Infrastructure Security Engineer - DV Eligible - Perm

Sanderson Government & Defence; Cheltenham; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus (10–15%)

Pension contributions (6% employer)

Annual leave 26 days

Private medical insurance

Parking near office

Training and development budget

Job summary

Sanderson Government & Defence is seeking an Infrastructure Security Engineer to own IT and infrastructure security across the business from Cheltenham. The role is on-site with scope for future work-from-home arrangements and requires DV eligibility.

The candidate will manage Windows and Linux endpoints, administer Microsoft 365 and identity services, and lead security certifications while improving tooling and resilience. A strong foundation in IT infrastructure with security focus is expected.

Qualifications

• Solid foundation in systems administration and IT infrastructure.
• Experience managing Windows and Linux endpoints.
• Interest in cyber security and secure infrastructure practices.

Responsibilities

• Manage Windows and Linux endpoints, including provisioning, patching, and compliance.
• Administer Microsoft 365, identity management, SSO, and certificates.
• Operate security tooling and coordinate external penetration testing.
• Maintain AWS infrastructure and office networking.
• Own backup, DR and business continuity processes.
• Lead Cyber Essentials and Cyber Essentials Plus certifications.

Skills

Windows administration

Linux administration

Cyber security

Troubleshooting

Identity management

Tools

Microsoft Intune

Fleet

Microsoft 365

AWS

Job description

Infrastructure Security Engineer - Perm - DV Eligible:

• Location: Cheltenham
• Days On- Site: 5 (Scope for some WFH in the future)
• Clearance: DV (Preferable) but must be eligible to go through DV.
• Salary: GBP60,000 - GBP90,000 + Benefits

Highly technical specialist security organisation are looking to bring someone in to own IT and Infrastructure security across the business, supporting specialist Software team.

About the role

This is a varied role, and we don't expect candidates to have experience in every technology or responsibility listed below. Instead, we're looking for someone with a solid foundation in systems administration and IT infrastructure, strong technical problem-solving skills, and a genuine curiosity to learn.

In particular, we value:

• Taking ownership of problems and seeing them through to resolution.
• The desire to learn unfamiliar technologies and processes.
• Strong troubleshooting and analytical skills.
• An interest in cyber security and secure infrastructure practices.

This is an on-site role, and will require the successful applicant to go through the UK security clearance process.

Core Responsibilities

• Manage Windows and Linux endpoints, including device provisioning, configuration,patching, compliance and endpoint management using platforms such as Microsoft Intune and Fleet.
• Administer Microsoft 365, identity management, SSO, integration's, certificates and user-life cycle processes.
• Operate and improve security tooling, including monitoring, vulnerability management,endpoint security and remediation activities, while coordinating external penetration testing.
• Maintain and develop the company's AWS infrastructure, office networking, standalone research networks and supporting business IT systems, including VoIP and meeting room technology.
• Own backup, disaster recovery and business continuity processes, ensuring backup integrity is regularly tested and recovery procedures remain effective.
• Lead Cyber Essentials and Cyber Essentials Plus certification activities, maintain infrastructure documentation and ensure IT governance and asset life cycle processes are followed.
• Identify, plan and deliver infrastructure improvements that enhance security, resilience and operational efficiency.

Infrastructure Improvement Projects

Examples of projects you may lead include:

• Designing and implementing services for standalone networks.
• Designing and implementing centralised authentication systems for standalone networks.
• Building and maintaining self-hosted LLM Servers.
• Identifying and delivering improvements to the company's infrastructure, security and operational tooling.
• Helping to build some interesting & unusual setups to support our research activities.

Benefits

• Discretionary bonus: Typically 10-15% of salary, depending on company and individual performance.
• Pension: 6% employer contribution, 6-12% personal contribution, via salary sacrifice
• Annual leave: 26 days, buy or sell up to 5 days per year
• Private medical insurance including dental cover
• Parking close to the office
• Training and development - an annual budget plus paid time for courses and conferences. We expect you to hit unfamiliar technology in this role and we will fund you learning.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.