Senior Infrastructure Engineer

Senior Infrastructure Engineer

Cardiff, UK

PMUK's Information Systems department is looking for an experienced and strategic Senior Infrastructure & Microsoft 365 Engineer to take ownership of PMUK's core IT services and enterprise infrastructure. This is a hands‑on technical leadership role combining deep expertise in Microsoft 365, Azure, security, and infrastructure with responsibility for strategy, governance, and service delivery. The position plays a key role in modernising the workplace, enhancing security posture, and driving automation and data governance across the organisation.

• Act as the technical lead for infrastructure and Microsoft 365 services.
• Define and deliver the infrastructure and modern workplace strategy.
• Provide mentorship and escalation support to technical teams.
• Ensure systems are secure, resilient, scalable, and future‑ready.

• Own and manage the Microsoft 365 tenant (Global Administrator level).
• Administer core services, including:
  • Microsoft Entra  (Azure AD) – identity and access management.
  • Microsoft Defender Suite – Endpoint, Identity, Office 365, Cloud Apps.
  • Microsoft Purview – data governance, DLP, retention, and eDiscovery.
• Implement and maintain security, compliance, and governance controls.
• Manage Conditional Access, MFA, and privileged access strategies.

• Lead development and governance of Power Automate workflows and Power Apps solutions.
• Drive adoption of low‑code automation across the business.
• Implement standards, controls, and scalable automation frameworks.

• Lead migration from SharePoint on‑premise to SharePoint Online.
• Define migration strategies, including content rationalisation and metadata and taxonomy design.
• Promote modern collaboration tools, including Microsoft Teams, One Drive, and SharePoint Online.

• Establish and maintain data governance frameworks.
• Implement metadata tagging and classification and data lifecycle and retention policies.
• Ensure compliance with GDPR/Data Protection requirements.
• Support data audits, DPIAs, and data sharing agreements.

• Network Infrastructure: LAN/WAN, switching, firewalls, and connectivity.
• Server & Cloud Platforms:
  Hybrid environments (on‑premise and Azure), and virtualisation (Hyper‑V).
• End User & Device Management:
  Microsoft Intune/Endpoint Manager, Autopilot and device lifecycle management.
• Telephony & Communications:
  VoIP and unified communications platforms.
• Physical Security Systems: CCTV and access control systems.

• Design and enhance enterprise security architecture.
• Contribute to Zero Trust strategy and implementation.
• Lead improvements across Microsoft Sentinel, Microsoft Defender ecosystem, and identity and access controls.
• Support security reviews, audits, and risk mitigation.

• Provide 3rd line support and escalation.
• Oversee system upgrades, patching, and maintenance.
• Maintain clear and accurate technical documentation.
• Ensure successful transition of projects into operational support.

• Lead full lifecycle delivery:
  Discovery → Design → Build → Test → Deploy.
• Ensure quality, risk management, and timely delivery.
• Drive standardisation, automation (e.g. Power Shell), and continuous service improvement.

• Act as a visible technical leader across IT and the business.
• Mentor and develop team members.
• Work closely with stakeholders to align IT with business needs.
• Promote knowledge sharing and continuous learning.

• Degree in Computer Science or a related field (or equivalent experience).
• Proven experience in a senior/lead infrastructure or M365 role.
• Strong expertise in Microsoft 365 (including Defender & Purview) and Microsoft Entra  (Azure AD).
• Hands‑on experience with Power Platform (Power Apps & Power Automate) and SharePoint migrations (on‑prem → online).
• Strong knowledge of hybrid infrastructure (Azure + on‑prem), networking and firewalls, virtualisation (Hyper‑V), and endpoint…