Infrastructure Security Engineer

FSP Retail Team; United Kingdom; Remote; GBP 70,000 - 110,000; Full time

Job summary

FSP Consulting Services is seeking an Infrastructure Security Engineer to join the Cyber Engineering team. You will deliver technical consultancy, subject matter expertise and service innovation across Microsoft-aligned security offerings, with a focus on Active Directory, Windows Server and hybrid identity.

You will assess security postures, identify risks and deliver prioritized remediation plans in alignment with business objectives and risk requirements, helping clients strengthen core

Qualifications

• Experience as a consultant or engineer in complex enterprise environments.
• Ability to translate security requirements into practical, scalable controls balancing confidentiality, integrity, and availability.
• Strong Microsoft infrastructure security experience across identity and platform security.

Responsibilities

• Act as a trusted advisor to customers, providing guidance on infrastructure security strategy, controls and best practices.
• Provide guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure environments.
• Assess infrastructure security risks and deliver actionable remediation plans.
• Drive security gap analysis and maturity assessments across identity, infrastructure and hybrid environments.
• Promote standards, architectures and repeatable security practices across customer environments.
• Design and assure secure, scalable solutions aligned to customer needs and regulatory obligations.

Skills

Active Directory

Entra ID

Windows Server

Group Policy

Hybrid identity security

Security consulting

Microsoft security solutions

Education

SC-300

SC-500

AZ-104

AZ-800/AZ-801

MS-102

Tools

Azure DevOps

Job description

RoleOverview

WehaveanexcitingopportunityforanInfrastructureSecurityEngineertojoinourCyberEngineeringteam,providingtechnicalconsultancy,subjectmatterexpertiseandserviceinnovationacrossMicrosoft-alignedcybersecurityofferings,withaparticularfocusonActiveDirectory,WindowsServer,hybrididentityandplatformsecurity.

Workingcloselywithcustomers,teammatesandserviceleads,youwillassessinfrastructureandidentitysecurityposture,identifyrisksandcontrolgaps,anddevelopprioritised,actionableremediationplansthatalignwithbusinessobjectivesandriskrequirements.YouwillbringstrongexpertiseacrossMicrosoftinfrastructure,helpingorganisationsstrengthencoreidentityservices,improveplatformresilienceandreduceriskacrosshybridenvironments.

Responsibilities

• Actasatrustedadvisortocustomers,providingexpertguidanceoninfrastructuresecuritystrategy,controlsandbestpractices.
• ProvideexpertguidanceonActiveDirectory,WindowsServer,GroupPolicy,authenticationandaccesscontrol,supportingsecureandwell-governedidentityandplatformenvironments.
• Assessinfrastructuresecurityrisksandcontroleffectiveness,deliveringactionablerecommendationsandremediationplans.
• Deliversecuritygapanalysisandmaturityassessmentsacrossidentity,infrastructureandhybridenvironments,identifyingrisksanddefiningprioritised,actionableremediationplans.
• Driveconsistencyacrosscustomerenvironmentsbypromotingstandards,architecturesandrepeatablesecuritypractices.
• Designandassuresecure,scalablesolutionsalignedtocustomerneeds,riskappetiteandregulatoryobligations,contributingtoserviceinnovationandtranslatingbusinessobjectivesintopracticalsecurityoutcomes.
• ContributetotheevolutionoftheCyberEngineeringpracticethroughservicedevelopment,knowledgesharingandthecreationofrepeatableinfrastructuresecurityofferings.

AboutYou

• Experiencedconsultantorengineer,comfortableoperatingincomplexenvironmentsandbalancingtechnicalrequirementswithoperationalimpact,userexperienceandorganisationalconstraints.
• Abletotranslatesecurityrequirementsintopractical,scalablecontrolsthatbalanceconfidentiality,integrity,availabilityandoperationalefficiency.
• Strongtechnicalcredibilityacrossidentityandplatformsecurity,providingcontext-drivenrecommendationsthatreflectreal-worldimplementationchallengesacrossMicrosoftenvironments.
• Experiencecollaboratingwithtechnicalandbusinessstakeholderstoensuresecuritysolutionssupportorganisationalobjectivesandoperationalneeds.
• Clearandeffectivecommunicatorwhotranslatessecurityrisksandcontrolgapsintoactionableoutcomes,withaninterestinserviceimprovement,standardisationandcommerciallyawaredelivery.

KnowledgeandExperience(HighlyAdvantageous)

• ProvenexperiencewithActiveDirectory,EntraID,WindowsServer,GroupPolicyandhybrididentitysecurity.
• Understandingofsecuritybaselines,hardeningstandardsandcontrolframeworksusedtosupportrisk-basedrecommendations.
• Experienceofphasedremediationapproachesacrossidentity,infrastructureandplatformsecuritycontrols.
• WorkingknowledgeofAzureDevOpsorsimilardeliverytooling.

DesirableCertifications

• SC-300(MicrosoftIdentityandAccessAdministrator)
• SC-500(MicrosoftCertified:CloudandAISecurityEngineerAssociate)
• AZ-104(MicrosoftCertified:AzureAdministratorAssociate)
• AZ-800/AZ-801(MicrosoftCertified:WindowsServerHybridAdministratorAssociate)
• MS-102(Microsoft365AdministratorExpert)

WhatWeLookforinOurPeople

• StrongalignmentwithFSPvaluesandethos.
• Commitmenttoteamwork,qualityandmutualsuccess.
• Proactivitywithanabilitytooperatewithpaceandenergy.
• Strongcommunicationandinterpersonalskills.
• Dedicationtoexcellenceandquality.

WhoareFSP?

Foundedin2012,FSPConsultingServices(FSP)arealeadingenterprise-leveldigitalevolutionandcybersecurityconsultancy.Weenablepeakperformance,culturalcohesionandbusinessgrowththroughtechnologybyadoptingacomprehensiveapproachtostrategyandcreatingviablesustainableandresilientdigitalfuturesfororganisationsandtheirteams.

Attheheartofeverythingwedoisourunwaveringcommitmenttotheevolutionoforganisationsandtheirpeople.Weworkinpartnershipwithourclients,helpingthembecomeresponsive,engagedandsupremelyequippedforasuccessfulfuture,blendinghigh-qualitybusinessandtechnologydeliverywithadedicationtoexceptionalclientexperience.

Behindthiscommitmentisadedicatedemployee-firststrategy,builtaroundourorganisation'scorevalues.Weareproudtobeamultiaward-winningworkplace,mostnotablyrecognisedbyBestCompanies™asthe#1BestCompanyToWorkForintheUK,TechandtheSouthEastin2023.

WeareISO27001andISO9001certifiedbyUKAS.WearealsoaCRESTapprovedpenetrationtestingandSOCcompany,anIASMECyberEssentialsCertificationBodyandCyberEssentialsPluscertified.

LearnmoreaboutFSPhere: https://fsp.co/about-fsp/