Security Infra Engineer: Secure & Harden Cloud & On-Prem

Surrey Satellite Technology Ltd (SSTL); Guildford; On-site; GBP 65,000 - 90,000; Full time

Job summary

SSTL is seeking a Security Infrastructure Engineer to own the design, implementation, and operation of core IT infrastructure with a strong emphasis on security, resilience, and compliance. You will provide 3rd line support and work with cross-functional teams to embed secure practices into infrastructure design and operations.

Key tasks include hardening, vulnerability remediation, logging, monitoring, backup planning, and participation in CSIRT activities.

Qualifications

• Educated to degree level or equivalent experience (preferably in computing).
• 3–5+ years of experience in security analysis, infrastructure, DevSecOps, or a related role.
• Hands-on experience securing cloud platforms such as AWS, Azure, or Google Cloud.
• Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls.
• Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools.
• Experience with Linux administration, system hardening, patch management, and configuration management.
• Experience investigating security incidents, reviewing logs, identifying root causes, and implementing remediation.

Responsibilities

• Maintain infrastructure services to agreed availability, performance and security standards.
• Implement secure configurations and system-hardening standards.
• Review and remediate infrastructure vulnerabilities.
• Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles.
• Support endpoint/server security controls.
• Ensure appropriate logging and security monitoring is enabled and reviewed.
• Support encryption and certificate-management requirements.
• Review infrastructure against security standards and vendor recommendations.

Skills

Security analysis

Cloud security

Identity & access management

SIEM

Vulnerability management

Linux administration

Automation / IaC

Networking fundamentals

Incident response

Threat modelling

Documentation

Cross-functional communication

Education

Degree in computing

Security certifications (CISSP/CCSP/Security+ advantage)

Tools

Terraform

Ansible

Python

Bash

Docker

Kubernetes

SIEM tools

EDR tools

Vulnerability scanners

Job description

SSTL is seeking a Security Infrastructure Engineer to own the design, implementation, and operation of core IT infrastructure with a strong emphasis on security, resilience, and compliance. You will provide 3rd line support and work with cross-functional teams to embed secure practices into infrastructure design and operations.

Key tasks include hardening, vulnerability remediation, logging, monitoring, backup planning, and participation in CSIRT activities.