Security Infrastructure Systems Engineer

Surrey Satellite Technology; Guildford; On-site; GBP 33,000 - 73,000; Full time

Job summary

Surrey Satellite Technology in Guildford is seeking a Security Infrastructure Engineer to embed security into core IT infrastructure. You will implement, operate, and improve security, resilience, and compliance across cloud and on‑prem workloads, working with infrastructure, networking, and application teams.

The role requires 3–5+ years in security analysis or related fields, hands‑on experience with AWS/Azure, Terraform, Ansible, Docker, Kubernetes, and strong logging, incident response, and

Qualifications

• Educated to degree level or equivalent experience, preferably in computing
• CISSP, CCSP, or Security+ are an advantage but not necessary
• 3–5+ years of experience in security analysis, infrastructure, DevSecOps, or a related role
• Hands-on experience securing cloud platforms such as AWS, Azure, or Google Cloud
• Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls
• Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools
• Experience with Linux administration, system hardening, patch management, and configuration management
• Experience investigating security incidents, reviewing logs, identifying root causes, and implementing remediation
• Strong knowledge of networking, including TCP/IP, DNS, firewalls, VPNs, proxies, and load balancers
• Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash
• Familiarity with containers and orchestration platforms such as Docker and Kubernetes
• Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2
• Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews
• Strong troubleshooting, documentation, and cross-functional communication skills
• Team player with strong communication skills
• Competent troubleshooting skills
• Ability to articulate project deliverables and designs
• Ability to work under own initiative and in a busy environment

Responsibilities

• Implement, operate, maintain, and continuously improve our core IT infrastructure with a focus on security, resilience, and compliance
• Provide 3rd line support to the Service Desk
• Work closely with infrastructure, networking, and application colleagues to embed security into infrastructure design and operation
• Maintain infrastructure services to agreed availability, performance, and security standards
• Implement secure configurations and system-hardening standards
• Review and remediate infrastructure vulnerabilities
• Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles
• Support endpoint and server security controls
• Ensure appropriate logging and security monitoring is enabled and reviewed
• Support encryption and certificate-management requirements
• Review infrastructure against security standards and vendor recommendations
• Identify unsupported and end-of-life systems and associated risks
• Support security improvements across existing infrastructure
• Oversee and engage in system upgrades, patching, configuration changes, and lifecycle-management activities
• Monitor security and compliance within our infrastructure capacity, performance, availability, and health
• Diagnose and resolve security incidents and problems
• Support backup, recovery, business continuity, and disaster-recovery arrangements
• Participate in infrastructure projects, migrations, and technology refresh programmes
• Manage the security of the infrastructure through appropriate change, configuration, and release-management processes
• Participate in CSIRT activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness

Skills

Security engineering

Cloud security

DevSecOps

IAM

Networking

Linux

Python scripting

Terraform

Ansible

Docker

Kubernetes

RBAC

NIST CIS ISO 27001 SOC2

Education

Degree level or equivalent

Tools

Terraform

Ansible

Python

Bash

Docker

Kubernetes

AWS

Azure

Google Cloud

Linux

Job description

Salary: £33,000 - 73,000 per year

Requirements

• Educated to degree level or equivalent experience, preferably in computing
• CISSP, CCSP, or Security+ are an advantage but not necessary
• 3–5+ years of experience in security analysis, infrastructure, DevSecOps, or a related role
• Hands-on experience securing cloud platforms such as AWS, Azure, or Google Cloud
• Experience with identity and access management, SSO, MFA, RBAC, and privileged-access controls
• Experience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection tools
• Experience with Linux administration, system hardening, patch management, and configuration management
• Experience investigating security incidents, reviewing logs, identifying root causes, and implementing remediation
• Strong knowledge of networking, including TCP/IP, DNS, firewalls, VPNs, proxies, and load balancers
• Proficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or Bash
• Familiarity with containers and orchestration platforms such as Docker and Kubernetes
• Understanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2
• Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviews
• Strong troubleshooting, documentation, and cross-functional communication skills
• Team player with strong communication skills
• Competent troubleshooting skills
• Ability to articulate project deliverables and designs
• Ability to work under own initiative and in a busy environment

Responsibilities

• Implement, operate, maintain, and continuously improve our core IT infrastructure with a focus on security, resilience, and compliance
• Provide 3rd line support to the Service Desk
• Work closely with infrastructure, networking, and application colleagues to embed security into infrastructure design and operation
• Maintain infrastructure services to agreed availability, performance, and security standards
• Implement secure configurations and system-hardening standards
• Review and remediate infrastructure vulnerabilities
• Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles
• Support endpoint and server security controls
• Ensure appropriate logging and security monitoring is enabled and reviewed
• Support encryption and certificate-management requirements
• Review infrastructure against security standards and vendor recommendations
• Identify unsupported and end-of-life systems and associated risks
• Support security improvements across existing infrastructure
• Oversee and engage in system upgrades, patching, configuration changes, and lifecycle-management activities
• Monitor security and compliance within our infrastructure capacity, performance, availability, and health
• Diagnose and resolve security incidents and problems
• Support backup, recovery, business continuity, and disaster-recovery arrangements
• Participate in infrastructure projects, migrations, and technology refresh programmes
• Manage the security of the infrastructure through appropriate change, configuration, and release-management processes
• Participate in CSIRT activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness

Technologies

• AWS
• Ansible
• Azure
• Bash
• Cloud
• DevSecOps
• Docker
• Embedded
• Support
• Kubernetes
• Linux
• Python
• RBAC
• Security
• TCP/IP
• Terraform

More

We are SSTL, and this Security Infrastructure Engineer role reports to our Infrastructure Manager. You will work closely with our infrastructure, networking, and application colleagues to ensure security is embedded into the design and operation of infrastructure rather than treated as a separate activity. The role focuses on core IT infrastructure delivery with particular emphasis on security, resilience, compliance, and continuous improvement.