Security Infrastructure Engineer: Cloud Security & DevSecOps

Surrey Satellite Technology Ltd (SSTL); England; On-site; GBP 60,000 - 90,000; Full time

Job summary

Surrey Satellite Technology Ltd (SSTL) in the United Kingdom is seeking a Security Infrastructure Engineer to design, implement and maintain SSTL’s core IT infrastructure with a strong focus on security, resilience and compliance. The role provides 3rd line support to the Service Desk and works with infrastructure, networking and application teams.

You will embed security into design and operation, review vulnerabilities, manage configurations and participate in cyber security incident response

Qualifications

• 3–5+ years in security analysis or related role.
• Hands-on with cloud platforms (AWS, Azure or Google Cloud).
• Experience with identity and access management, SSO, MFA, RBAC and privileged-access controls.
• Degree in computing or equivalent experience.

Responsibilities

• Maintain core infrastructure availability, performance and security to agreed standards.
• Implement secure configurations and system hardening.
• Review and remediate infrastructure vulnerabilities.
• Provide 3rd line support to the Service Desk.
• Ensure logging and security monitoring and manage encryption/certificates.
• Lead security incidents and participate in CSIRT activities.
• Contribute to security improvements across existing infrastructure and project work.

Skills

Networking fundamentals

IaC & automation

Docker & Kubernetes

Security frameworks (ISO 27001/NIST)

Threat modelling

Root cause analysis

Documentation & communication

Education

Degree in Computing

Tools

Terraform

Ansible

Python

Bash

Docker

Kubernetes

Job description

Surrey Satellite Technology Ltd (SSTL) in the United Kingdom is seeking a Security Infrastructure Engineer to design, implement and maintain SSTL’s core IT infrastructure with a strong focus on security, resilience and compliance. The role provides 3rd line support to the Service Desk and works with infrastructure, networking and application teams.

You will embed security into design and operation, review vulnerabilities, manage configurations and participate in cyber security incident response