About this role
Salary: £? - ? per year
Requirements
- Central government or NHS experience (essential)
- Strong track record of remediating vulnerabilities in live production environments at volume and to deadlines
- Deep Linux expertise (RHEL or similar), including patching, kernel and service upgrades, and hardening
- Hands-on AWS experience fixing misconfigurations in IAM, security groups, S3, encryption, and logging
- Ability to interpret scanner and penetration test output, including Qualys, Tenable, AWS Inspector, and container image scanners
- Experience patching and rebuilding containers and base images, and updating dependencies with development teams
- Experience delivering changes with Terraform, Ansible, and CI/CD tools such as GitLab CI or Jenkins
- Experience working within formal change control (CAB), including emergency changes with tested rollback
- Bash and Python scripting skills, plus experience working with RESTful APIs
Responsibilities
- Work through the vulnerability backlog, fixing findings from scanners, penetration tests, IT health checks, and audits
- Patch and upgrade operating systems, packages, middleware, container base images, and application dependencies
- Fix insecure cloud configurations, including over-permissive IAM, open security groups, and unencrypted resources
- Keep legacy data stores patched and contained, and support their removal as migrations are completed
- Put compensating controls in place when fixes cannot be applied immediately, and document the risk
- Respond quickly to critical CVEs, zero-days, NHS England cyber alerts, and vendor advisories
- Provide hands-on support for security and service incidents, including containment, emergency changes, and recovery
- Test fixes in lower environments and plan rollback for every production change
- Deliver changes through formal change control, including emergency changes
- Use and extend Terraform, Ansible, and CI/CD pipelines to apply fixes consistently
- Re-scan to verify fixes, update tickets and the risk register, and report progress and blockers
- Lead and coordinate a small team of engineers, allocate work, and review fixes
Technologies
- AWS
- Ansible
- Bash
- CI/CD
- Cloud
- GitLab
- IAM
- Support
- Jenkins
- Linux
- Python
- RHEL
- Security
- Terraform
- DevOps
More
Were looking for a hands-on Infrastructure Engineer to join NHS England and help reduce a significant vulnerability backlog across national, mission-critical services. New findings arrive weekly from scanners, penetration tests, audits, and security advisories; the role focuses on resolving them safely in production, verifying closure, and keeping live services running. The position is mostly remote, with occasional travel to Leeds. The rate is £560 per day, Inside IR35, and the contract runs until November 2027.
last updated 46 week of 2026