Infrastructure Engineer

• Manage hybrid identity across Active Directory and Microsoft Entra ID, including Group Policy, Entra Connect synchronisation, privileged access and access reviews.
• Administer Windows Server, Microsoft 365 and Azure infrastructure, including virtual machines, networking, storage and role-based access.
• Maintain network services and equipment, including DNS, DHCP, NAT, VPNs, certificates and UniFi.
• Administer IIS and support website deployment, configuration and troubleshooting.
• Identify security vulnerabilities and threats, prioritise remediation, and maintain secure configurations and patching processes.
• Support Cyber Essentials certification, security reviews and audits.
• Manage backups, test restores and maintain documented business continuity and recovery procedures.
• Lead the technical response to infrastructure and security incidents, communicate risks and implement improvements.
• Own the infrastructure and cybersecurity work plan, balancing support needs, maintenance and improvement projects.
• Maintain monitoring and technical documentation, and oversee suppliers, hosting, licences, equipment and renewals.
• Use PowerShell to automate administration and work with Engineering to support releases and infrastructure changes.
• Act as an escalation point for end-user support and oversee device setup, replacement and secure disposal.
• Provide technical direction to colleagues supporting the function, with the potential to take on direct line management responsibilities as the team develops.

Technologies:

• AI
• Active Directory
• Azure
• Docker
• Git
• Grafana
• Support
• Linux
• Microsoft 365
• NAT
• Network
• PowerShell
• SQL
• Security
• SharePoint
• Ubuntu
• Windows
• Office 365
• Cloud
• DevOps, We are recruiting for a rapidly growing SaaS business management software company in central Bristol. This office-based Infrastructure Engineer role offers broad responsibility for the infrastructure and cybersecurity supporting our software platforms and internal operations. You will work closely with Engineering and colleagues across the business, combining hands-on technical work with operational oversight and helping shape the development of our infrastructure function. The role is 40 hours per week, with flexibility around working hours by agreement. We offer an annual salary of £55,000 to £65,000, private medical and dental insurance, Perkbox employee perks and discounts, and a pension scheme.

• Strong hands-on infrastructure background and practical cybersecurity experience, with the confidence to take ownership of a broad technical environment.
• Experience with Active Directory, Group Policy, Windows Server and patch management.
• Experience with Microsoft Entra ID and Entra Connect in a hybrid identity environment.
• Experience with Microsoft 365, including Exchange Online, SharePoint, OneDrive and Teams.
• Experience with Azure virtual machines, virtual networks, network security groups, storage and access controls.
• Ability to write, troubleshoot and maintain PowerShell scripts.
• Knowledge of network fundamentals, including subnetting, DNS, DHCP, NAT, VPNs and certificates.
• Experience with UniFi or a comparable networking platform, or the ability to learn UniFi quickly.
• Experience with backup management, restore testing and documented recovery procedures.
• Experience with IIS administration, website deployment and troubleshooting.
• Experience with end-user support and device lifecycle management.
• Experience with cybersecurity risk assessment, vulnerability remediation, and exposure to Cyber Essentials requirements and assessments.
• Ability to prioritise competing demands, communicate clearly with technical and non-technical colleagues, maintain accurate documentation and identify risks that need escalation.
• Advantageous: experience with dedicated or bare-metal hosting, Ubuntu Linux, TrueNAS, Docker, basic Microsoft SQL Server operations, Azure Monitor or Grafana, Git, AZ-104 certification or equivalent practical experience, ISO 27001 audits or SOC 2 assessments, AI-enabled cyber threats, or supervising and line managing technical colleagues.