Senior Forensic DBA: Incident Analysis & Data Recovery

Scrumconnect Consulting; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Scrumconnect Ltd is seeking a Senior Forensic DBA to investigate and reconstruct incidents within critical databases for a UK public sector programme. You will collaborate with security, delivery and engineering teams to identify root causes, preserve evidence, and provide recommendations to prevent recurrence.

At SFIA Level 5 you will work independently, advise at senior levels, and set data logging and recovery standards across the programme.

Qualifications

• Extensive hands-on experience as a senior DBA with PostgreSQL expertise.
• Experience with AWS managed databases (RDS and Aurora).
• Proven ability in backup, PITR, logical replication, high availability and recovery.
• Strong SQL and performance tuning skills, including index strategy.
• Experience diagnosing live production incidents and root-cause analysis.
• Good understanding of Linux and bash scripting.
• Experience in central government or regulated environments.
• Data modelling and data warehouse concepts (3NF, dimensional).
• Migration experience (e.g. Oracle/MySQL to PostgreSQL).

Responsibilities

• Investigate data incidents, establish root cause, and reconstruct events.
• Preserve and document evidence for security and compliance reviews.
• Advise on audit and logging design for future traceability.
• Support live incident response, including performance tuning and fault finding.
• Review backup, DR, replication, and archiving arrangements.
• Assist with database migrations and upgrades, including near-zero-downtime approaches.
• Write investigation reports and actionable recommendations.
• Advise developers on SQL, indexing and schema design.

Skills

PostgreSQL

AWS RDS

Security auditing

SQL performance tuning

Incident response

Linux

Bash scripting

Technical reporting

Stakeholder communication

Tools

Git

Docker

Kubernetes

Job description

Scrumconnect Ltd is seeking a Senior Forensic DBA to investigate and reconstruct incidents within critical databases for a UK public sector programme. You will collaborate with security, delivery and engineering teams to identify root causes, preserve evidence, and provide recommendations to prevent recurrence.

At SFIA Level 5 you will work independently, advise at senior levels, and set data logging and recovery standards across the programme.