Senior Infrastructure Engineer

Rail Safety and Standards Board Limited; Greater London; Hybrid; GBP 45,000 - 70,000; Full time

Job summary

An established industry player is seeking a Senior Infrastructure Engineer to oversee IT infrastructure and security. This role involves managing both cloud and on-premise systems, ensuring compliance with Cyber Security standards, and providing high-level technical support. You'll work collaboratively with various teams to enhance system security and reliability while mentoring colleagues. The company values diversity and offers a competitive benefits package, including flexible working arrangements, making it an excellent opportunity for those looking to grow in a supportive environment.

Benefits

30 days annual leave

Private medical cover

Dental cover

Performance-related bonus

Pension scheme

Season ticket loan

Travel subsidy

Cycle to work scheme

Volunteer leave

Holiday buy and sell scheme

Qualifications

• Experience in managing Windows Server and SQL Server environments.
• Knowledge of security audits and vulnerability assessments.
• Proficient in endpoint security and ITIL best practices.

Responsibilities

• Manage and support IT infrastructure and security for systems.
• Monitor and report on cloud and on-premise infrastructure.
• Ensure compliance with Cyber Security standards.

Skills

Windows Server Management

Active Directory

SQL Server

Azure IaaS/PaaS

Endpoint Security

PowerShell

Vulnerability Assessments

Incident Management

Customer Service

Education

Computer Science Degree or Certifications

CompTIA Certifications

Tools

MS InTune

Cyber Essentials/Plus

SIEM

Job description

Overview

As Senior Infrastructure Engineer you will manage and participate in the delivery and support of IT infrastructure and IT infrastructure security for new and existing systems and solutions.

You will support team members in the provision of 2nd and 3rd line technical IM&T support (Desktop, Software, Infrastructure and Telephony) maintaining and delivering a high degree of customer service for all Information Management and Technology (IM&T) support queries.

Responsibilities

• Proactively respond to security vulnerabilities identified by monitoring tools, performing remediation tasks
• Responsible for monitoring and reporting for on-premise and cloud infrastructure systems, for the early identification of issues
• Ensure RSSB infrastructure is secure and adheres to Cyber Security standards
• Act as the escalation point for technical issues
• Responsible for the administration and operation of the RSSB cloud and onsite physical infrastructure environments
• Management and oversight of the network infrastructure, including network switches, routers, firewalls and virtualised environment.
• Manage internal and external stakeholders and supplier relationships
• Analyse and make recommendations to improve infrastructure, network, and reliability of systems, threats and vulnerabilities to improve security posture of IT systems
• Apply IT best practice to achieve effective management of change (Requests for Change) whilst mitigating risk of system failures / outages
• Responsible for system and data backups, restores and DR tests, taking ownership of data integrity enabling DR processes and business continuity
• Maintain governance over endpoint device management solutions (e.g. Intune) where they have an impact on security of the IT environment
• Work with the wider IM&T Team, business, internal and external business partners to ensure that security is factored into the evaluation, selection, installation, delivery and configuration process of solutions and systems
• Plan, manage and communicate infrastructure change with IT Operation Team Leads, Information Security manager and wider IM&T / business departments
• Mentor and coach colleagues and provide peer to peer advice, as required

Qualifications

• Computer science, Microsoft, CompTIA or related field qualifications / certifications or relevant demonstrable experience
• Proficient in Windows Server 2016/2019/2022 management to include Active Directory (AD) and Group Policy (GPO) and SQL Server
• Deploy patches and software applications and compliance policy using InTune
• Knowledge of administering and supporting Entra (Azure AD), Azure IaaS/PaaS
• Management of backup/recovery solutions
• Experience with operating system hardening, vulnerability assessments, security audits, penetration testing, intrusion prevention systems and other security control systems for example PAM, SIEM etc.
• Experience with endpoint security, content filtering, vulnerability scanning and anti-malware
• Knowledge of at least one scripting language (e.g. PowerShell)
• MS InTune device management (mobile and Windows 10 /11 OS)
• Demonstrable knowledge of common vulnerabilities and exploitation techniques would be beneficial
• Familiarity with Cyber Essentials/Plus or ISO 27001 and ITIL best practice - Incident, Problem and Change management would be beneficial
• Communicate effectively and share thoughts and ideas through methods appropriate to the audience.
• Adapt and respond effectively when embracing new opportunities, change and in navigating uncertainty.
• Actively contribute as part of a team and work towards achieving team goals and outcomes.
• Take responsibility and demonstrate accountability in completing tasks and achieving objectives, actively seeking to resolve problems and identify opportunities.
• Committed to customer service and placing customer satisfaction at the heart of our success to ensure we deliver against our shared goals.
• Can work collaboratively within an evolving industry, gaining stakeholder confidence through understanding their goals and motivations and demonstrating credibility as an expert.
• Make timely, informed decisions taking account of the benefits and constraints involved.

We are committed to investing in our staff and offer formal and informal learning opportunities for development.

We valuediversityand equal opportunities in employment and are committed to creating a workplace which is inclusive to everyone. As a member of theDisability Confident Scheme, we encourage candidates with disabilities who meet the minimum criteria,to apply for our jobs.If you have applied under the Disability Confident Scheme, please let us know in advance by emailing [e-mail] Find out more about Diversity and Inclusion at RSSB: Rail Safety and Standards Board Careers - VERCIDA

If you require anyreasonable adjustmentswith respect to our selection process including information in an alternative format, please contact us at [e-mail]

We understand the importance ofwork-life balanceand we offer our staff the flexibility to work within our core hours and the option to vary their location between both the office and home. If you are looking for further flexibility, speak to us at interview stage so that we can consider your request.

We value our staff and we offer a competitivebenefitspackage to ensure our staff can achieve their best throughout their journey with us. This includes 30 days annual leave (plus bank holidays); a holiday buy and sell scheme; private medical and dental cover; a season ticket loan and travel subsidy; access to a cycle to work scheme; volunteer leave; a performance related bonus and pension.