security engineer in critical infrastructure

HireHi; Greater London; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Matched pension scheme

Online GP service

Employee assistance programme

My Rewards discounts

Life assurance

Enhanced parental leave

Reward and recognition scheme

Salary sacrifice

EV/hybrid car scheme

Private health care

Job summary

Cyro Cyber is seeking a hands-on Cloud Security Engineer to design, implement and harden Microsoft Azure and Microsoft 365 security for critical national infrastructure projects.

You will translate security requirements into practical controls, lead cloud security delivery across identity, governance, networking, and data protection, and author technical designs, runbooks and documentation for secure, scalable platforms.

Qualifications

• Strong hands-on experience engineering and securing Microsoft Azure environments.
• Practical capability across Azure security domains, including identity, governance, networking, workload protection, logging and secrets management.
• Experience with Microsoft Entra ID, including practical exposure to Privileged Identity Management, and Azure security technologies such as Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics.
• Experience using infrastructure-as-code or scripting tools such as Bicep, Terraform, PowerShell or Azure CLI.
• Ability to translate architectural requirements and HLDs into accurate LLDs, build documentation, test plans and operational runbooks.
• Strong troubleshooting skills and experience resolving cloud configuration, access, policy and integration issues.
• Understanding of cloud security principles, including least privilege, defence in depth, secure-by-design, segmentation, encryption and continuous monitoring.
• Good client-facing communication, documentation and stakeholder engagement skills.
• Ability to work autonomously under general direction, lead defined work packages and guide colleagues where appropriate.
• Eligibility for UK Security Clearance; successful appointment is subject to being granted Security Clearance.

Responsibilities

• Design, implement and strengthen security across Azure and Microsoft 365 environments for critical infrastructure and transformation projects within the NRTS programme.
• Translate security requirements into practical, secure solutions and lead the engineering delivery of cloud security controls across identity, privileged access, governance, networking, monitoring and data protection.
• Use automation and Infrastructure as Code to deliver scalable, secure-by-design solutions and maintain compliant, resilient and operationally effective platforms.
• Collaborate with clients, engineers and stakeholders, provide security assurance, and contribute to developing cloud security services and best practices.
• Implement and improve Azure and Microsoft 365 security controls; secure cloud identities, privileged access, networks, workloads and data.
• Develop automated, repeatable security solutions using Infrastructure as Code; produce technical designs, documentation and operational standards.
• Conduct security reviews, hardening activities and technical assurance.
• Support clients and project teams with cloud security guidance.

Skills

Azure security

Identity & access

Azure Entra ID

IaC scripting

Documentation

Troubleshooting

Security principles

Stakeholder comms

Autonomous work

Security clearance

Tools

Bicep

Terraform

PowerShell

Azure CLI

Job description

Описание: Cyro Cyber is a specialist cybersecurity consultancy founded in 2021. It helps public sector and financial organisations protect their Critical Digital Infrastructure by providing independent cybersecurity advice and services. The consultancy operates across the UK, with offices in London and Farnborough.

Задачи:

Design, implement and strengthen security across Azure and Microsoft 365 environments for critical infrastructure and transformation projects within the NRTS programme Translate security requirements into practical, secure solutions and lead the engineering delivery of cloud security controls across identity, privileged access, governance, networking, monitoring and data protection Use automation and Infrastructure as Code to deliver scalable, secure-by-design solutions and maintain compliant, resilient and operationally effective platforms Collaborate with clients, engineers and stakeholders, provide security assurance, and contribute to developing cloud security services and best practices Implement and improve Azure and Microsoft 365 security controls Secure cloud identities, privileged access, networks, workloads and data Develop automated, repeatable security solutions using Infrastructure as Code Produce technical designs, documentation and operational standards Conduct security reviews, hardening activities and technical assurance Support clients and project teams with cloud security guidance

Требования:

• Strong hands-on experience engineering and securing Microsoft Azure environments
• Practical capability across Azure security domains, including identity, governance, networking, workload protection, logging and secrets management
• Experience with Microsoft Entra ID, including practical exposure to Privileged Identity Management, and Azure security technologies such as Azure Policy, Defender for Cloud, Key Vault, Azure Monitor and Log Analytics
• Experience using infrastructure-as-code or scripting tools such as Bicep, Terraform, PowerShell or Azure CLI
• Ability to translate architectural requirements and HLDs into accurate LLDs, build documentation, test plans and operational runbooks
• Strong troubleshooting skills and experience resolving cloud configuration, access, policy and integration issues
• Understanding of cloud security principles, including least privilege, defence in depth, secure-by-design, segmentation, encryption and continuous monitoring
• Good client-facing communication, documentation and stakeholder engagement skills
• Ability to work autonomously under general direction, lead defined work packages and guide colleagues where appropriate
• Eligibility for UK Security Clearance; successful appointment is subject to being granted Security Clearance
• Willingness to work across varied cloud security engineering activities, applying existing strengths while developing capability in other areas

Условия:

• Matched or contributory pension scheme
• Online GP service, available 24 hours a day, 365 days a year
• Employee assistance programme
• My Rewards portal with access to retail discounts
• Life assurance
• Enhanced maternity, paternity and adoption leave
• Reward and recognition scheme
• Salary sacrifice
• EV/hybrid car scheme
• Private health care and health care cash plan
• Discretionary bonus schemes
• 26 Days of annual leave plus bank holidays
• Recommend-a-friend reward
• Certain roles are subject to third-party background checks; some roles require drug and alcohol testing during induction and onboarding