Security Infrastructure Engineer
Role details
Job location
Tech stack
Job description
BAE Systems have been contracted to undertake the design and build of a dedicated Security Operations Centre (SOC) to support the cyber defence of a major international defence programme. The information, systems and networks to be protected will be a mix of Microsoft Cloud services and on-premises data centres straddling multiple regions and classification levels. We are looking for a talented and enthusiastic individual with excellent technical and client-facing skills, to act as an security infrastructure engineer who will support the design, configuration and maintenance of a wide range of security tools where you will be expected to work across a variety of technologies such Cloud compute, networking and storage services, and OnPrem infrastructure including Kubernetes, VMWare virtual machines, VLANs, SAN/NAS and other as appropriate. The role will range from advising on design, deploying and configuring new solutions, assessing existing deployments and client capabilities to make improvements and improve overall maturity. This role is situated within our Defence Business unit and requires a minimum of SC clearance, ideally DV clearance. The position is expected to work from company offices in the UK with some time on client sites in UK and occasional travel to Europe and Asia.
Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment of both cloud hosting and containers, and OnPrem hosted VM's and containers, apply security controls and compliance frameworks. Support the design and configuration of network security devices, network routers and switches, establishment of VLANs, DNS and identity management capability Support deployment of security tools to both cloud hosting and containers, and OnPrem hosted VM's and containers Support the integration of security tools with identity management solutions. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment and configuration of various tools including Jira and Cribl
Requirements
Adaptable to new technologies supported demonstrable technical expertise Experience in network design and configuration, Kubernetes and docker deployments, VMWare deployments in both cloud and OnPrem environments Experience in basic administration of Windows Experience in configuration of Linux including package managers and scripting
Understand TCP/IP component layers to identify normal and abnormal traffic Self-motivated to understand tools that may not have been used before, researching and testing potential solutions Client-side consulting, including stakeholder engagement and the ability to communicate insights and concepts to others. Ability to build and maintain relationships with the various stakeholders Ability to talk competently and maintain high standards of behaviour with the client Ability to maintain confidentiality and deal with matters of national security. Experience of Cribl and JIRA ITSM work would desirable.