Security Infrastructure Engineer

CBSbutler Holdings Limited trading as CBSbutler; Corsham; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading engineering consultancy is seeking a Security Infrastructure Engineer to support the Security Team in maintaining secure infrastructure in Corsham. You’ll work closely with project teams to deliver compliant solutions in a defense environment, focusing on installation and configuration of servers. Essential qualifications include SC / DV clearance, strong experience in security engineering, and familiarity with security frameworks. A hybrid working model is offered, and the daily rate ranges from £500 to £575.

Qualifications

• Strong experience in security infrastructure engineering within secure environments.
• Proven experience supporting the installation, configuration, administration of secure infrastructure solutions.
• Knowledge of security frameworks including NIST CSF and ISO 27001.

Responsibilities

• Support the installation, configuration, and maintenance of secure infrastructure.
• Act as the primary security engineering conduit between teams to ensure compliant solutions.
• Identify security risks and recommend mitigations.

Skills

SC / DV clearance

Vmware

Linux

Cyber Security

MOD experience

Tools

VMware ESXi 8

Cisco IOS-XE

Job description

Security Infrastructure Engineer

• 6 months +
• Hybrid in Corsham
• Inside IR35
• 500 - £575 a day
• SC / DV cleared role

Skills

• SC / DV clearance
• Vmware
• Linux
• Cyber Security
• MOD experience

We are seeking an experienced Security Infrastructure Engineer to support the Security Team in the installation, configuration, maintenance, and update of servers and software components.

Working closely with the Project Manager (PM), Technical Design Architect (TDA), Security Assurance Coordinator (SAC), and wider engineering teams, you will play a key role in delivering compliant, accredited, and secure infrastructure solutions within a complex defence environment.

Key Responsibilities

Support the installation, configuration, administration, and maintenance of secure infrastructure and software components.

Work with the PM, TDA, and engineering teams to produce system security engineering designs, solutions, and documentation.

Act as the primary security engineering conduit between PM, SAC, TDA, and engineering teams to ensure compliant security solutions.

Attend and contribute to regular governance and review meetings, including the Security Working Group (SWG).

Engage with stakeholders and dependent projects to deliver coordinated security engineering solutions supporting accreditation and registrations

Contribute to the Security Accreditation Plan in coordination with the Project SAC.

Validate engineering designs against JSP 453 / JSP 604, providing supporting evidence and documentation.

Identify security risks, recommend mitigations, and advise on secure design decisions.

Provide advice on in-service and emerging cyber security technologies, including cost, risk, and benefits analysis.

Essential Knowledge, Skills & Experience

Strong experience in security infrastructure engineering within secure or regulated environments.

Infrastructure Access Control Expertise, Including

• Ubuntu / Linux system administration
• LDAP design and management
• RADIUS / TACACS configuration

Proven experience supporting the installation, configuration, administration, and support of secure infrastructure solutions.

Strong Understanding and Administration of PKI Hierarchies

Knowledge of security frameworks including NIST CSF, ISO 27001, and MOD Secure by Design (SbD).

Experience Providing Security Input To

• Virtualisation technologies (VMware ESXi 8, vCentre 8)
• Network infrastructure (Cisco IOS-XE, ASA, BGP, VRF / MPLS, VPN, QoS)
• Clear understanding of JSP 604 / JSP 453 network security engineering compliance.

Highly Desirable Qualifications

Cyber Security Certifications Such As

• CompTIA Security+
• GIAC Security Essentials (GSEC)
• Systems Security Certified Practitioner (SSCP)

Desirable Skills & Experience

Scripting and automation (Python, PHP).

Delivery in high-pressure, complex organisational environments.

Writing and analysing technical and security requirements.

Supporting product selection against cost, performance, and timescale constraints.

Experience working within large, multi-disciplinary technical teams.

Knowledge of Cyber Essentials / Cyber Essentials Plus.

Experience with penetration testing and system security assurance.

In-Date Professional Registration

Experience delivering secure solutions within the UK public sector, ideally Defence Digital.

Delivery experience across Agile (SAFe4) and Waterfall methodologies.

Knowledge of SCOM

If you'd like to discuss this Security Infrastructure Engineer role in more detail, please send your updated CV to (url removed) and I will get in touch