Principal IT Infrastructure & Security Specialist
Aioi Nissay Dowa Europe Limited
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Aioi Nissay Dowa Europe Limited is seeking a senior IT Infrastructure Lead in Oxford to shape and secure the company’s global IT environment. You will design, implement and govern a heterogeneous infrastructure across Windows, MacOS and Linux, ensuring resilience, availability and strong security aligned with business objectives.
You will mentor teams, set technical standards, and drive improvements in cloud and on‑premises environments while coordinating with stakeholders across the
Qualifications
- Bachelor's degree or equivalent professional experience.
- Translate business and security requirements into practical infrastructure designs.
- Justify architectural decisions to technical and non-technical stakeholders.
- Design, implement and support enterprise IT infrastructure in a principal role.
- Balance usability, developer productivity and information security.
- Strong networking knowledge: switching, routing, wireless, firewalls.
- Secure Microsoft 365 environments including Entra ID, Intune, Exchange Online.
- IAM: SSO, MFA, RBAC design and deployment.
- Secure cloud infrastructure, ideally AWS.
- Support Windows, MacOS, Linux environments.
- ISMS implementation experience and ISO/IEC 27001 knowledge.
- Mentor junior IT professionals; lead technical teams.
- Scripting in PowerShell, Bash or Python for automation.
- Analytical troubleshooting and strong documentation.
Responsibilities
- Lead design, implementation, maintenance and continual improvement of heterogeneous IT infrastructure.
- Translate requirements into practical technical solutions aligned with policies and standards.
- Establish technical standards for secure, resilient infrastructure.
- Design, implement and maintain security controls across MS 365, Entra ID, Intune, networking and cloud services.
- Act as principal technical authority on infrastructure and security; advise IT Manager.
- Coordinate day-to-day IT staff work; provide mentoring and escalation support.
- Design and maintain secure office network infrastructure (wired/wireless, firewalls, VPNs).
- Lead governance of Microsoft 365, Entra ID, Intune, collaboration platforms, licensing.
- Evaluate IT hardware, software and cloud services; advise procurement decisions.
- Maintain infrastructure documentation, procedures and disaster recovery plans.
- Support ISMS development and ISO/IEC 27001/Cyber Essentials Plus compliance.
- Monitor security, health and performance; lead remediation actions.
- Evaluate emerging technologies to improve security and efficiency.
- Provide leadership during projects, deployments and major incidents.
Skills
Education
Tools
Job description
Aioi R&D Lab – Oxford is an AI R&D company based in Oxford, on a mission to harness AI to understand, predict, and manage risk, helping build a safer, more resilient society.
We sit at the intersection of academia and industry, working with Oxford's professors, researchers, and graduates alongside commercial spinouts and partner companies, to turn frontier research into AI that actually ships rather than just gets published.
Our work spans applied AI for insurance and adjacent industries, including supply chains, nature, autonomous driving, and the emerging challenges nobody's solved yet, alongside deep research of our own into agentic AI, privacy-preserving technologies, trustworthy AI, complex systems modelling, and quantum computing.
We build AI products and solutions for insurers, businesses, and public-sector organisations worldwide, and run innovative research projects that push these technologies further, helping people make better decisions in an uncertain world.
You’ll be providing technical leadership for the design, implementation, operation and continual improvement of the company's IT infrastructure, ensuring it remains secure, resilient, scalable and aligned with business objectives.
If you’d like to be part of our brighter future, and share in our success, we’d love to hear from you.
BE THE NEXT BIG THING, NOW.
- Lead the design, implementation, maintenance and continual improvement of the company's heterogeneous IT infrastructure, including Windows, MacOS and Linux platforms, ensuring high levels of availability, resilience and security.
- Translate business, operational and information security requirements into practical technical solutions, producing infrastructure designs and implementation plans that align with company policies, standards and recognised best practice.
- Establish and maintain technical standards for the organisation's IT infrastructure, ensuring solutions are secure, supportable, resilient and consistent with company architecture and security policies.
- Design, implement and maintain technical security controls across the organisation's IT environment, including Microsoft 365, Microsoft Entra ID, Intune, endpoint management, identity and access management, networking and cloud services.
- Act as the principal technical authority for infrastructure and security, providing expert advice to the IT Manager on technology selection, architecture, technical risk and operational improvements.
- Plan, coordinate and oversee the day-to-day technical work of IT staff, providing mentoring, knowledge sharing and technical guidance, whilst acting as the escalation point for complex incidents and infrastructure issues.
- Design, implement and maintain secure office network infrastructure, including wired and wireless networking, internet connectivity, firewalls, network segmentation, remote access and associated security technologies.
- Lead the administration, governance and security of Microsoft 365, Microsoft Entra ID, Intune, collaboration platforms and business applications, defining technical standards, security baselines and operational procedures.
- Specify, evaluate and implement IT hardware, software and cloud services, providing technical input into procurement decisions and managing the lifecycle of infrastructure assets and software licensing.
- Develop and maintain technical standards, infrastructure documentation, operational procedures and disaster recovery documentation to support the effective management and resilience of the IT environment.
- Support the development, implementation and continual improvement of the organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO/IEC 27001, Cyber Essentials Plus and other required standards.
- Monitor the security, health and performance of the IT environment, identifying risks, vulnerabilities and opportunities for improvement, and leading the implementation of corrective actions.
- Evaluate emerging technologies and make recommendations to improve the organisation's IT infrastructure, security posture and operational efficiency.
- Provide technical leadership during infrastructure projects, technology deployments and major incidents, ensuring solutions are delivered to agreed standards, timescales and security requirements.
- Bachelor's degree in Computer Science, Information Technology or a related discipline, or equivalent relevant professional experience.
- Experience translating business and security requirements into practical technical solutions and infrastructure designs.
- Demonstrated ability to evaluate technical options, make sound architectural decisions and justify recommendations to both technical and non-technical stakeholders.
- Significant experience designing, implementing and supporting enterprise IT infrastructure in a principal technical or infrastructure engineering role.
- Ability to balance usability, developer productivity and information security when designing and implementing technical solutions.
- Strong knowledge of enterprise networking, including switching, routing, wireless networking, firewalls, VPNs and network security principles.
- Proven experience designing, implementing and securing Microsoft 365 environments, including Microsoft Entra ID, Intune, Exchange Online, SharePoint Online and Microsoft Teams.
- Experience implementing and administering Microsoft Intune, including device enrolment, compliance policies, application deployment and mobile device management.
- Experience designing and implementing identity and access management solutions, including Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA) and role-based access control.
- Experience designing and implementing secure cloud infrastructure and services, ideally Amazon Web Services (AWS).
- Experience administering and supporting heterogeneous IT environments comprising Windows, MacOS and Linux systems.
- Experience supporting the implementation, operation or continual improvement of an Information Security Management System (ISMS).
- Good understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO/IEC 27001 and Cyber Essentials Plus.
- Experience mentoring or providing technical leadership to junior IT professionals.
- Experience with infrastructure automation or scripting using technologies such as PowerShell, Bash or Python.
- Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex infrastructure and security issues.
- Excellent technical documentation, communication and stakeholder management skills.
- Professional certifications relating to Microsoft 365, Microsoft Entra ID, Intune or Azure.
- AWS Associate or Professional certifications.
- Networking certifications such as Cisco CCNA/CCNP or equivalent.
- Information security certifications such as ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Internal Auditor, CompTIA Security+, CISSP or equivalent.
- Experience designing and implementing Zero Trust security architectures.
- Experience supporting Cyber Essentials Plus certification or equivalent security assurance frameworks.
- Experience working with Infrastructure as Code or configuration management technologies.
- Experience planning and delivering infrastructure projects.
We're committed to your growth, providing the support to excel in your current role whilst offering opportunities to step into new challenges and drive your career forward.
We realise that we need to be a good fit for you above all else - so here's what you can enjoy about AND-E:
We are proud to have been named the Best Large Insurance Employer for 2023 at the prestigious British Insurance Awards.
We offer competitive salaries that recognise your skills and expertise.
We champion choice, flexibility, and balance in both work and home life. Our commitment to diversity, equity, and inclusion ensures everyone feels valued and supported - including embracing neurodiversity and providing the tools needed to thrive.
We like to think our benefits package is one of the best, focusing on colleagues’ health, wealth, and lifestyle. We offer:
- 28 Days annual leave with the option to buy/sell up to 5 days holiday*
- Private Medical & Permanent Health Insurance*
- 4 x Annual salary Life Assurance*
- Health and Wellbeing Benefits: Including money back on health-related expenses (optician, dental, physio, etc.), Flu Jab vouchers, Virtual GP service, Employee Assistance Programme, and enhanced family-friendly policies (baby bonus & pension advisory service)
- Financial and Lifestyle Support: Offers financial flexibility through Wagestream*, annual season ticket loans*, cycle scheme*, and £250 towards driving lessons for you and dependents*.
* Subject to company performance and completion of probation
Aioi Nissay Dowa Europe is committed to promoting equal opportunities in employment. Employees and job applicants will receive equal treatment regardless of age, disability, gender reassignment, marital or civil partner status, pregnancy or maternity, race, colour, nationality, ethnic or national origin, religion or belief, sex or sexual orientation (Protected Characteristics)
At AND-E, equal opportunity is more than a policy - it's a promise. We welcome applications from all individuals regardless of age, disability, gender identity, marital status, pregnancy, race, religion, sexual orientation, or any other protected characteristic.
Reasonable adjustments: If you require any adjustments to support you during our recruitment process, please let us know. We’re committed to making the process accessible and are happy to help.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
