Job Purpose
As an IT Infrastructure Engineer, you'll provide senior technical support and engineering across on‑prem and support the Cloud Engineer with cloud infrastructure, acting as the escalation point for complex incidents and as a delivery engineer for infrastructure improvements. The role ensures availability, performance, security, resilience and compliance of core platforms, with strong operational discipline (ITIL) and evidence-based change control suitable for regulated financial services. You'll also lead infrastructure projects including initial investigations, implementation and roll out.
Key Responsibilities
3rd Line Support & Incident Management
* Act as the technical escalation point for complex infrastructure issues from 1st/2nd line and service desk.
* Lead or support major incident response, including triage, containment, root cause analysis, and service restoration.
* Produce high-quality RCA/post-incident reports with preventative actions and measurable follow-ups.
* Maintain and enhance monitoring/alerting to improve early detection and reduce repeat incidents.
Core Infrastructure Engineering
* Design, build, implement and support:
* Windows Server (AD DS, DNS, DHCP, Group Policy), file/print and core services
* Virtualisation platforms (VMware/Hyper-V), resource optimisation and capacity planning
* Backup & recovery (e.g., Veeam), restore testing and data retention controls
* Storage (SAN/NAS), performance tuning and lifecycle management
* Cloud services (Microsoft Azure / M365) where applicable—identity, compute, networking, hybrid services
* Deliver platform upgrades, patching, and lifecycle refresh activities to maintain vendor support and security posture.
Security, Compliance & Control
* Implement and operate infrastructure controls aligned to:
* Least privilege, privileged access management (PAM/PIM) and secure admin practices
* Hardening standards, vulnerability remediation, secure configuration management
* Audit evidence for changes, access, patching and security events
* Collaborate with 3rd party SOC to support:
* Security incident investigations
* Control testing, audits, regulatory submissions where needed (e.g., evidence packs)
Change, Release & Problem Management
* Own/execute infrastructure changes through formal change control:
* Risk assessment, implementation plans, rollback plans, and validation checks
* Proactively identify recurring issues and deliver problem management fixes (permanent remediation over “workarounds”).
* Contribute to service improvement plans and operational runbooks.
Operational Resilience & Business Continuity
* Contribute to and test:
* DR plans, failover procedures, restore processes
* Resilience patterns (redundancy, clustering, geo resilience where appropriate)
* Support operational resilience exercises (scenario testing) and ensure actions are tracked to closure.
Automation, Observability & Documentation
* Automate repeatable tasks using PowerShell and/or infrastructure-as-code approaches where relevant.
* Enhance observability: logging, metrics, alert thresholds, and dashboards.
* Maintain high-quality documentation: build docs, diagrams, SOPs/runbooks.
Collaboration & Stakeholder Management
* Work closely with:
* Service Desk, Apps/DevOps, Network/Security, Vendor support, and business stakeholders
* Provide technical input to solution designs, risk discussions, and project delivery.
* Mentor 1st/2nd line engineers; raise team capability through knowledge transfer.
Problem solving
* Investigate problems, understand the level of a problem (for example, strategic, tactical, operational). Contribute to the implementation of remedies and preventative measures.
Technical skills and experience
* Experience acting as technical escalation point in small technical teams to deliver a high standard and quality of work.
* Working knowledge of configuration and administration of hybrid Azure estate including IaaS and PaaS solutions.
* Proficient in Microsoft Windows server and desktop operating systems.
* Configuration and administration experience of WSUS, MDT and similar management tools.
* In-depth knowledge and skills in configuring and managing VMware vSphere and experience with Hyper-V solutions.
* Strong Microsoft Office 365 administration skills, including hybrid Azure deployments.
* Extensive hands-on Microsoft Windows network skills including Microsoft AD, Group Policy management, security, DNS, DHCP, DFS, RDP and other Windows services.
* The ability to understand complex WAN and LAN topologies, MPLS, Ethernet extensions etc. Cisco/HP switch, LAN/WAN/wireless configurations.
* Experience managing Fortigate Firewall configuration & network security solutions.
* Administration experience of backup & disaster recovery tools
* Experienced in commonly used anti-virus software packages, particularly Sophos AV suite.
* Thorough understanding of data security principals and best practices, ideally experienced working in a regulated environment, managing commonly used tools such as web security gateways, automated vulnerability assessments, VPNs, and endpoint protection