> Markdown version of [/jobs/ext/4642251-application-support-engineer](https://www.wearedevelopers.com/jobs/ext/4642251-application-support-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Application Support Engineer

- **Company:** BT Group
- **Location:** Bristol, United Kingdom
- **Contract:** Permanent contract
- **Skills:** Command-Line Interface, Databases, Data Centers, Relational Databases, Disaster Recovery, Key Management, Linux System Administration, Public Key Infrastructure, SAP (Applications), Security Software, Load Balancing, Kubernetes
- **Published:** November 9, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb8d98e7eb943ef0623125c83cf100ddf0/eaa

## About the Role

* Strong diagnostic and problem solving - Demonstrates the ability to analyse complex technical issues, identify root causes, and drive incidents through to successful resolution.
 * Customer focus - Ability to understand customer requirements, communicate effectively with stakeholders, and deliver solutions that meet business and operational needs.
 * Command Line Interfaces - Experience supporting operating systems via CLI, with a preference for supporting Linux environments.
 * Databases - Strong understanding relational databases, including the ability to query, troubleshoot, and support database-driven applications.

Desirable Skills / Experience

 * Public Key Infrastructure (PKI) - Basic understanding of PKI and cryptographic technologies, including certificates and key management
 * Kubernetes - Strong understanding of Kubernetes concepts and containerised application environments, including deployment and operational support.

## Description

Public Key Infrastructure (PKI) is critical for securing trust in a digital world. As an Application Support Engineer within the Security Software Services team, you will be part of a second line support team who are responsible for maintaining and improving in-life services of designated PKI platforms, supporting a mixture of internal and external customers.
This is a great opportunity to join a niche, but growing team, focused on delivering security critical platforms.
What you'll be doing

 * Provide 2nd Line technical support to external and internal customers by leading technical troubleshooting and performing root cause analysis.
 * Identify opportunities to reduce incident volumes through automation and process improvement.
 * Identify, manage and mitigate vulnerabilities and risks affecting our platforms.
 * Be part of an on call rota to ensure potential service impacting incidents are managed 24/7.
 * Plan and implement routine security patching, application releases and upgrades.
 * Ensure changes are tested, documented, and implemented with minimal customer impact. Some out of standard office hours work will be required to implement changes.
 * Maintain operational documentation, runbooks, and knowledge articles.
 * Support the maintenance and continual improvement of BCDR plans through regular disaster recovery exercises and resilience testing.
 * Support compliance activities, audits, and Key Ceremonies.
 * Ensuring all in-life activities are managed within our service level agreements (SLA's)., When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies
Show More Details
Required Cookies Provider Description Enabled
SAP as service provider
We use the following session cookies, which are all required to enable the website to function:

 * "route" is used for session stickiness
 * "careerSiteCompanyId" is used to send the request to the correct data centre
 * "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor
 * "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another