> Markdown version of [/jobs/ext/4016829-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/4016829-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Infrastructure Engineer - **Company:** Tony Blair Institute - **Location:** UK - **Salary:** £49,934.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, JIRA, Microsoft Azure, Cloud Computing, Cloud Storage, Software Documentation, Cyber Security, Information Leak Prevention, Data Security, Disaster Recovery, Monitoring of Systems, Infrastructure as a Service (IaaS), Microsoft Security Essentials, Microsoft Office, Platform as a Service (PAAS), Windows PowerShell, Azure Active Directory, Anti-Phishing, Kusto Query Language, Microsoft SharePoint, Software Vulnerability Management, EndPointSecurity, Office365, Cyber Threat Analysis, Patch Management, Microsoft Sentinel, Vulnerability Analysis - **Published:** October 30, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5946683018 ## About the Role * Strong experience in a 3rd line infrastructure or cyber security role within a global organisation. * Experience working alongside a managed (3rd party) Security Operations Centre (SOC). * Experience supporting both Windows and macOS devices in a Microsoft 365 and Azure environment. * Experience preparing for or maintaining Cyber Essentials (and Cyber Essentials Plus) certification. Essential Skills * Azure platform management experience, including PaaS, IaaS, VNETs and storage accounts. * Extensive knowledge of the M365 platform (Exchange Online, Office 365 apps, Teams incl. telephony, OneDrive, SharePoint Online). * Good knowledge of M365 security technologies (Azure Information Protection, DLP, M365 Security Centre and Compliance Centre, retention policies). * Understanding of core cyber security concepts: vulnerability management, phishing, endpoint protection and incident response. * Experience with Cyber Essentials (and Cyber Essentials Plus), including implementing and recommending remediations to close identified gaps. * Ability to analyse logs, alerts and events to identify potential threats or weaknesses. * PowerShell scripting experience. * Experience producing and maintaining system documentation. * Comfortable working with multiple teams, including Technical Architecture, in a global organisation. * Excellent written and verbal communication, with a clear customer focus. * Flexible and resilient, able to handle planned and unplanned demands. * Strong attention to detail and ability to manage multiple tasks simultaneously. * Pragmatic problem-solver with a desire to tackle issues at root cause. Operating Systems * Windows 10/11 * macOS Microsoft 365 & Azure * Microsoft 365 (Exchange Online, Office 365 apps, Teams, OneDrive, SharePoint Online) * Entra ID (Azure Active Directory) * Azure (PaaS, IaaS, VNETs, storage accounts) Security Technologies * Microsoft Defender XDR * Microsoft Sentinel * Microsoft Purview / M365 Compliance Centre * Data Loss Prevention (DLP) * Azure Information Protection Endpoint & Device Management * Mobile Device Management (MDM) solutions Collaboration & Service Management * ITSM platforms (e.g. Freshservice) or other Service Desk ticketing systems * Jira Desirable Skills * Hands-on experience with Microsoft security tools (Defender for Endpoint, Sentinel, Purview, etc.). * Exposure to vulnerability scanning tools * Familiarity with email threat detection and user behavioural analytics platforms. * Understanding of secure browser isolation or user activity monitoring technologies. * Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST). * Previous involvement in security audits, risk assessments or policy development. * KQL or other scripting/automation skills beyond PowerShell. * Advanced M365 and Azure backup/disaster recovery experience. * Experience working in a global or multi-site corporate environment. This is an opportunity to take meaningful ownership quickly, working across infrastructure and security on systems that support TBI's global operations. For someone who enjoys solving real technical problems, improving an environment and seeing the impact of their work, there is plenty to get stuck into. ## Description We are looking for an experienced, hands-on Infrastructure Engineer to join TBI's Digital & Technology team for a critical period of infrastructure and cyber security delivery. This is not a purely advisory security role. We are looking for someone who is comfortable getting into the technology, identifying what needs to change and implementing those changes. A major priority will be helping TBI successfully deliver its next Cyber Essentials / Cyber Essentials Plus certification. We therefore particularly want to hear from engineers who have taken an organisation through the certification process before and understand how to translate security requirements into practical technical remediation. Alongside this, you will provide senior 3rd-line infrastructure expertise across our Microsoft 365 and cloud environment and work closely with our Technical Architect, infrastructure and support teams, and managed Security Operations Centre (SOC). Please note: candidates must already have the right to work in the UK. We are unable to offer visa sponsorship for this role., * Infrastructure & Platform Management: Maintain and support the 3rd line infrastructure estate, managing the Azure platform (PaaS, IaaS, VNETs and storage accounts) and the wider M365 estate, including Exchange Online, Teams (incl. telephony integration), OneDrive and SharePoint Online. * Security Operations: Act as the primary internal liaison with the managed third-party SOC, monitoring and responding to security alerts using Microsoft Defender XDR and Microsoft Sentinel, and supporting incident triage, containment and root cause analysis. * Vulnerability & Patch Management: Conduct regular vulnerability assessments, track remediation progress and support patch management across the estate. * Compliance & Certification: Support Cyber Essentials (and Cyber Essentials Plus) certification activities, implementing and recommending remediations to close identified gaps, and assist with internal and external audits and security assessments. * Collaboration: Work closely with the Technical Architect to design and implement secure, scalable infrastructure solutions, and with the IT Service Desk and wider Infrastructure team to ensure secure configurations and timely resolution of issues. * Data Protection & Email Security: Assist with the management and configuration of email protection, web control, data loss prevention (DLP) and device monitoring platforms. * Threat Intelligence & Policy: Contribute to threat intelligence analysis and recommend defensive improvements; support the development and maintenance of security policies, procedures and technical standards. * Automation & Documentation: Develop and maintain PowerShell scripts to automate routine administrative and security tasks, and produce and maintain accurate system documentation. * Backup & Resilience: Manage and test M365 and Azure backup and disaster recovery arrangements.