Keystone Group
Infrastructure Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About The Role
We're looking for an Infrastructure Engineer to help us manage, secure, and modernise our on-premise and cloud infrastructure. You'll work across a hybrid estate — supporting existing on-premise systems while playing an active role in our ongoing migration to modern cloud and hybrid platforms, and in the day-to-day administration of Microsoft Entra ID. This is a hands-on engineering role with genuine scope to shape how infrastructure is built and secured across the Group.
What You’ll Be Doing
On-Premise Infrastructure
- Administer and maintain our server estate (physical and virtualised), including patching, capacity management, and lifecycle planning.
- Support and help decommission legacy/EOL systems (servers, SQL Server instances, and applications) as part of the Group's estate rationalisation programme.
- Manage Active Directory across multiple domains, supporting ongoing consolidation and identity modernisation work.
- Administer core infrastructure services: DNS, DHCP, file/print, backup and disaster recovery, VOIP Telephony.
- Support the Group's migration from VMware vSphere 7 to vSphere 8/9 or to Hyper-V/Azure, including build, testing, and cutover activity.
Entra ID & Cloud Identity Administration
- Own day-to-day administration of Microsoft Entra ID: user and group lifecycle, licensing, app registrations, and enterprise applications.
- Support Entra ID tenant consolidation across all Group brands, including domain and UPN/primary SMTP alignment.
- Configure and maintain Conditional Access policies, MFA enforcement, and password policy in line with NCSC guidance.
- Administer Privileged Identity Management (PIM) and just-in-time (JIT) access for privileged roles.
- Support hybrid identity sync (AD to Entra ID) and troubleshoot synchronisation issues.
Cloud & Security
- Support Microsoft 365 administration alongside Entra ID (Exchange Online, SharePoint, Teams).
- Assist with Azure infrastructure (App Services, Functions, storage, networking) supporting Group applications and data platforms.
- Contribute to the Group's Cyber Essentials Plus programme, including remediation of findings and ongoing control maintenance.
- Operate and tune endpoint and network security tooling (e.g. Microsoft Defender, Sophos, ThreatLocker, Ivanti Patch Management, SIEM alerting).
- Support security patching, vulnerability remediation, and hardening across both on-premise and cloud infrastructure.
- Participate in incident response and root-cause investigation for infrastructure and security incidents.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
General
- Produce and maintain clear documentation for infrastructure, configurations, and standard operating procedures.
- Work within change management (CAB) processes for planned infrastructure changes.
- Provide 2nd/3rd-line escalation support and mentor junior team members where required.
- Collaborate with the wider IT team on projects spanning infrastructure, security, and identity.
What We’re Looking For
Essential
- Educated to Degree Level with a minimum of 5 years of experience working in a similar capacity as an Infrastructure Engineer, or a minimum of 10 years’ experience working in an IT Infrastructure role.
- Proven experience administering Windows Server environments and Active Directory at scale.
- Hands-on experience administering Microsoft Entra ID (Azure AD) — users, groups, Conditional Access, and app registrations.
- Hands-on experience with virtualisation platforms (VMware and/or Hyper-V).
- Practical understanding of core networking (DNS, DHCP, VLANs, firewalls).
- Some exposure to Azure or another public cloud platform (IaaS/PaaS fundamentals).
- Working knowledge of endpoint security, patch management, and vulnerability remediation.
- Strong troubleshooting skills and a methodical approach to problem-solving.
- Clear communicator, comfortable working with both technical peers and non-technical stakeholders.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- Experience with VMware, Hyper-V or Azure migrations, including performing VMware upgrades.
- Exposure to Cyber Essentials / Cyber Essentials Plus or similar security frameworks.
- Familiarity with SIEM tooling, Privileged Identity Management (PIM/JIT), or hybrid identity sync tooling (Entra Connect).
- Scripting ability (PowerShell / Microsoft Graph API) for automation of routine tasks.
- Experience operating in a multi-brand, multi-domain, or multi-site organisation.
- Relevant certifications (e.g. Microsoft Certified: Identity and Access Administrator, Azure Administrator, Windows Server, Security+).
What We Offer
- Opportunities for professional development and career progression.
- A supportive, values-driven and inclusive working environment.
- Competitive salary and benefits package.
- 32 days annual leave, increasing with service.
- Pension.
- Life Assurance.
- Healthcare Cashback Plan.
- Enhanced Family Friendly policies.
- Additional employee benefits including access to our Cycle to Work Scheme, Employee Discount Scheme, Employee Recognition Awards, and Employee Assistance Programme.
A Bit About Us
For more than three decades, the Keystone Group has grown to become one of the UK and Ireland’s largest family-owned construction product manufacturers. Driven by a relentless focus on innovation and customer excellence, the Group employs over 2,000 employees across 28 sites, supplying cutting-edge building solutions to growing markets in the UK & Ireland, Europe, Australia and North America. Its portfolio includes market-leading brands in the steel, light & environmental and timber sectors.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London