Infrastructure Security Engineer

We have an exciting opportunity for an Infrastructure Security Engineer to join our Cyber Engineering team, providing technical consultancy, subject matter expertise and service innovation across Microsoft-aligned cyber security offerings, with a particular focus on Active Directory, Windows Server, hybrid identity and platform security.

Working closely with customers, teammates and service leads, you will assess infrastructure and identity security posture, identify risks and control gaps, and develop prioritised, actionable remediation plans that align with business objectives and risk requirements. You will bring strong expertise across Microsoft infrastructure, helping organisations strengthen core identity services, improve platform resilience and reduce risk across hybrid environments.

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations, contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

• Experienced consultant or engineer, comfortable operating in complex environments and balancing technical requirements with operational impact, user experience and organisational constraints.
• Able to translate security requirements into practical, scalable controls that balance confidentiality, integrity, availability and operational efficiency.
• Strong technical credibility across identity and platform security, providing context-driven recommendations that reflect real-world implementation challenges across Microsoft environments.
• Experience collaborating with technical and business stakeholders to ensure security solutions support organisational objectives and operational needs.
• Clear and effective communicator who translates security risks and control gaps into actionable outcomes, with an interest in service improvement, standardisation and commercially aware delivery.

• Proven experience with Active Directory, Entra , Windows Server, Group Policy and hybrid identity security.
• Understanding of security baselines, hardening standards and control frameworks used to support risk-based recommendations.
• Experience of phased remediation approaches across identity, infrastructure and platform security controls.
• Working knowledge of Azure Dev Ops or similar delivery tooling.

• SC-300 (Microsoft Identity and Access Administrator)
• SC-500 (Microsoft Certified: Cloud and AI Security Engineer Associate)
• AZ-800 / AZ-801 (Microsoft Certified: Windows Server Hybrid Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)

• Strong alignment with FSP values and ethos.
• Commitment to teamwork, quality and mutual success.
• Proactivity with an ability to operate with pace and energy.
• Strong…