Infrastructure Engineer

We’re supporting delivery of secure platforms for defence/public sector programmes and need two hands-on Principal Infrastructure Engineers to act as domain technical authorities. This role operates in a highly controlled environment, with strong engineering ownership from requirements through design, build, integration and assurance.

Two focus areas (2 openings)

1. Privileged Access Management (PAM)

• Design and implement privileged access models across complex systems
• Integrate PAM tooling (e.g., CyberArk or similar) into enterprise platforms/services
• Secure credential storage, rotation and access control patterns
• Automate onboarding/offboarding and privileged workflows (API-driven where applicable)
• Support auditability and monitoring integration (e.g., SIEM/SOC alignment where in scope)

2. Public Key Infrastructure (PKI)

• PKI architecture/design and implementation across enterprise estates
• Certificate lifecycle management (issuance, renewal, revocation) at scale
• Integrate PKI with enterprise platforms (e.g., Active Directory), applications and devices
• Define/assure trust models and certificate usage patterns across systems
• HSM experience desirable (e.g., Thales or equivalent)

What you’ll do

• Lead secure-by-design platform delivery across on-prem/hybrid (and cloud where relevant)
• Capture and translate complex requirements into high/low-level designs and documentation
• Own delivery within work packages: planning, estimation, reporting, quality gates
• Mentor engineers and raise technical standards across the team
• Operate effectively in regulated/secure environments (including air-gapped where required)

Essential skills

• Strong Windows and Linux experience
• Virtualisation fundamentals (VMware and/or Hyper-V)
• Networking fundamentals (TCP/IP, DNS, DHCP, firewalls)
• Automation/scripting (PowerShell, Bash, Python, Ansible, Terraform)
• Knowledge of security controls and accreditation requirements
• Experience across the systems engineering lifecycle in controlled environments

Security clearance

DV clearance will be required for this role. Candidates must already hold DV.