Keystone Group
Infrastructure Engineer

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About The Role
We're looking for an Infrastructure Engineer to help us manage, secure, and modernise our on-premise and cloud infrastructure. You'll work across a hybrid estate — supporting existing on-premise systems while playing an active role in our ongoing migration to modern cloud and hybrid platforms, and in the day-to-day administration of Microsoft Entra ID. This is a hands-on engineering role with genuine scope to shape how infrastructure is built and secured across the group.
What You’ll Be Doing
On-Premise Infrastructure
- Administer and maintain our server estate (physical and virtualised), including patching, capacity management, and lifecycle planning
- Support and help decommission legacy/EOL systems (servers, SQL Server instances, and applications) as part of the group's estate rationalisation programme
- Manage Active Directory across multiple domains, supporting ongoing consolidation and identity modernisation work
- Administer core infrastructure services: DNS, DHCP, file/print, backup and disaster recovery, VOIP Telephony
- Support the group's migration from VMware vSphere7 to vSphere8/9 or to Hyper-V/Azure, including build, testing, and cutover activity
Entra ID & Cloud Identity Administration
- Own day-to-day administration of Microsoft Entra ID: user and group lifecycle, licensing, app registrations, and enterprise applications
- Support Entra ID tenant consolidation across all group brands, including domain and UPN/primary SMTP alignment
- Configure and maintain Conditional Access policies, MFA enforcement, and password policy in line with NCSC guidance
- Administer Privileged Identity Management (PIM) and just-in-time (JIT) access for privileged roles
- Support hybrid identity sync (AD to Entra ID) and troubleshoot synchronisation issues
Cloud & Security
- Support Microsoft 365 administration alongside Entra ID (Exchange Online, SharePoint, Teams)
- Assist with Azure infrastructure (App Services, Functions, storage, networking) supporting group applications and data platforms
- Contribute to the group's Cyber Essentials Plus programme, including remediation of findings and ongoing control maintenance
- Operate and tune endpoint and network security tooling (e.g. Microsoft Defender, Sophos, ThreatLocker, Ivanti Patch Management, SIEM alerting)
- Support security patching, vulnerability remediation, and hardening across both on-premise and cloud infrastructure
- Participate in incident response and root-cause investigation for infrastructure and security incidents
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
General
- Produce and maintain clear documentation for infrastructure, configurations, and standard operating procedures
- Work within change management (CAB) processes for planned infrastructure changes
- Provide 2nd/3rd-line escalation support and mentor junior team members where required
- Collaborate with the wider IT team on projects spanning infrastructure, security, and identity
You will also demonstrate:
- Strong problem-solving skills, with a structured and analytical approach to diagnosing and resolving issues.
- A proactive mindset, with the confidence to identify improvements, challenge existing ways of working and drive solutions through to completion.
- A strong security mindset and understanding of the importance of maintaining secure, resilient and well-managed infrastructure.
- Excellent communication skills, with the ability to explain technical issues and solutions clearly to both technical and non-technical stakeholders.
- The ability to work effectively in a changing environment, managing multiple priorities while maintaining a high standard of delivery.
- A collaborative approach, with a willingness to share knowledge, support colleagues and contribute to the wider IT team and Group objectives.
What We’re Looking For
- Educated to Degree Level with a Minimum 5 years of experience working in a similar capacity as an Infrastructure Engineer or have a minimum of 10 years’ experience working in an IT Infrastructure role
- Proven experience administering Windows Server environments and Active Directory at scale
- Hands-on experience administering Microsoft Entra ID (Azure AD) — users, groups, Conditional Access, and app registrations
- Hands-on experience with virtualisation platforms (VMware and/or Hyper-V)
- Practical understanding of core networking (DNS, DHCP, VLANs, firewalls)
- Some exposure to Azure or another public cloud platform (IaaS/PaaS fundamentals)
- Working knowledge of endpoint security, patch management, and vulnerability remediation
- Strong troubleshooting skills and a methodical approach to problem-solving
- Clear communicator, comfortable working with both technical peers and non-technical stakeholders


Get help with your application
Your very own career expert that helps elevate your application to the next level.
What We Offer
- Opportunities for professional development and career progression
- A supportive, values-driven and inclusive working environment
- Competitive salary and benefits package
- 32 days annual leave, increasing with service
- Pension
- Life Assurance
- Healthcare Cashback Plan
- Enhanced Family Friendly policies
- Additional employee benefits including access to our Cycle to Work Scheme, Employee Discount Scheme, Employee Recognition awards, Employee Assistance Programme.
A Bit About Us
For more than three decades, the Keystone Group has grown to become one of the UK and Ireland’s largest family-owned construction product manufacturers. Driven by a relentless focus on innovation and customer excellence, the Group employs over 2,000 employees across 28 sites, supplying cutting-edge building solutions to growing markets in the UK & Ireland, Europe, Australia and North America. Its portfolio includes market-leading brands in the steel, light & environmental and timber sectors.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London