> Markdown version of [/jobs/ext/2929179-senior-infrastructure-security-engineer](https://www.wearedevelopers.com/jobs/ext/2929179-senior-infrastructure-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Infrastructure & Security Engineer - **Company:** MédiSolution - **Location:** Swindon, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Confluence, JIRA, Build Automation, Microsoft Azure, Cipher, Software as a Service, Cloud Computing, Cyber Security, Linux, Failover, Information Technology Operations, Virtual Private Networks (VPN), Javaserver Pages, Network Security, Windows Servers, MySQL, Octopus Deploy, Paessler Router Traffic Grapher, Ansible, Software Vulnerability Management, Transport Layer Security, Load Balancing, System Availability, Grafana, SC Clearance, Kubernetes, Patch Management, CIS Benchmarks, Terraform, Oracle Cloud Infrastructure, Docker, ManageEngine - **Published:** September 16, 2026 - **Apply:** https://harriscomputer.wd3.myworkdayjobs.com/1/job/Office---Swindon/Senior-Infrastructure---Security-Engineer_R0044662 ## About the Role * Strong hands-on infrastructure/IT operations background across a mixed estate. * Production experience with at least one major public cloud (Azure, AWS, OCI or GCP) and a strong grasp of the underlying concepts. * Practical experience with Terraform, Ansible or similar in production. * Confident administering both Linux and Windows servers. * Solid understanding of containers and orchestration, Kubernetes in particular. * Demonstrable networking skills: load balancers, WAFs, VPNs, security headers, network security groups. * Practical security operations: patching, hardening (e.g. to CIS), vulnerability management, and operating endpoint/threat tooling and acting on what it surfaces. * Experience coordinating penetration tests and driving triage and remediation through to closure. * Experience designing for resilience, high availability and business continuity (backup/restore, DR, regular testing). * Strong analytical and logical troubleshooting, root-cause discipline, you'll work methodically and effectively under pressure, knowing when to escalate. * Genuine curiosity for emerging tools and technologies, including AI, and the confidence to adopt them and push improvements forward. * Clear written communication - you'll draft answers to customer security questions and contribute technical evidence to audits. * Eligible for and able to obtain UK SC clearance (broadly: UK residency for a defined recent period). Clearance is mandatory to access our hosted systems; we sponsor the process. Desirable Skills & Experience * Active SC clearance at point of hire. * Hands-on Oracle Cloud Infrastructure (OCI). * Direct experience with the specific security tooling: CrowdStrike, ESET, Rapid7. * Octopus Deploy. * ManageEngine. * MySQL administration. * Observability stacks: Grafana/Loki, PRTG. * Experience migrating manually-built environments to infrastructure-as-code. * Direct experience with ISO 27001, Cyber Essentials Plus and MOD frameworks (JSP 440, Secure by Design). * Prior experience in a defence, government, or other regulated/secure environment. ## Description * Design, implement and run cloud infrastructure across Azure and Oracle Cloud (OCI) spanning the UK and Canada, for high availability, scalability and security. * Administer a mixed Linux and Windows server estate, plus Docker and Kubernetes workloads. * Own deployment of monthly SaaS releases, updates and patches into Staging, internal and hosted customer environments (Dev produces the release package). * Light MySQL maintenance: version upgrades, backup monitoring, replica health checks and tuning improvements. * Manage internal IT assets and users via ManageEngine; monitor staff device patch status. * Maintain internal servers and QA/test environments. * Investigate and resolve infrastructure issues and bugs, supporting the wider engineering team. Automation & modernisation ( 50% of the role) * Lead the migration of manually-built Oracle Cloud environments onto Terraform and Ansible, with proper change management. * Partner with Development to identify and build automation that improves releases and deployment. A key future initiative is building an installer to deploy updates remotely to self-hosted customers - replacing the time-consuming, costly on-site visits. * Drive automation and modernisation as a continuous theme, treating infrastructure-as-code as the living source of truth for infrastructure state. Security engineering * Patch management across the estate. * Maintain and improve hardened environments to CIS benchmarks - you'll lead the technical hardening standards and drive their implementation. * Threat-horizon monitoring: track IT news, vendor advisories, CVE feeds, NCSC and similar for issues relevant to our stack, and drive remediation. * Operate security tooling (CrowdStrike, ESET, Rapid7, or equivalents): deploy agents, ensure coverage and updates, monitor dashboards, and triage and analyse alerts. * Coordinate penetration tests end-to-end and own scoping - as the person with the deepest knowledge of our exposed attack surface - through execution, triage, remediation and evidencing closure. * Author and review customer security questionnaires and bid responses about our hosting environments and security controls. * Provide technical evidence and implement controls in support of ISO 27001 and Cyber Essentials Plus; occasionally contribute to MOD-aligned security responses (e.g. JSP 440, Secure by Design). Networking * Hands-on (and IaC) with Cloud based load balancers, SSL certs & ciphers, WAFs (configuration and management), security headers, network security groups and VPNs. Resilience & business continuity * Capacity monitoring and resilience planning; design for high availability and scalability (Kubernetes and similar), in collaboration with Development. * Lead disaster-recovery and business-continuity capability: design it, test it regularly, and automate backup/restore and failover wherever possible. * Build and maintain alerting and observability so the right people can see what they need - consolidating and improving across Grafana/Loki (application logs), ManageEngine log analytics (server logs) and PRTG (server sensors). Documentation & operating rhythm * Maintain infrastructure-as-code as the primary record of infrastructure state, supported by clear runbooks, operational processes and decisions in Confluence and Jira. * Weekly tracking of work in progress and incoming work. The successful candidate will have these skills and experience: * Collaboration closely with R&D and Customer Support and Success teams to ensure the best outcomes for our customers, Travel - required to company offices, events, customer sites, partner sites, conferences, industry events, corporate events etc. as necessary ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [MySQL Protocol Features You Should Be Aware Of](https://www.wearedevelopers.com/videos/100267-mysql-protocol-features-you-should-be-aware-of) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)