> Markdown version of [/jobs/ext/2930145-principal-it-infrastructure-security-specialist](https://www.wearedevelopers.com/jobs/ext/2930145-principal-it-infrastructure-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal IT Infrastructure & Security Specialist - **Company:** AIOI NISSAY DOWA INSURANCE MANAGEMENT LIMITED (ANDIM) - **Location:** Oxford, UK - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Apple Mac Systems, Microsoft Azure, Bash Shell, Microsoft Online Services, Business Software, Cloud Computing Security, Configuration Management, Collaborative Software, CompTIA Security+, Cyber Security, Linux, Disaster Recovery, Multi-Factor Authentication, Identity and Access Management, Internetworking, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Architecture, Routing, Network Segmentation, Windows PowerShell, Role-Based Access Control, Remote Access Technology, Azure Active Directory, Cloud Services, Zero Trust Network Access, Microsoft SharePoint, Single Sign-On, Software Deployment, Wireless Networks, Software Licensing, Scripting, Information Security Management System, Firewalls (Computer Science), Microsoft InTune, Infrastructure Automation Frameworks, Information Technology, CIS Benchmarks, Cisco - **Published:** September 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a3c1813db997e4ef ## About the Role * Bachelor's degree in Computer Science, Information Technology or a related discipline, or equivalent relevant professional experience. * Experience translating business and security requirements into practical technical solutions and infrastructure designs. * Demonstrated ability to evaluate technical options, make sound architectural decisions and justify recommendations to both technical and non-technical stakeholders. * Significant experience designing, implementing and supporting enterprise IT infrastructure in a principal technical or infrastructure engineering role. * Ability to balance usability, developer productivity and information security when designing and implementing technical solutions. * Strong knowledge of enterprise networking, including switching, routing, wireless networking, firewalls, VPNs and network security principles. * Proven experience designing, implementing and securing Microsoft 365 environments, including MS Entra ID, Intune, Exchange Online, SharePoint Online and MS Teams. * Experience implementing and administering Microsoft Intune, including device enrolment, compliance policies, application deployment and mobile device management. * Experience designing and implementing identity and access management solutions, including Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA) and role-based access control. * Experience designing and implementing secure cloud infrastructure and services, ideally Amazon Web Services (AWS). * Experience administering and supporting heterogeneous IT environments comprising Windows, MacOS and Linux systems. * Experience supporting the implementation, operation or continual improvement of an Information Security Management System (ISMS). * Good understanding of information security principles and experience implementing technical security controls aligned with recognised frameworks such as ISO/IEC 27001 and Cyber Essentials Plus. * Experience mentoring or providing technical leadership to junior IT professionals. * Experience with infrastructure automation or scripting using technologies such as PowerShell, Bash or Python. * Strong analytical and troubleshooting skills, with the ability to diagnose and resolve complex infrastructure and security issues. * Excellent technical documentation, communication and stakeholder management skills. Desirable * Professional certifications relating to Microsoft 365, Microsoft Entra ID, Intune or Azure. * AWS Associate or Professional certifications. * Networking certifications such as Cisco CCNA/CCNP or equivalent. * Information security certifications such as ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Internal Auditor, CompTIA Security+, CISSP or equivalent. * Experience designing and implementing Zero Trust security architectures. * Experience supporting Cyber Essentials Plus certification or equivalent security assurance frameworks. * Experience working with Infrastructure as Code or configuration management technologies. * Experience planning and delivering infrastructure projects. ## Description * Lead the design, implementation, maintenance and continual improvement of the company's heterogeneous IT infrastructure, including Windows, MacOS and Linux platforms, ensuring high levels of availability, resilience and security. * Translate business, operational and information security requirements into practical technical solutions, producing infrastructure designs and implementation plans that align with company policies, standards and recognised best practice. * Establish and maintain technical standards for the organisation's IT infrastructure, ensuring solutions are secure, supportable, resilient and consistent with company architecture and security policies. * Design, implement and maintain technical security controls across the organisation's IT environment, including Microsoft 365, Microsoft Entra ID, Intune, endpoint management, identity and access management, networking and cloud services. * Act as the principal technical authority for infrastructure and security, providing expert advice to the IT Manager on technology selection, architecture, technical risk and operational improvements. * Plan, coordinate and oversee the day-to-day technical work of IT staff, providing mentoring, knowledge sharing and technical guidance, whilst acting as the escalation point for complex incidents and infrastructure issues. * Design, implement and maintain secure office network infrastructure, including wired and wireless networking, internet connectivity, firewalls, network segmentation, remote access and associated security technologies. * Lead the administration, governance and security of Microsoft 365, Microsoft Entra ID, Intune, collaboration platforms and business applications, defining technical standards, security baselines and operational procedures. * Specify, evaluate and implement IT hardware, software and cloud services, providing technical input into procurement decisions and managing the lifecycle of infrastructure assets and software licensing. * Develop and maintain technical standards, infrastructure documentation, operational procedures and disaster recovery documentation to support the effective management and resilience of the IT environment. * Support the development, implementation and continual improvement of the organisation's Information Security Management System (ISMS), implementing technical controls that contribute to compliance with ISO/IEC 27001, Cyber Essentials Plus and other required standards. * Monitor the security, health and performance of the IT environment, identifying risks, vulnerabilities and opportunities for improvement, and leading the implementation of corrective actions. * Evaluate emerging technologies and make recommendations to improve the organisation's IT infrastructure, security posture and operational efficiency. * Provide technical leadership during infrastructure projects, technology deployments and major incidents, ensuring solutions are delivered to agreed standards, timescales and security requirements.