Infrastructure Security Engineer

FSP; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible working

Competitive salary

Coaching/mentoring

Excellent benefits

Job summary

FSP Consulting Services is seeking an Infrastructure Security Engineer to join their Cyber Engineering team. You will advise on infrastructure security strategy, focusing on Active Directory, Windows Server and hybrid identity to reduce risk in complex environments.

You will assess security posture, identify gaps, and develop remediation plans that align with business objectives and risk requirements, while contributing to service development and repeatable offerings.

Qualifications

• Experience translating security requirements into practical controls.
• Strong Microsoft infrastructure knowledge across AD/Windows Server.
• Ability to design secure, scalable identity and platform solutions.

Responsibilities

• Act as a trusted advisor on infrastructure security strategy and controls.
• Provide guidance on Active Directory, Windows Server, Group Policy and access control.
• Assess infrastructure security risks and deliver remediation plans.
• Conduct security gap analyses and maturity assessments across hybrid environments.
• Promote standards and repeatable security practices across customer environments.
• Design secure, scalable solutions aligned to client needs and risk tolerance.

Skills

Active Directory

Windows Server

Hybrid identity

Identity security

Security best practices

Tools

Azure DevOps

Security auditing tools

Job description

We have an exciting opportunity for an Infrastructure Security Engineer to join our Cyber Engineering team, providing technical consultancy, subject matter expertise and service innovation across Microsoft-aligned cyber security offerings, with a particular focus on Active Directory, Windows Server, hybrid identity and platform security.

Working closely with customers, teammates and service leads, you will assess infrastructure and identity security posture, identify risks and control gaps, and develop prioritised, actionable remediation plans that align with business objectives and risk requirements. You will bring strong expertise across Microsoft infrastructure, helping organisations strengthen core identity services, improve platform resilience and reduce risk across hybrid environments.

Responsibilities

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations, contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

About You

• Experienced consultant or engineer, comfortable operating in complex environments and balancing technical requirements with operational impact, user experience and organisational constraints.
• Able to translate security requirements into practical, scalable controls that balance confidentiality, integrity, availability and operational efficiency.
• Strong technical credibility across identity and platform security, providing context-driven recommendations that reflect real-world implementation challenges across Microsoft environments.
• Experience collaborating with technical and business stakeholders to ensure security solutions support organisational objectives and operational needs.
• Clear and effective communicator who translates security risks and control gaps into actionable outcomes, with an interest in service improvement, standardisation and commercially aware delivery.

Knowledge and Experience (Highly Advantageous)

• Proven experience with Active Directory, Entra ID, Windows Server, Group Policy and hybrid identity security.
• Understanding of security baselines, hardening standards and control frameworks used to support risk-based recommendations.
• Experience of phased remediation approaches across identity, infrastructure and platform security controls.
• Working knowledge of Azure DevOps or similar delivery tooling.

Desirable Certifications

• SC-300 (Microsoft Identity and Access Administrator)
• SC-500 (Microsoft Certified: Cloud and AI Security Engineer Associate)
• AZ-800 / AZ-801 (Microsoft Certified: Windows Server Hybrid Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)

What We Look for in Our People

• Strong alignment with FSP values and ethos.
• Commitment to teamwork, quality and mutual success.
• Proactivity with an ability to operate with pace and energy.
• Strong communication and interpersonal skills.
• Dedication to excellence and quality.

Who are FSP?

Founded in 2012, FSP Consulting Services (FSP) are a leading enterprise-level digital evolution and cyber security consultancy. We enable peak performance, cultural cohesion and business growth through technology by adopting a comprehensive approach to strategy and creating viable, sustainable and resilient digital futures for organisations and their teams.

At the heart of everything we do is our unwavering commitment to the evolution of organisations and their people. We work in partnership with our clients, helping them become responsive, engaged and supremely equipped for a successful future, blending high-quality business and technology delivery with a dedication to exceptional client experience.

Behind this commitment is a dedicated employee-first strategy, built around our organisation's core values. We are proud to be a multi award-winning workplace, most notably recognised by Best Companies as the #1 Best Company To Work For in the UK, Tech and the South East in 2023.

We are ISO 27001 and ISO 9001 certified by UKAS. We are also a CREST approved penetration testing and SOC company, an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified.

Learn more about FSP here: https://fsp.co/about-fsp/

Why Work for FSP?

• A collaborative and supportive environment in which you can grow and develop your career.
• The tools and opportunity to do work you can be proud of.
• A chance to work alongside some of the best people in the industry, who are always willing to share their knowledge and experience.
• Flexible working. We empower you to make smart choices about when and where to work to achieve great results.
• Industry-leading coaching and mentoring.
• Competitive salary and an excellent benefits package.

Equal and Fair Opportunity

FSP is an equal opportunity employer, and we welcome applications from all suitable candidates. We consider all applicants for employment regardless of age, disability, sexual orientation, gender identity, family or parental status, race, colour, nationality, ethnic or national origin, religion or belief.

Research suggests that applicants from underrepresented groups are less likely to apply for roles unless they meet every requirement or feel there are no barriers to entry. If you are excited about a potential role with us but are concerned that you may not be a perfect fit, we encourage you to apply. You could be the ideal candidate for this role or another opportunity within FSP.

We strive to provide every applicant with a fair opportunity to present themselves in the best possible way during interviews and meetings. If you require any adjustments for a call or in-person meeting, please let us know.