CBAS Cloud Infrastructure Engineer

You will work with the CBAS product manager and alongside other Infrastructure Engineers to support and resolve CBAS platform infrastructure issues and adaptions. As well your own team colleagues you will work IT suppliers to explore ways to improve the way our platform operates and performs.

You are a hands-on Azure Cloud Engineer to build, secure, and maintain our Azure ecosystem. You will be responsible for the end-to-end lifecycle of IaaS and PaaS deployments, ensuring that our infrastructure is resilient, compliant, and automated. You will bridge the gap between traditional Windows AD environments and modern Azure Entra ID (AAD) cloud-native identities

This vacancy is being offered on the Government Digital and Data Framework and can include an allowance of up to £10,000 depending on skills, qualifications, and experience. Further details on the framework can be found on https://ddat-capability-framework.service.gov.uk/role/infrastructure-engineer#senior-infrastructure-engineer Person specification, You are a hands-on Azure Cloud Engineer to build, secure, and maintain our Azure ecosystem. You will be responsible for the end-to-end lifecycle of IaaS and PaaS deployments, ensuring that our infrastructure is resilient, compliant, and automated. You will bridge the gap between traditional Windows AD environments and modern Azure Entra ID (AAD) cloud-native identities., ? Deployment and orchestration of VMs, storage, networking, and PaaS services using Bicep and the Azure Portal.

? Managing and synchronising Entra ID and Windows Active Directory, including Domain Services and App Registrations.

? Designing and maintaining Azure networking, including VNETs, hub and spoke topologies, VPNs, Azure Firewall, NSGs, and private endpoints.

? Implementing and maintaining DNS, DKIM, and DMARC configurations to support secure mail and domain services.

? Managing SSL certificate lifecycles, including procurement, renewal, installation, binding, and secure storage in Key Vault.

? Building and maintaining CI/CD pipelines in Azure DevOps and GitLab.

? Ensuring platform security through Azure Policy, RBAC, Microsoft Defender for Cloud, and integration with logging and monitoring controls.

? Leading server builds, including Windows and Linux workloads, ensuring secure baseline configuration, patching, hardening, and compliance with DESNZ standards.

? Installing, configuring, and managing ArcGIS Enterprise, including Portal, Server, Datastore, and associated security and networking dependencies.

? Producing clear technical documentation, runbooks, diagrams, and operational handovers suitable for engineering teams and support colleagues.

? Troubleshooting issues across the full stack, from networking and identity to application or platform components., The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non-home-based location for 40-60% of the time over the accounting period. Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use. Selection process details This vacancy is using Success Profiles , and will assess your Behaviours, Experience and Technical skills.

As part of the application process, you will be asked to complete a CV, personal statement and a number of behavioural statements and technical skill examples.

Further details around what this will entail are listed on the application form.

Please use your personal statement (in no more than 750 words) to demonstrate how your experience meets our skills requirement and how they relate to the responsibilities of the post.

Applications will be sifted on CV, behavioural statements, personal statement, and any technical skills required.

In the event of a large number of applicants, applications will be sifted on the personal statement only.

Candidates who pass the initial sift may be progressed to a full sift, or progressed straight to assessment/interview., Candidates who meet the minimum benchmark may be placed on a Reserve List for consideration for similar roles, including those at a lower grade. Candidates who narrowly miss the benchmark and are not placed on the Reserve List may still be considered for an offer in a similar role at a lower grade.

Please note terms and conditions are attached. Please take time to read the document to determine how these may affect you.

Any move to the Department for Energy, Security and Net Zero from another employer will mean you can no longer access childcare vouchers. This includes moves between government departments. You may however be eligible for other government schemes, including Tax Free Childcare; for further information visit the Childcare Choices website.

DESNZ does not normally offer full home working (i.e., working at home); but we do offer a variety of flexible working options (including occasionally working from home).

DESNZ cannot offer Visa sponsorship to candidates through this campaign.

DESNZ holds a Visa sponsorship licence but this can only be used for certain roles and this campaign does not qualify.

In order to process applications without delay, we will be sending a Criminal Record Check to Disclosure and Barring Service /Disclosure Scotland on your behalf.

However, we recognise in exceptional circumstances some candidates will want to send their completed forms direct. If you will be doing this, please advise Government Recruitment Service of your intention by emailing stating the job reference number in the subject heading.

For further information on the Disclosure Scotland confidential checking service telephone: the Disclosure Scotland Helpline on 0870 609 6006 and ask to speak to the operations manager in confidence, or email

Applicants who are successful at interview will be, as part of pre-employment screening, subject to a check on the Internal Fraud Database (IFD). This check will provide information about employees who have been dismissed for fraud or dishonesty offences. This check also applies to employees who resign or otherwise leave before being dismissed for fraud or dishonesty had their employment continued. Any applicant?s details held on the IFD will be refused employment.

A candidate is not eligible to apply for a role within the Civil Service if the application is made within a 5-year period following a dismissal for carrying out internal fraud against government.

Feedback Feedback will only be provided if you attend an interview or assessment. Security Successful candidates must undergo a criminal record check. Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .

See our vetting charter . People working with government assets must complete baseline personnel security standard (opens in new window) checks. Nationality requirements

This job is broadly open to the following groups:

• UK nationals
• nationals of the Republic of Ireland
• nationals of Commonwealth countries who have the right to work in the UK
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
• individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
• Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service

You should have the following key skills:

? Good Information Security Understanding and how it impacts infrastructure solutions

? Excellent understanding of IT Infrastructure so you can design and implement infrastructure solutions

? Excellent understanding of development standards which you can apply to your work and help others.

? Excellent understanding of how system builds across infrastructure integrate

? Excellent System design understanding so you are confident in selecting appropriate technology, using them efficiently and ensure they applied effectively.

? Confident troubleshooting and problem resolution skills so you can get to the root of the problem and be able to offer best solution outcomes. ?

Ability to produce clear, structured documentation and support effective handover to operational teams.

Desirable criteria

? You have good coding and scripting skills to help you develop infrastructure in the cloud.

? You take initiative and ownership of issues and want to get them resolved. ?

You have experience of installing and managing ArcGIS Enterprise (Portal, Server, Datastore), including user management and system upgrades

We'll assess you against these behaviours during the selection process:

• Working Together
• Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

• Competency: IT infrastructure
• Competency: Systems integration

Benefits Alongside your salary of £43,765, Department for Energy Security & Net Zero contributes £12,678 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

The Department for Energy Security and Net Zero offers a competitive mix of benefits including:

• A culture of flexible working, such as job sharing, homeworking and compressed hours.
• Automatic enrolment into the Civil Service Pension Scheme, with an employer contribution of 28.97%.
• A minimum of 25 days of paid annual leave, increasing by 1 day per year up to a maximum of 30.
• An extensive range of learning & professional development opportunities, which all staff are actively encouraged to pursue.
• Access to a range of retail, travel and lifestyle employee discounts.
• A hybrid office/home based working model where staff will spend a norm of 40-60% of their time in the office (minimum of 40%) over a month with flex dependent on balancing business and individual need.

DESNZ Do you want a career where you can make a real difference? Do you want to work at the forefront of current policy making decisions? Do you want to have an impact on the UK and beyond? If yes, then a career at the Department for Energy Security and Net Zero (DESNZ) could be for you. Here at DESNZ we are delivering our mission to make the UK a clean energy superpower, with clean electricity by 2030 and accelerating the UK?s journey to net zero. Our work is helping ensure clean energy for all, keep bills down and seize the opportunities to lead the world in new green industries, taking back control of our energy with Great British Energy and encouraging greater energy efficiency across the UK. The work of the department has never been more timely or relevant, and by joining us you will be part of making that difference. Our work is varied, interesting and most importantly it's impactful. Our DESNZ Values are interwoven into everything we do; we are bold, we are collaborative, we are inclusive, and we learn. As a department we are committed to these values to build a culture where everyone can thrive We offer great working benefits including a world-class pension, flexible working options and a career where your learning and development is taken seriously. We are enormously proud to be a Disability Confident Leader employer. We support candidates with adjustments throughout our recruitment process. Information about disability confidence and just some examples of the adjustments that you can request can be found in the reasonable adjustment section below. The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service D&I Strategy., We?re looking for an Infrastructure Engineer who can work for a fast past and focused team. The Cloud Based Analytical Service (CBAS) is a respected team that supports the Analytical function in DESNZ. CBAS has been running for 10 years and has developed a platform, based on Microsoft Azure, which has given its users the confidence that their data is kept in a secure place, which they can access, and they can run applications safely.