Infrastructure & Security Engineer

Bamford Collection; Gloucester; On-site; GBP 40,000 - 70,000; Full time

Job summary

A lifestyle brand group in Gloucester is seeking a strategic Infrastructure & Security Engineer to design and maintain secure IT infrastructure. Responsibilities include managing projects, ensuring system performance and implementing cybersecurity strategies. Ideal candidates will have strong experience with Microsoft products and cloud security, with opportunities for growth in a supportive work environment.

Benefits

Discounts on products and services

Volunteering days

Subsidised private medical insurance

Pension scheme

Life assurance cover

Mental health support

Qualifications

• Proactive in managing and improving IT infrastructure.
• Strong experience with both physical and virtual infrastructures.
• Background in retail/hospitality environments preferred.

Responsibilities

• Manage and improve IT infrastructure architecture.
• Ensure high availability and performance of core systems.
• Document current infrastructure and manage backups.

Skills

Experience with Microsoft products

Knowledge of cybersecurity strategies

Familiarity with cloud security

Networking expertise (LAN/WAN/WIFI)

Experience with monitoring tools

Knowledge of disaster recovery practices

Tools

Microsoft Azure

VMware vSphere

SolarWinds

Fortinet

Cisco Meraki

Job description

Overview

We are looking for a strategic and proactive Infrastructure & Security Engineer responsible for the design, implementation, and maintenance of secure, scalable, and reliable IT infrastructure across all Bamford Collection locations. This role covers existing physical and virtual infrastructure, as well as new sites and IT Security. You will work with outsourced partners to optimise security operations and align infrastructure growth with evolving business needs. 40 hours a week, 5 days in the office based at the Daylesford Farm, Gloucestershire.

Responsibilities

• Manage and improve the current IT infrastructure architecture, both physical and virtual, at all sites.
• Manage infrastructure projects including new site setups, upgrades, and cloud migrations.
• Liase with outsourced partners and our MSP re infrastructure and security.
• Ensure high availability and performance of core systems (network, servers, storage, firewalls).
• Lead the implementation of compliance frameworks (e.g., PCI-DSS, GDPR etc).
• Manage Backups.
• Document current infrastructure.
• Be responsible for the security of the organisation.
• Develop and manage disaster recovery and business continuity strategies.
• Improve and enforce cybersecurity strategies including endpoint protection, access control, threat detection, and incident response.
• Manage and improve web and mail filtering via Mimecast, Umbrella, Fortinet, Meraki, etc.
• Monitor and report on system health, vulnerabilities, and patch management.
• Collaborate with IT Manager to ensure operational alignment and support.
• Strong experience of physical infrastructure from MPLS, Fibre to switches and APs.
• Strong experience of virtual infrastructure from VLANs to VPNs.
• Experience in all Microsoft products, Cisco Meraki, Umbrella, Fortinet etc.
• AV and CCTV systems experience.
• A background in a retail and/or hospitality environment with POS.
• Demonstrable knowledge of relevant current technology and emerging trends.
• Microsoft infrastructure including Windows Server Administration, Active Directory/AAD Administration, Group Policy, Microsoft 365 services, and Azure Cloud resource management.
• LAN / WAN / WIFI / TCP-IP / Firewalls / Switching/ Routing configuration and admin (Cisco).
• Deploying and managing virtualized environments using VMware vSphere, ESXi, and vCenter.
• Server and storage hardware technology.
• Identity & Access Management (IAM), expertise in Microsoft Entra ID (formerly Azure AD), RBAC, and MFA.
• Cloud Security, experience securing Azure environments, including Microsoft Defender for Cloud, Sentinel, and compliance frameworks like PCI DSS.
• Threat Protection & Incident Response: ability to identify vulnerabilities, implement threat protection, and respond to security incidents.
• Patch Management & Endpoint Security: experience in patching a complex estate, ensuring regular updates and endpoint protection.
• Familiarity with backup and disaster recovery tools and practices.
• Experience with monitoring tools (e.g., SolarWinds, PRTG, or similar).

About The Bamford Collection

THE BAMFORD COLLECTION IS A GROUP OF CONSCIOUSLY MINDED LIFESTYLE BRANDS COMMITTED TO NOURISHING AND NURTURING PEOPLE AND PLANET. What drives and inspires us is the belief that we have a responsibility not just to protect the world around us but to have a positive impact on it too. The group encompasses an organic farm and retailer; a considered clothing label; botanical skincare, bath and body collections; wellness destinations around the world; and hospitality experiences that foster a sense of community and celebrate the healing power of escapism. We champion a slow and sustainable way of living, encouraging our customers to make choices that are greener for the planet as well as kinder to their bodies and minds. We are more than a group of businesses striving to make a difference. We are a way of life.

Benefits

• Discounts: We offer a range of discounts on our products, treatments, and dining experiences from day one.
• Volunteering Days: Employees are offered one paid day per year to volunteer with a charity of their choice.
• Private Medical: We offer subsidised private medical insurance through Bupa.
• Pension Scheme: Pay up to 9% of your salary into your pension each month; we contribute up to 4.5%.
• Life Assurance: We offer life assurance cover, equivalent of up to a year of your annual salary.
• Mental Health Support: Our Employee Assistance Programme provides 24-hour support, seven days a week.