Infrastructure Security Engineer

JR United Kingdom; London; On-site; GBP 130,000 - 170,000; Full time

Job summary

A leading company in UK government cyber security is seeking an experienced Infrastructure Security Engineer to lead critical technical workstreams. The role involves implementing secure user account separation in a hybrid Active Directory and Entra environment, ensuring compliance with best practices. Candidates should have proven experience in secure settings and strong communication skills.

Qualifications

• Proven experience as an Infrastructure Engineer or Security Engineer in secure settings.
• Deep expertise in Active Directory and Entra ID.

Responsibilities

• Conduct technical investigations into hybrid On-Prem AD and Entra environment.
• Design and implement secure separation of high-privilege accounts.

Skills

Active Directory

Privileged Identity Management

Entra ID

Technical Documentation

Communication

Job description

Social network you want to login/join with:

Infrastructure Security Engineer, London

Client: Anson McCade

Location: London, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views: 3

Posted: 16.05.2025

Expiry Date: 30.06.2025

Job Description:

Microsoft Infrastructure Security Engineer

Day Rate: Up to £850 (inside IR35)

Clearance Required: SC clearance (must be active)

Key Skills Required: Entra ID & Privileged Identity Management (PIM)

About the Role

Our client, a key delivery partner in UK government cyber security programmes, seeks an experienced Microsoft Security Engineer to lead a critical technical workstream. You will be instrumental in implementing a secure and scalable separation of high-privilege user accounts across a hybrid Active Directory and Microsoft Entra (Azure AD) environment.

This opportunity is fully funded and ongoing, with a defined scope and direct stakeholder engagement.

Key Responsibilities

1. Conduct technical investigations into a hybrid On-Prem AD and Entra environment.
2. Design, document, test, and implement secure methods to separate high-privilege accounts following NCSC and Microsoft best practices.
3. Perform closed user group testing, with phased rollout to 30–150 users with minimal disruption.
4. Produce high-quality documentation for client and governance purposes.
5. Collaborate with internal and client security teams for successful deployment.
6. Support incident response planning and execute break-glass scenarios as needed.

Qualifications and Skills

• Experience as an Infrastructure Engineer or Security Engineer in secure or government settings.
• Deep knowledge of Active Directory (OU design, GPOs, Tier-0 security models).
• Expertise in Entra ID (Azure AD) and Entra AD Connect, especially filtering rules and troubleshooting sync issues.
• Strong understanding of Privileged Identity Management (PIM) and related workflows.
• Experience in hybrid disentanglement of Tier-0 identities and secure re-provisioning.
• Familiarity with zero-trust principles, including PAW, least privilege, and attack surface reduction.
• Ability to produce clear technical documentation and test plans.
• Excellent communication skills and client expectation management.

Interested?

If you are a confident and skilled Infrastructure/Security Engineer seeking your next challenge, apply now or contact us for more information.