About this role
Salary: £33,000 - 73,000 per year
Requirements: Educated to degree level or equivalent experience, preferably in computingCISSP, CCSP, or Security+ are an advantage but not necessary3–5+ years of experience in security analysis, infrastructure, DevSecOps, or a related roleHands-on experience securing cloud platforms such as AWS, Azure, or Google CloudExperience with identity and access management, SSO, MFA, RBAC, and privileged-access controlsExperience deploying and maintaining security technologies, including SIEM, EDR, vulnerability-management, secrets-management, and intrusion-detection toolsExperience with Linux administration, system hardening, patch management, and configuration managementExperience investigating security incidents, reviewing logs, identifying root causes, and implementing remediationStrong knowledge of networking, including TCP/IP, DNS, firewalls, VPNs, proxies, and load balancersProficiency with infrastructure-as-code and automation tools such as Terraform, Ansible, Python, or BashFamiliarity with containers and orchestration platforms such as Docker and KubernetesUnderstanding of security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or SOC 2Ability to conduct threat modelling, infrastructure risk assessments, and architecture reviewsStrong troubleshooting, documentation, and cross-functional communication skillsTeam player with strong communication skillsCompetent troubleshooting skillsAbility to articulate project deliverables and designsAbility to work under own initiative and in a busy environment Responsibilities: Implement, operate, maintain, and continuously improve our core IT infrastructure with a focus on security, resilience, and complianceProvide 3rd line support to the Service DeskWork closely with infrastructure, networking, and application colleagues to embed security into infrastructure design and operationMaintain infrastructure services to agreed availability, performance, and security standardsImplement secure configurations and system-hardening standardsReview and remediate infrastructure vulnerabilitiesSupport access control processes, including access reviews, privileged access checks, and enforcement of least privilege principlesSupport endpoint and server security controlsEnsure appropriate logging and security monitoring is enabled and reviewedSupport encryption and certificate-management requirementsReview infrastructure against security standards and vendor recommendationsIdentify unsupported and end-of-life systems and associated risksSupport security improvements across existing infrastructureOversee and engage in system upgrades, patching, configuration changes, and lifecycle-management activitiesMonitor security and compliance within our infrastructure capacity, performance, availability, and healthDiagnose and resolve security incidents and problemsSupport backup, recovery, business continuity, and disaster-recovery arrangementsParticipate in infrastructure projects, migrations, and technology refresh programmesManage the security of the infrastructure through appropriate change, configuration, and release-management processesParticipate in CSIRT activities, including incident investigation, containment, recovery, and continuous improvement of incident readiness Technologies: AWSAnsibleAzureBashCloudDevSecOpsDockerEmbeddedSupportKubernetesLinuxPythonRBACSecurityTCP/IPTerraform More:
We are SSTL, and this Security Infrastructure Engineer role reports to our Infrastructure Manager. You will work closely with our infrastructure, networking, and application colleagues to ensure security is embedded into the design and operation of infrastructure rather than treated as a separate activity. The role focuses on core IT infrastructure delivery with particular emphasis on security, resilience, compliance, and continuous improvement.
last updated 40 week of 2026