Senior Infrastructure Engineer

Broaden; West of England; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Broaden in Bristol is seeking a Senior Infra & Integration Engineer to own and secure cloud infrastructure, APIs, and automation across policy, claims, and data platforms. The role is hands-on and senior, reporting to Head of Engineering/CTO, with hybrid Bristol-based work and strong ownership expectations.

You will design, build, and operate secure APIs, workflows, and system integrations, lead incident response, and drive automation to reduce manual hand-offs while managing production

Qualifications

• 5+ years hands-on experience in platform, cloud, infrastructure, integration, or software engineering.
• Experience in Insurance/Fintech or regulated environments.
• Azure, Security, Identity, or DevOps certifications; ITIL; Cyber Essentials.

Responsibilities

• Own operations of core cloud infrastructure and integrations with partners and SaaS.
• Design, build, and support secure APIs, webhooks, and system connections.
• Lead incident response, risk-based RCA, and corrective actions.
• Maintain documentation, governance, and SaaS inventories.

Skills

Azure / M365

API integration

CI/CD

Git / DevOps

PowerShell

Python

Security controls

Incident response

Scripting

Networking

Education

Engineering/CS degree

ITIL Certification

Cyber Essentials

Tools

Git

Azure DevOps

GitHub

NinjaOne

Bitdefender

TitanHQ

Entra ID

M365 administration

Job description

Senior Infra & Integration Engineer | Cloud Infrastructure, APIs & Automation | Scale-Up Insurance Platform | Bristol (Hybrid) | £70K - £90K

About the Company

Our client's technology estate connects core policy, claims, payment, data, and partner platforms so products and claims can operate efficiently at scale. The business operates with clear controls and a lean, collaborative structure spanning Engineering, Data, Change, QA, and Business teams.

Operating in a high-growth environment, they prioritise security, reliability, and automated connectivity. They champion entrepreneurial problem-solving, precision, and zero tolerance for technical debt. They are anti-bureaucracy but pro-governance - translating non-technical business needs into secure, practical solutions, fixing root causes, and automating manual work without adding unnecessary corporate layers.

If you are an ambitious engineer who thrives on complete technical ownership, reducing manual hand-offs, and driving platform reliability, you will find a massive opportunity here.

About the Role

Reporting directly to the Head of Engineering / CTO, this is a hands-on, senior-level engineering role. You will act as a primary technical anchor responsible for keeping the core cloud infrastructure secure, dependable, and connected across suppliers, distribution partners, and SaaS ecosystems.

This is a senior hands-on ownership role, not a primary service desk or administrative oversight position. Working alongside the IT Configuration Analyst, Data, Change, and QA teams, you will bridge business requirements with practical execution. Your core mission is to design, build, and support secure APIs, webhooks, and system integrations, lead cloud and identity security controls, manage production incidents, and prevent uncontrolled production changes across the entire tech estate.

Key Responsibilities

• Own the effective operation of M365, Entra ID, Intune, NinjaOne, Bitdefender, TitanHQ, credential management, backups, devices, and core SaaS controls; set standards and delegate routine administration.
• Design, build, configure, and support secure APIs, webhooks, SFTP feeds, and system connections across core policy, claims, payment, and data platforms, as well as external partners to eliminate re-keying and manual hand-offs.
• Implement access, patching, vulnerability, encryption, and monitoring controls; lead technical incident response, coordinate suppliers, and drive root-cause analysis (RCA) and corrective actions.
• Utilise source control (Git), peer reviews, CI/CD, and Dev/Test/Prod environments; prepare release notes, test evidence, and rollback plans to ensure zero unauthorised production changes.
• Maintain system architecture documentation, technical-debt backlogs, and SaaS inventories; provide technical oversight of third-party suppliers and mentor/coach the IT Configuration Analyst.
• Strong hands-on command of Azure/M365, Entra ID, Intune, endpoint/security tooling, networking (DNS/VPN), APIs (REST/webhooks/SFTP), and production monitoring.
• Solid working capability in scripting or software development (e.g., PowerShell, Python, C#, or TypeScript) and version control/CI/CD workflows (Git, Azure DevOps, GitHub).
• Exceptional capability to explain complex technical issues in plain language, prioritize risk and commercial value, and work within change management frameworks.
• Entrepreneurial, precise, and intolerant of technical debt—focused on fixing root causes, standardising environments, and automating repetitive tasks.

Qualifications & Experience

• At least 5 years of hands-on experience in platform, cloud, infrastructure, integration, or software engineering, with direct responsibility for live services, integrations, security controls, and incident resolution.
• Proven track record operating comfortably in a small, fast-scaling team.
• Experience in Insurance, Fintech, MGAs, or another regulated environment; exposure to embedded products, cloud data platforms, key vaults, or specialty insurance software ecosystems.
• Relevant Microsoft Azure, Security, Identity, or DevOps certifications; ITIL; Cyber Essentials experience; or a relevant engineering/computer science qualification.
• Employment Type: Full-time, Permanent
• Location: Hybrid / Office-based in Bristol
• Reporting Line: Head of Engineering / CTO