Infrastructure Engineer

Stratospherec Ltd; West of England; On-site; GBP 55,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Private dental insurance

Perkbox employee perks and discounts

Pension scheme

Flexibility around specific working-时间

Job summary

Stratospherec Ltd in Bristol is seeking an Infrastructure Engineer with cybersecurity knowledge to own and evolve the infrastructure and security for our SaaS business management platform.

You will manage a Microsoft and Azure environment, lead security improvements, and work with engineering to ensure reliability while enabling growth.

The role offers hands-on technical work and potential line management as the team expands, with 40-hour week and office-based at Bristol.

Qualifications

• Hands-on infrastructure background with cybersecurity experience.
• Experience with Active Directory, Group Policy, Windows Server, and patch management.
• Experience with Microsoft Entra ID and Entra Connect in hybrid identity environment.
• Experience with Microsoft 365 and Azure infrastructure components.
• Proficiency in PowerShell scripting and automation.
• Knowledge of networking, DNS, DHCP, VPNs, and certificates.
• Experience with IIS administration and website deployment.
• Experience with security risk assessment and remediation.
• Ability to collaborate and communicate with technical and non-technical colleagues.

Responsibilities

• Manage hybrid identity and AD-related services across Entra ID and Entra Connect.
• Administer Windows Server, M365, and Azure infr including VMs, networking, storage, access controls.
• Maintain DNS, DHCP, NAT, VPNs, and SSL certificates.
• Administer IIS and support website deployment and troubleshooting.
• Identify security vulnerabilities and drive remediation and patching.
• Support Cyber Essentials certification and security audits.
• Manage backups, test restores, and document BC/DR procedures.
• Lead incident response for infra and security events.
• Own infra and cybersecurity work plan and coordinate improvements.
• Maintain documentation, monitoring, supplier/hosting/renewals.
• Use PowerShell for automation and support releases.
• Escalation point for end-user support and device setup/disposal.

Skills

Active Directory

Group Policy

Windows Server

Entra ID

Entra Connect

Microsoft 365

Azure VMs

PowerShell

Networking fundamentals

UniFi

Backups & recovery

IIS administration

Cyber security basics

End-user support

Documentation

Tools

Azure Monitor

Grafana

Job description

Infrastructure Engineer

Infrastructure Engineer with Cyber experience

Central Bristol | £55k to £65k

Office-based | 40 hours per week, with flexibility around working hours by agreement

Stratospherec is recruiting for an Infrastructure Engineer with cybersecurity knowledge for a rapidly growing SaaS business management software company in central Bristol.

This is an opportunity to take ownership of the infrastructure and cyber security that support the company's software platforms and internal operations. You'll combine hands‑on technical work with operational oversight, working closely with Engineering and colleagues across the business to keep systems secure, reliable and ready for continued growth.

If you enjoy solving technical problems, strengthening security and seeing improvements through from planning to delivery, this role offers broad responsibility and the opportunity to shape how the infrastructure function develops.

The role

You'll manage a varied Microsoft and Azure environment, oversee cyber security controls and lead improvements across infrastructure, identity, monitoring, backups and recovery.

You'll also provide technical direction to colleagues supporting the function, with the potential to take on direct line management responsibilities as the team structure develops.

Your responsibilities will include:

• Managing hybrid identity across Active Directory and Microsoft Entra ID, including Group Policy, Entra Connect synchronisation, privileged access and access reviews.
• Administering Windows Server, Microsoft 365 and Azure infrastructure, including virtual machines, networking, storage and role-based access.
• Maintaining network services and equipment, including DNS, DHCP, NAT, VPNs, certificates and UniFi.
• Administering IIS and supporting website deployment, configuration and troubleshooting.
• Identifying security vulnerabilities and threats, prioritising remediation and maintaining secure configurations and patching processes.
• Supporting Cyber Essentials certification, security reviews and audits.
• Managing backups, testing restores and maintaining documented business continuity and recovery procedures.
• Leading the technical response to infrastructure and security incidents, communicating risks and implementing improvements.
• Owning the infrastructure and cyber security work plan, balancing support needs, maintenance and improvement projects.
• Maintaining monitoring, technical documentation and oversight of suppliers, hosting, licences, equipment and renewals.
• Using PowerShell to automate administration and working with Engineering to support releases and infrastructure changes.
• Acting as an escalation point for end-user support and overseeing device setup, replacement and secure disposal.

What we're looking for

You'll bring a strong hands‑on infrastructure background, practical cyber security experience and the confidence to take ownership of a broad technical environment.

You should have experience with:

• Active Directory, Group Policy, Windows Server and patch management.
• Microsoft Entra ID and Entra Connect in a hybrid identity environment.
• Microsoft 365, including Exchange Online, SharePoint, OneDrive and Teams.
• Azure virtual machines, virtual networks, network security groups, storage and access controls.
• Writing, troubleshooting and maintaining PowerShell scripts.
• Network fundamentals, including subnetting, DNS, DHCP, NAT, VPNs and certificates.
• UniFi or a comparable networking platform, with the ability to learn UniFi quickly.
• Backup management, restore testing and documented recovery procedures.
• IIS administration and website deployment and troubleshooting.
• End‑user support and device lifecycle management.
• Cyber security risk assessment, vulnerability remediation and exposure to Cyber Essentials requirements and assessments.

Alongside your technical skills, you'll be able to prioritise competing demands, communicate clearly with technical and non-technical colleagues, maintain accurate documentation and recognise when risks need to be escalated.

Useful additional experience (but not essential)

The following would be advantageous:

• Dedicated or bare metal hosting, including providers such as Hetzner or Fasthosts.
• Ubuntu Linux, TrueNAS, Docker or basic Microsoft SQL Server operations.
• Monitoring tools such as Azure Monitor or Grafana.
• Git for version control.
• AZ-104 certification or equivalent practical experience.
• Supporting ISO 27001 audits or SOC 2 assessments.
• Identifying and addressing AI-enabled cyber threats.
• Supervising or line managing technical colleagues.

Salary and benefits

• Annual salary £55k to £65k per annum.
• Private medical insurance.
• Private dental insurance.
• Perkbox employee perks and discounts.
• Pension scheme.
• Flexibility around specific working hours by agreement.

The role is based at the company's central Bristol office, working 40 hours per week.