ICT Infrastructure Engineer

The ICT Infrastructure Engineer is responsible for the resilience, security, and improvement of Avon Fire & Rescue Service’s hybrid ICT estate, supporting critical operational and corporate services. The role provides expert support across cloud and on‑premise platforms, resolves complex incidents, and drives service improvement through standardisation, automation, and proactive monitoring.

The post holder will play a key part in transitioning ICT services in‑house, strengthening internal capability, managing suppliers, and maintaining a strong security posture aligned with recognised standards, ensuring reliable and fit‑for‑purpose technology for frontline operations., Manage the day-to-day operation of the hybrid ICT estate, ensuring the availability, performance, security, and reliability of core services.

• Networking (switching, routing, firewalls)

Manage and optimise LAN/WAN infrastructure, including switching, routing, firewalls, and site connectivity across MPLS, VPN, internet breakout, and Azure environments.

• Cloud (Azure)

Administer and optimise Azure IaaS and PaaS services, including virtual machines, networking, storage, and backup solutions.

• VMware (on-premise virtualisation)

Manage and maintain VMware environments ensuring platform stability, performance, and efficient resource utilisation.

• Governance and compliance (ISO 27001 / Cyber Essentials Plus)

Ensure infrastructure services align with security policies, governance standards, and regulatory requirements, embedding secure-by-design and least-privilege principles throughout the environment.

• Identity and access (Entra ID / AD DS)

Administer and maintain identity services across Entra ID and on-premise Active Directory, supporting user lifecycle management, group policies, and hybrid identity integration.

• Exchange Online administration

Administer Exchange Online and associated mail security platforms, managing mail flow, mailbox administration, hybrid configurations, and email security controls including anti-phishing, anti-spam, and transport rules.

• Microsoft 365 productivity suite administration

Administer core Microsoft 365 services including SharePoint, OneDrive, Teams, and associated collaboration platforms, ensuring secure, reliable, and effective service delivery.

• Service improvement and transformation

Identify opportunities to standardise, automate, and improve ICT services, contributing to the design and delivery of infrastructure solutions aligned to organisational strategy.

• Stakeholder engagement

Work collaboratively with internal teams and service users to understand requirements and improve service delivery, providing clear technical guidance to both technical and non-technical stakeholders.

• Cyber security (Microsoft Defender for Endpoint focus)

Administer and optimise Microsoft Defender for Endpoint across the server and endpoint estate, ensuring effective protection, detection, response, and vulnerability management capabilities.

• Escalation point

Act as an escalation point for L1 and L2 engineers, providing technical guidance and support across end-user computing services including Intune, Microsoft Teams, Microsoft 365 productivity applications, and Microsoft Defender technologies. Carry out any additional responsibilities as reasonable and appropriate, as agreed with line manager.

Do you have experience in Virtualization?, Do you have experience within IT systems and want to support improving our services? Then apply to be our ICT Instructure Engineer today!, + Degree level education (or equivalent) in computer science or a related field of study, or significant relevant business experience.

• Up to date technical knowledge of ICT, and the technology landscape, with evidence of keeping up to date with innovations for the benefit of the organisation.
• Minimum of 2 years’ experience in an Infrastructure Engineer role or similar role.
• Experience supporting and maintaining a hybrid infrastructure environment (cloud- Azure and on-premise - VMware)
• Hands on experience administering Azure services (IaaS, networking, identity integration, backup, firewalls, VNETs)
• Experience managing Active Directory and Entra ID in a hybrid configuration
• Ability to set and manage priorities. Negotiating timescales and balancing work objectives. Delivering effectively, overcoming barriers to change.
• Ability to diagnose issues methodically and drive resolution under pressure
• Ability to communicate technical issues clearly to non-technical stakeholders
• Willingness to accept and work to our Values during the course of employment.

• Committed to undertake relevant training and continuous professional development opportunities. Desirable

• Professional ICT qualifications (such as ITIL or accredited status such as Chartered IT Professional CITP), or the equivalent gained through relevant training, experience and continuing professional development.
• Experience with the configuration and management of Meraki firewalls, switches and AP’s
• Experience working in an environment certified to CE+ or ISO27001

Pulled from the full job description

• Employee discount
• Free parking
• Company pension
• Cycle to work scheme
• Discounted gym membership
• Car scheme, * 26 days annual holiday (plus public holidays) rising to 29 days after 5 years, and 30 days after 10 years of service
• Local Government Pension - Defined Benefit Scheme
• Electric Vehicle Salary Sacrifice Scheme
• Cycle to Work scheme
• Welfare and Wellbeing services
• Staff Networks
• Access to Westfield Health Supplementary Healthcare package.
• Access to Blue Light card with offers online and high street discounts
• Use of the multi-gym, sports hall, restaurant, free parking and beautiful open surroundings at our Headquarters in Portishead.