Security & Infrastructure Engineer – Contract

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Design, construct, integrate, and validate infrastructure components within a secure Proof of Concept environment.

• Implement and evaluate Zero Trust security controls across identity, devices, networks, applications, workloads, data, and automation platforms.

• Assist in the implementation and validation of Federated Mission Networking (FMN) services and interoperability requirements.

• Evaluate infrastructure and security services against Zero Trust frameworks and FMN standards.

• Provide compliance evidence and deliver technical recommendations.

• Collaborate with engineers, architects, and security specialists to integrate Secure by Design and Security by Default principles throughout the delivery lifecycle.

• Develop and maintain technical documentation, including designs, configuration baselines, build guides, operational procedures, and test evidence.

• Support technical assurance activities, vulnerability assessments, risk management, and security compliance reviews.

• Work with vendors to assess, deploy, and validate technologies according to functional, interoperability, and security requirements.

• Create automation and scripting solutions to enhance deployment consistency, repeatability, and operational efficiency.

• Assist with demonstrations, technical experiments, onboarding activities, and knowledge transfer across the broader team.

• Collaborate with a multidisciplinary team to advance the Royal Navy's digital transformation objectives.

⛳️ Requirements

• Proven experience in designing, building, or supporting infrastructure solutions within Defence, government, or other highly regulated settings.

• Experience delivering infrastructure services in secure or assured environments.

• Strong knowledge of Secure by Design, Security by Default, and defence-in-depth principles.

• Capability to produce technical documentation and evidence supporting design assurance, security accreditation, and compliance activities.

• Practical experience applying Zero Trust Architecture principles within enterprise or secure environments.

• Understanding of Zero Trust domains, which include identity, devices, networks, applications, workloads, data, analytics, and automation.

• Experience with identity federation, trust relationships, and certificate management.

• Extensive experience with Windows Server 2022/2025, Active Directory, Group Policy, and Windows 11 administration.

• Experience in deploying and supporting Hyper-V and virtualized infrastructure environments.

• Familiarity with Public Key Infrastructure (PKI), DNS, and DNSSEC.

• Experience managing patching and updates across Windows and Linux platforms.

• Knowledge of privileged access controls, Just-in-Time (JIT) administration, Just Enough Administration (JEA), Multi-Factor Authentication (MFA), and policy-driven access management.

• Experience implementing and evaluating security baselines using CIS Benchmarks, DISA STIGs, and Microsoft security hardening guidance.

• Understanding of Endpoint Detection and Response (EDR/XDR) technologies.

• Experience integrating SIEM platforms, centralized logging, telemetry, and security monitoring solutions.

• Knowledge of vulnerability management, remediation processes, and configuration compliance.

• Applicants must be eligible to obtain and maintain UK security clearance.

• Applicants should be comfortable working within secure and Defence-focused environments.

• Desirable: Experience working with FMN standards, NATO interoperability requirements, or Defence networking architectures.

• Desirable: Knowledge of Zero Trust reference architectures utilized within Defence or Government organizations.

• Desirable: Experience with software-defined infrastructure, micro-segmentation, and policy-based security controls.

• Desirable: Familiarity with security orchestration and automated response technologies.

• Desirable: Experience with Ubuntu Linux, Ansible, and Python.

• Desirable: Exposure to hybrid cloud platforms, VMware, Docker, and Kubernetes.

• Desirable: Knowledge of enterprise technologies from Microsoft, Arista Networks, Palo Alto Networks, or similar.

🏝️ Benefits

• Contract role.

• Opportunity to contribute to the Royal Navy's digital transformation initiatives.

• Opportunity to work at the cutting edge of secure infrastructure engineering.

• Opportunity to engage in highly secure and mission-critical environments.