Infrastructure Engineer

Stratospherec is recruiting for an Infrastructure Engineer with cybersecurity knowledge for a rapidly growing SaaS business management software company in central Bristol.

This is an opportunity to take ownership of the infrastructure and cyber security that support the company s software platforms and internal operations. You ll combine hands-on technical work with operational oversight, working closely with Engineering and colleagues across the business to keep systems secure, reliable and ready for continued growth.

If you enjoy solving technical problems, strengthening security and seeing improvements through from planning to delivery, this role offers broad responsibility and the opportunity to shape how the infrastructure function develops.

The role

You ll manage a varied Microsoft and Azure environment, oversee cyber security controls and lead improvements across infrastructure, identity, monitoring, backups and recovery.

You ll also provide technical direction to colleagues supporting the function, with the potential to take on direct line management responsibilities as the team structure develops.

Your responsibilities will include:

• Managing hybrid identity across Active Directory and Microsoft Entra ID, including Group Policy, Entra Connect synchronisation, privileged access and access reviews.
• Administering Windows Server, Microsoft 365 and Azure infrastructure, including virtual machines, networking, storage and role-based access.
• Maintaining network services and equipment, including DNS, DHCP, NAT, VPNs, certificates and UniFi.
• Administering IIS and supporting website deployment, configuration and troubleshooting.
• Identifying security vulnerabilities and threats, prioritising remediation and maintaining secure configurations and patching processes.
• Supporting Cyber Essentials certification, security reviews and audits.
• Managing backups, testing restores and maintaining documented business continuity and recovery procedures.
• Leading the technical response to infrastructure and security incidents, communicating risks and implementing improvements.
• Owning the infrastructure and cyber security work plan, balancing support needs, maintenance and improvement projects.
• Maintaining monitoring, technical documentation and oversight of suppliers, hosting, licences, equipment and renewals.
• Using PowerShell to automate administration and working with Engineering to support releases and infrastructure changes.
• Acting as an escalation point for end-user support and overseeing device setup, replacement and secure disposal.

You ll bring a strong hands-on infrastructure background, practical cyber security experience and the confidence to take ownership of a broad technical environment.

You should have experience with:

• Active Directory, Group Policy, Windows Server and patch management.
• Microsoft Entra ID and Entra Connect in a hybrid identity environment.
• Microsoft 365, including Exchange Online, SharePoint, OneDrive and Teams.
• Azure virtual machines, virtual networks, network security groups, storage and access controls.
• Writing, troubleshooting and maintaining PowerShell scripts.
• Network fundamentals, including subnetting, DNS, DHCP, NAT, VPNs and certificates.
• UniFi or a comparable networking platform, with the ability to learn UniFi quickly.
• Backup management, restore testing and documented recovery procedures.
• IIS administration and website deployment and troubleshooting.
• End-user support and device lifecycle management.
• Cyber security risk assessment, vulnerability remediation and exposure to Cyber Essentials requirements and assessments.

Alongside your technical skills, you ll be able to prioritise competing demands, communicate clearly with technical and non-technical colleagues, maintain accurate documentation and recognise when risks need to be escalated.

Useful additional experience (but not essential)

The following would be advantageous:

• Dedicated or bare metal hosting, including providers such as Hetzner or Fasthosts.

• Ubuntu Linux, TrueNAS, Docker or basic Microsoft SQL Server operations.

• Monitoring tools such as Azure Monitor or Grafana.

• Git for version control.

• AZ-104 certification or equivalent practical experience.

• Supporting ISO 27001 audits or SOC 2 assessments.

• Identifying and addressing AI-enabled cyber threats.

• Supervising or line managing technical colleagues.

Central Bristol £55k to £65k Office-based 40 hours per week, with flexibility around working hours by agreement, Annual salary £55k to £65k per annum.

• Private medical insurance.

• Private dental insurance.

• Perkbox employee perks and discounts.

• Pension scheme.

• Flexibility around specific working hours by agreement.

The role is based at the company s central Bristol office, working 40 hours per week.