work plan; guide improvements.

Skills

Active Directory

Group Policy

Windows Server

Microsoft Entra ID

Entra Connect

Microsoft 365

Azure

PowerShell

Networking fundamentals

Cyber security

Tools

Grafana

Job description

Infrastructure Engineer

Infrastructure Engineer with Cyber experience

Central Bristol £55k to £65k
Office-based 40 hours per week, with flexibility around working hours by agreement

Stratospherec is recruiting for an Infrastructure Engineer with cybersecurity knowledge for a rapidly growing SaaS business management software company in central Bristol.

This is an opportunity to take ownership of the infrastructure and cyber security that support the company s software platforms and internal operations. You ll combine hands-on technical work with operational oversight, working closely with Engineering and colleagues across the business to keep systems secure, reliable and ready for continued growth.

If you enjoy solving technical problems, strengthening security and seeing improvements through from planning to delivery, this role offers broad responsibility and the opportunity to shape how the infrastructure function develops.

The role

You ll manage a varied Microsoft and Azure environment, oversee cyber security controls and lead improvements across infrastructure, identity, monitoring, backups and recovery.

You ll also provide technical direction to colleagues supporting the function, with the potential to take on direct line management responsibilities as the team structure develops.

Your responsibilities will include:

• Managing hybrid identity across Active Directory and Microsoft Entra ID, including Group Policy, Entra Connect synchronisation, privileged access and access reviews.
• Administering Windows Server, Microsoft 365 and Azure infrastructure, including virtual machines, networking, storage and role-based access.
• Maintaining network services and equipment, including DNS, DHCP, NAT, VPNs, certificates and UniFi.
• Administering IIS and supporting website deployment, configuration and troubleshooting.
• Identifying security vulnerabilities and threats, prioritising remediation and maintaining secure configurations and patching processes.
• Supporting Cyber Essentials certification, security reviews and audits.
• Managing backups, testing restores and maintaining documented business continuity and recovery procedures.
• Leading the technical response to infrastructure and security incidents, communicating risks and implementing improvements.
• Owning the infrastructure and cyber security work plan, balancing support needs, maintenance and improvement projects.
• Maintaining monitoring, technical documentation and oversight of suppliers, hosting, licences, equipment and renewals.
• Using PowerShell to automate administration and working with Engineering to support releases and infrastructure changes.
• Acting as an escalation point for end-user support and overseeing device setup, replacement and secure disposal.

What we re looking for

You ll bring a strong hands-on infrastructure background, practical cyber security experience and the confidence to take ownership of a broad technical environment.

You should have experience with:

• Active Directory, Group Policy, Windows Server and patch management.
• Microsoft Entra ID and Entra Connect in a hybrid identity environment.
• Microsoft 365, including Exchange Online, SharePoint, OneDrive and Teams.
• Azure virtual machines, virtual networks, network security groups, storage and access controls.
• Writing, troubleshooting and maintaining PowerShell scripts.
• Network fundamentals, including subnetting, DNS, DHCP, NAT, VPNs and certificates.
• UniFi or a comparable networking platform, with the ability to learn UniFi quickly.
• Backup management, restore testing and documented recovery procedures.
• IIS administration and website deployment and troubleshooting.
• End-user support and device lifecycle management.
• Cyber security risk assessment, vulnerability remediation and exposure to Cyber Essentials requirements and assessments.

Useful additional experience (but not essential)

The following would be advantageous:

• - Dedicated or bare metal hosting, including providers such as Hetzner or Fasthosts.
• - Ubuntu Linux, TrueNAS, Docker or basic Microsoft SQL Server operations.
• - Monitoring tools such as Azure Monitor or Grafana.
• - Git for version control.
• - AZ-104 certification or equivalent practical experience.
• - Supporting ISO 27001 audits or SOC 2 assessments.
• - Identifying and addressing AI-enabled cyber threats.
• - Supervising or line managing technical colleagues.

Salary and benefits

• - Annual salary £55k to £65k per annum.
• - Private medical insurance.
• - Private dental insurance.
• - Perkbox employee perks and discounts.
• - Pension scheme.
• - Flexibility around specific working hours by agreement.

The role is based at the company s central Bristol office, working 40 hours per week.