Infrastructure Security Engineer

FSP; Glasgow; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Flexible working

Competitive salary

Excellent benefits package

Job summary

FSP is looking for an Infrastructure Security Engineer to join the Cyber Engineering team in the UK. You will provide technical consultancy across Microsoft-aligned security offerings, focusing on Active Directory, Windows Server, hybrid identity and platform security.

You will assess infrastructure and identity security posture, identify risks and craft remediation plans aligned with business objectives. You will work with customers and service leads to translate requirements into practical

Qualifications

• Experienced consultant or engineer capable of working in complex environments.
• Translates security requirements into scalable controls balancing confidentiality, integrity, and availability.
• Strong collaboration with technical and business stakeholders to align security solutions with objectives.

Responsibilities

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations, contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

Skills

Identity security

Platform security

Active Directory

Entra ID

Windows Server

Group Policy

Communication

Stakeholder engagement

Consultancy

Tools

Azure DevOps

Job description

We have an exciting opportunity for an Infrastructure Security Engineer to join our Cyber Engineering team, providing technical consultancy, subject matter expertise and service innovation across Microsoft-aligned cyber security offerings, with a particular focus on Active Directory, Windows Server, hybrid identity and platform security.

Working closely with customers, teammates and service leads, you will assess infrastructure and identity security posture, identify risks and control gaps, and develop prioritised, actionable remediation plans that align with business objectives and risk requirements. You will bring strong expertise across Microsoft infrastructure, helping organisations strengthen core identity services, improve platform resilience and reduce risk across hybrid environments.

Responsibilities

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations, contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

About You

• Experienced consultant or engineer, comfortable operating in complex environments and balancing technical requirements with operational impact, user experience and organisational constraints.
• Able to translate security requirements into practical, scalable controls that balance confidentiality, integrity, availability and operational efficiency.
• Strong technical credibility across identity and platform security, providing context-driven recommendations that reflect real-world implementation challenges across Microsoft environments.
• Experience collaborating with technical and business stakeholders to ensure security solutions support organisational objectives and operational needs.
• Clear and effective communicator who translates security risks and control gaps into actionable outcomes, with an interest in service improvement, standardisation and commercially aware delivery.

Knowledge and Experience (Highly Advantageous)

• Proven experience with Active Directory, Entra ID, Windows Server, Group Policy and hybrid identity security.
• Understanding of security baselines, hardening standards and control frameworks used to support risk-based recommendations.
• Experience of phased remediation approaches across identity, infrastructure and platform security controls.Working knowledge of Azure DevOps or similar delivery tooling.

Desirable Certifications

• SC-300 (Microsoft Identity and Access Administrator)
• SC-500 (Microsoft Certified: Cloud and AI Security Engineer Associate)
• AZ-800 / AZ-801 (Microsoft Certified: Windows Server Hybrid Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)

What We Look for in Our People

• Strong alignment with FSP values and ethos.
• Commitment to teamwork, quality and mutual success.
• Proactivity with an ability to operate with pace and energy.
• Strong communication and interpersonal skills.
• Dedication to excellence and quality.

Who are FSP?

Founded in 2012, FSP Consulting Services (FSP) are a leading enterprise-level digital evolution and cyber security consultancy. We enable peak performance, cultural cohesion and business growth through technology by adopting a comprehensive approach to strategy and creating viable, sustainable and resilient digital futures for organisations and their teams.

At the heart of everything we do is our unwavering commitment to the evolution of organisations and their people. We work in partnership with our clients, helping them become responsive, engaged and supremely equipped for a successful future, blending high-quality business and technology delivery with a dedication to exceptional client experience.

Behind this commitment is a dedicated employee-first strategy, built around our organisation's core values. We are proud to be a multi award-winning workplace, most notably recognised by Best Companies™ as the #1 Best Company To Work For in the UK, Tech and the South East in 2023.

We are ISO 27001 and ISO 9001 certified by UKAS. We are also a CREST approved penetration testing and SOC company, an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified.

Learn more about FSP here: https://fsp.co/about-fsp/

Why Work for FSP?

• A collaborative and supportive environment in which you can grow and develop your career.
• The tools and opportunity to do work you can be proud of.
• A chance to work alongside some of the best people in the industry, who are always willing to share their knowledge and experience.
• Flexible working. We empower you to make smart choices about when and where to work to achieve great results.
• Industry-leading coaching and mentoring.
• Competitive salary and an excellent benefits package.

Equal and Fair Opportunity

FSP is an equal opportunity employer, and we welcome applications from all suitable candidates. We consider all applicants for employment regardless of age, disability, sexual orientation, gender identity, family or parental status, race, colour, nationality, ethnic or national origin, religion or belief.

Research suggests that applicants from underrepresented groups are less likely to apply for roles unless they meet every requirement or feel there are no barriers to entry. If you are excited about a potential role with us but are concerned that you may not be a perfect fit, we encourage you to apply. You could be the ideal candidate for this role or another opportunity within FSP.

We strive to provide every applicant with a fair opportunity to present themselves in the best possible way during interviews and meetings. If you require any adjustments for a call or in-person meeting, please let us know.