Infrastructure Security Engineer - DV Eligible - Perm

Sanderson Government and Defence; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Pension contribution

Annual leave 26 days

Private medical insurance

Parking near office

Training and development budget

Job summary

Sanderson Government and Defence is seeking an Infrastructure Security Engineer to own IT infrastructure and security across the business. The role covers endpoint management, cloud infrastructure, networking, and governance within a small cyber-security R&D environment.

You will lead security improvements, support the Software team, and drive Cyber Essentials certification while collaborating with cross-functional teams. DV eligibility is preferred.

Qualifications

• Solid foundation in IT infrastructure and systems administration.
• Experience with endpoint management and cloud infrastructure.
• Interest in cyber security and secure infrastructure practices.

Responsibilities

• Manage Windows and Linux endpoints, including device provisioning, configuration, patching, compliance and endpoint management using platforms such as Microsoft Intune and Fleet.
• Administer Microsoft 365, identity management, SSO, integration's, certificates and user-life-cycle processes.
• Operate and improve security tooling, including monitoring, vulnerability management, endpoint security and remediation activities, while coordinating external penetration testing.
• Maintain and develop the company's AWS infrastructure, office networking, standalone research networks and supporting business IT systems, including VoIP and meeting room technology.
• Own backup, disaster recovery and business continuity processes, ensuring backup integrity is regularly tested and recovery procedures remain effective.
• Lead Cyber Essentials and Cyber Essentials Plus certification activities, maintain infrastructure documentation and ensure IT governance and asset lifecycle processes are followed.
• Identify, plan and deliver infrastructure improvements that enhance security, resilience and operational efficiency.

Skills

Windows administration

Linux administration

Cloud infrastructure

Identity management

SSO

Security tooling

Vulnerability management

Backup and disaster recovery

Cyber Essentials

Tools

Intune

Fleet

Microsoft 365

AWS

Job description

Infrastructure Security Engineer

Contract: Perm. Security Clearance: DV Eligible (preferably DV, but must be eligible to go through DV). Location: Cheltenham. Days on Site: 5 (scope for some WFH in the future). Salary: £60,000 - £90,000.

Reason for role

Highly technical specialist security organisation are looking to bring someone in to own IT and Infrastructure security across the business, supporting specialist Software team. We are looking for an Infrastructure & Security Engineer to take ownership of our internal IT infrastructure, security operations and corporate systems. This is a broad, hands-on role within a small cyber-security R&D company, encompassing endpoint management, cloud infrastructure, networking, compliance and business IT. As our environment continues to evolve, you'll be expected to lead infrastructure improvement projects and help shape the future of our internal platforms and services.

About the role

This is a varied role, and we don't expect candidates to have experience in every technology or responsibility listed below. Instead, we're looking for someone with a solid foundation in systems administration and IT infrastructure, strong technical problem-solving skills, and a genuine curiosity to learn.

What we value

• Taking ownership of problems and seeing them through to resolution.
• The desire to learn unfamiliar technologies and processes.
• Strong troubleshooting and analytical skills.
• An interest in cyber security and secure infrastructure practices.

Core Responsibilities

• Manage Windows and Linux endpoints, including device provisioning, configuration, patching, compliance and endpoint management using platforms such as Microsoft Intune and Fleet.
• Administer Microsoft 365, identity management, SSO, integration's, certificates and user-life-cycle processes.
• Operate and improve security tooling, including monitoring, vulnerability management, endpoint security and remediation activities, while coordinating external penetration testing.
• Maintain and develop the company's AWS infrastructure, office networking, standalone research networks and supporting business IT systems, including VoIP and meeting room technology.
• Own backup, disaster recovery and business continuity processes, ensuring backup integrity is regularly tested and recovery procedures remain effective.
• Lead Cyber Essentials and Cyber Essentials Plus certification activities, maintain infrastructure documentation and ensure IT governance and asset lifecycle processes are followed.
• Identify, plan and deliver infrastructure improvements that enhance security, resilience and operational efficiency.

Infrastructure Improvement Projects

Examples of projects you may lead include:

• Designing and implementing services for standalone networks.
• Designing and implementing centralised authentication systems for standalone networks.
• Building and maintaining self-hosted LLM servers.
• Identifying and delivering improvements to the company's infrastructure, security and operational tooling.
• Helping to build some interesting & unusual setups to support our research activities.

Benefits

• Discretionary bonus: Typically 10-15% of salary, according to company and individual performance.
• Pension: 6% employer contribution, 6-12% personal contribution, via salary sacrifice.
• Annual leave: 26 days, buy or sell up to 5 days per year.
• Private medical insurance including dental cover.
• Parking close to the office.
• Training and development - an annual budget plus paid time for courses andconferences. We expect you to hit unfamiliar technology in this role and we will fund you learning.

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.