Infrastructure Engineer

About The Role

We're looking for an Infrastructure Engineer to help us manage, secure, and modernise our on-premise and cloud infrastructure. You'll work across a hybrid estate - supporting existing on-premise systems while playing an active role in our ongoing migration to modern cloud and hybrid platforms, and in the day-to-day administration of Microsoft Entra  is a hands-on engineering role with genuine scope to shape how infrastructure is built and secured across the group.

• Administer and maintain our server estate (physical and virtualised), including patching, capacity management, and lifecycle planning
• Support and help decommission legacy/EOL systems (servers, SQL Server instances, and applications) as part of the group's estate rationalisation programme
• Manage Active Directory across multiple domains, supporting ongoing consolidation and identity modernisation work
• Administer core infrastructure services: DNS, DHCP, file/print, backup and disaster recovery, VOIP Telephony
• Support the group's migration from VMware vSphere7 to vSphere8/9 or to Hyper-V/Azure, including build, testing, and cutover activity

• Own day-to-day administration of Microsoft Entra  and group lifecycle, licensing, app registrations, and enterprise applications
• Support Entra t consolidation across all group brands, including domain and UPN/primary SMTP alignment
• Configure and maintain Conditional Access policies, MFA enforcement, and password policy in line with NCSC guidance
• Administer Privileged Identity Management (PIM) and just-in-time (JIT) access for privileged roles
• Support hybrid identity sync (AD to Entra ) and troubleshoot synchronisation issues

• Support Microsoft 365 administration alongside Entra  (Exchange Online, SharePoint, Teams)
• Assist with Azure infrastructure (App Services, Functions, storage, networking) supporting group applications and data platforms
• Contribute to the group's Cyber Essentials Plus programme, including remediation of findings and ongoing control maintenance
• Operate and tune endpoint and network security tooling (e.g. Microsoft Defender, Sophos, Threat Locker, Ivanti Patch Management, SIEM alerting)
• Support security patching, vulnerability remediation, and hardening across both on-premise and cloud infrastructure
• Participate in incident response and root-cause investigation for infrastructure and security incidents

• Produce and maintain clear documentation for infrastructure, configurations, and standard operating procedures
• Work within change management (CAB) processes for planned infrastructure changes
• Provide 2nd/3rd-line escalation support and mentor junior team members where required
• Collaborate with the wider IT team on projects spanning infrastructure, security, and identity

• Strong problem-solving skills, with a structured and analytical approach to diagnosing and resolving issues.
• A proactive mindset, with the confidence to identify improvements, challenge existing ways of working and drive solutions through to completion.
• A strong security mindset and understanding of the importance of maintaining secure, resilient and well-managed infrastructure.
• Excellent communication skills, with the ability to explain technical issues and solutions clearly to both technical and non-technical stakeholders.
• The ability to work effectively in a changing environment, managing multiple priorities while maintaining a high standard of delivery.
• A collaborative approach, with a willingness to share knowledge, support colleagues and contribute to the wider IT team and Group objectives.

• Educated to Degree Level with a Minimum 5 years of experience working in…