Security Infrastructure Engineer

Conventus Solutions Ltd; Corsham; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading security solutions provider is urgently seeking a Security Infrastructure Engineer for hybrid work in Corsham. The ideal candidate will have extensive experience in installing, configuring, and updating servers and software components. You will validate engineering designs for JSP 453 compliance and provide risk management solutions. Required skills include Ubuntu or Linux administration, LDAP, RADIUS configuration, and a solid understanding of cybersecurity frameworks. Candidates must hold a DV or SC clearance and be willing to undergo UK National Security Vetting procedures.

Qualifications

• 5+ years of experience in security engineering.
• Experience in implementing security frameworks.
• Strong analytical skills for innovative solutions.

Responsibilities

• Support the Security team in installations and updates.
• Validate engineering designs for compliance regulations.
• Advise on cyber security technologies and present action plans.

Skills

Ubuntu and/or Linux System administration

LDAP Design and Management

RADIUS / TACACS configuration

Security engineering for server installation and configuration

PKI Hierarchy understanding

Knowledge of NIST CSF, ISO 27001, and MOD-specific concepts

Experience with VMware ESXi 8 and VCentre 8

Understanding of CISCO IOS-XE, CISCO ASA

Knowledge of JSP 604/453 compliance

Education

Relevant Cyber Security qualifications (e.g., CompTIA Security+, GIAC Security Essentials)

Tools

Python

PHP

Job description

Location: Corsham / Hybrid

We have an urgent need for a Security Infrastructure Engineer to support the Security team installing, configuring and updating servers and software components.

Who will validate the engineering designs are JSP 453 compliant, providing the supporting evidence and documentation.

Working with the Engineering, Design and Security teams to identify security risks, recommending mitigations and solutions.

Advise on the benefits of in-service and emergent cyber security technologies, presenting recommended courses of action (CoA) and associated cost/risk analysis.

Skills and Experience

• Ubuntu and/or Linux System administration
• LDAP Design and Management
• RADIUS / TACACS configuration
• Significant, demonstrable, experience in providing security engineering input to the installation, configuration, maintenance, administration, and support of related or similar solutions.
• Significant demonstr experience in understanding and administration of PKI Hierarchy.
• Demonstrable experience of security policy frameworks including, but not limited to, NIST CSF, ISO 27001 and MOD-specific concepts including MoD Secure by Design (SbD).
• Experience in providing security engineering input to the implementation of:
  • Virtualisation technologies such as VMware ESXi 8 and VCentre 8.
  • Network infrastructure such as CISCO IOS-XE, CISCO ASA, BGP, VRF/MPLS, VPN, QoS.
• Clear understanding of JSP 604/453 network security engineering compliance

Highly Desirable Qualifications

• Relevant Cyber Security qualifications such as CompTIA Security+, GIAC Security Essentials Certification, Systems Security Certified Practitioner.

Desirable

• Device automation using scripting such as Python / PHP
• Delivering against high pressure timelines and in complex organisations.
• Writing and analysing technical requirements.
• Conducting product selections against complex requirements, specifically measuring performance, cost, and time.
• Working as part of a large technical team.
• Experience of Cyber Essentials/Cyber Essentials Plus.
• Experience of Penetration Testing and IT System security.
• In-date professional registration with organisations such as APMG or CIISec
• Strong critical thinking and analytical skills to solve problems through innovative and practical solutions.
• Working within the public sector, preferably Defence Digital (formerly ISS).
• Delivering accredited secure solutions within the UK Public Sector.
• Delivering in Agile (SAFE4) and Waterfall projects
• SCOM.

Due to the nature of the work, candidates are required to hold a DV or hold current SC and be willing to undergo UK National Security Vetting procedures to achieve DV clearance