Senior Infrastructure Engineer

Marks Sattin; Cardiff; On-site; GBP 60,000 - 90,000; Full time

Job summary

Marks Sattin is seeking a Secure Infrastructure / Platform Engineer to design, build and run secure, resilient infrastructure and platform services.

The role combines hands-on engineering with a security-first mindset and a continuous improvement approach to protect services and data, while enabling business-critical systems across cloud environments.

Qualifications

• Experience designing and running secure cloud infrastructure.
• Strong knowledge of IAM, encryption and vulnerability management.
• Ability to implement secure baselines and automate security controls.

Responsibilities

• Deliver and maintain secure, resilient infrastructure and platform services.
• Champion security best practices across the stack.
• Drive automation and continuous improvement for security and operations.
• Collaborate with engineering teams to enforce policy-compliant designs.
• Guide IAM, infrastructure hardening, monitoring and incident response.

Skills

Security principles

Tools

AWS

Terraform

Docker

Job description

An organisation delivering critical digital services is looking for a Secure Infrastructure / Platform Engineer to help design, build and run secure, resilient infrastructure and platform services. This role suits someone who combines strong hands-on engineering with a security-first mindset and a continuous improvement approach.

What you’ll do

• Deliver and maintain secure, resilient infrastructure and platform services supporting business-critical systems.
• Champion security best practices to protect the confidentiality, integrity and availability of services and data.
• Drive automation and continuous improvement, improving security, resilience and operational effectiveness.
• Build, administer, support and maintain secure and compliant solutions aligned to policy, standards and industry best practice.
• Partner across engineering and delivery teams, providing expert guidance on:
• Secure environment design and configuration management
• Identity & access management (IAM)
• Infrastructure hardening and secure baselining
• Vulnerability management and remediation
• Monitoring, logging and operational readiness
• Incident response and security event handling
• Help ensure critical services remain available and resilient in the face of evolving cyber threats.

Essential skills / experience

• AWS (secure cloud infrastructure and services)
• Terraform (infrastructure as code)
• Docker (container build/run security considerations)
• Strong understanding of security principles and secure-by-design approaches