Security Infrastructure Engineer – Job Ref:2147

Reports To

Infrastructure Manager

Responsible For

Responsible for the implementation, operation, maintenance, and continuous improvement of SSTL’s core IT infrastructure and project delivery with a particular focus on security, resilience, and compliance.

The Provision of 3rd line support to the Service Desk

Working closely with infrastructure, networking, application colleagues the Security Infrastructure Engineer will help ensure that security is embedded into the design and operation of infrastructure rather than treated as a separate activity.

Key Tasks

• Maintain infrastructure services to agreed availability, performance, and security standards.
• Implement secure configurations and system-hardening standards.
• Review and remediate infrastructure vulnerabilities.
• Support access control processes, including access reviews, privileged access checks, and enforcement of least privilege principles.
• Support endpoint/server security controls.
• Ensure appropriate logging and security monitoring is enabled and reviewed.
• Support encryption and certificate-management requirements.
• Review infrastructure against security standards and vendor recommendations.
• Identify unsupported and end-of-life systems and associated risks.
• Support security improvements across existing infrastructure.
• Oversee and engage in system upgrades, patching, configuration changes, and lifecycle-management activities.
• Monitor Security and compliance within the SSTL infrastructure capacity, performance, availability, and health.
• Diagnose and resolve security incidents and problems.
• Support backup, recovery, business continuity, and disaster-recovery arrangements.
• Participate in infrastructure projects, migrations, and technology refresh programmes.
• Manage the security of the infrastructure through appropriate change, configuration, and release-management processes.
• Participate in Cyber Security Incident Response Team (CSIRT) activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness.