Secure Infrastructure and Systems Engineer

Our client is an established consultancy operating at the sharp end of UK Defence and National Security - the kind of organisation where the work genuinely matters and cutting corners simply isn’t an option. They’re a tight-knit team with high standards, working on infrastructure that has to be right first time, every time. You’ll be joining a small specialist team responsible for designing, building, securing, and documenting distributed, scalable environments for high-profile clients. The projects are complex, the stakes are real, and the team around you will expect you to pull your weight from day one. To be considered, you’ll need deep hands-on Windows engineering experience - we’re talking Windows internals, OS hardening to NCSC standards, Gold Image builds, and hypervisor deployment and management. You must currently hold Developed Vetting (DV) clearance - there are no exceptions here. If you’re a self-sufficient engineer who takes pride in mission-critical output and can hit deadlines without hand-holding, this one’s for you. Sound like you? APPLY TODAY and let’s talk.

Working Patterns and location - Hybrid - 2 days on site per week

Key responsibilities

· Lead evaluation and development of client-facing Windows OS infrastructure from concept to handover.

· Oversee hardware selection, lifecycle management, vulnerability mitigation, and End-of-Life planning.

· Evaluate, design, and deploy hypervisor solutions to meet system requirements.

· Create hardened Gold Image builds for Windows 10/11, minimising attack surface and removing non-essential services.

· Support design and implementation of Multi-Factor Authentication (MFA) capabilities.

· Maintain system management functions including logging, updates, and patching.

· Ensure bit-for-bit consistency across deployments with strict version control and clear technical documentation.

· Deliver high-quality technical output autonomously against strict project milestones.

· Proven experience deploying and networking hypervisors, KVM-based or proprietary.

· Strong Windows engineering skills including deep knowledge of Windows internals.

· Demonstrable ability to harden operating systems to NCSC and vendor standards.

· Experience creating hardened Gold Image builds for Windows 10/11 in secure environments.

· Experience designing and supporting Identity and Access Management including MFA.

· Ability to produce high-quality, comprehensive technical documentation throughout a project lifecycle.

· Capable of working autonomously within a small specialist team to tight deadlines.

· Currently holding Developed Vetting (DV) clearance - essential, no exceptions.

Additional benefits

· Previous experience delivering secure infrastructure in the UK Defence or National Security sector.

· Familiarity with scalable, distributed infrastructure design for high-profile environments.

· Experience managing system patching and update functions in classified or secure environments.

· Knowledge of vulnerability mitigation strategies and proactive lifecycle planning for client hardware.