IT Systems & Security Engineer

An exciting opportunity is now available for a IT Network/Systems Engineer, to join a leading manufacturing business, with an ambitious systems development program.

The role may also provide the opportunity for ambitious and driven Systems/Network or Security Engineers, with less experience, to develop their skills and experience further.

Main Purpose of Role

To ensure the stability, security, and performance of the organisation’s core IT infrastructure supporting a 24/7 manufacturing operation. This includes responsibility for servers, networks, identity (Active Directory), backups and disaster recovery, monitoring, and the day-to-day cybersecurity posture. The role will work closely with the OT & Data Systems Engineer to ensure factory connectivity and OT segmentation are secure, reliable, and aligned with production requirements., * Own and maintain core server and virtualisation platforms (e.g., Hyper-V) including capacity, performance, and lifecycle planning.

• Own core networking (switching/routing/Wi-Fi) including VLAN design and segmentation to protect OT and business-critical services.
• Manage firewalls, VPNs, and secure remote access; ensure third-party access is time-bound, least-privilege, and logged where possible.
• Manage Active Directory and Group Policy; maintain secure, standardised configurations and access governance.
• Lead patch management for servers and core infrastructure (including planned maintenance and communication of downtime).
• Own monitoring and alerting for infrastructure and security controls; ensure alerts are triaged and responded to appropriately.
• Maintain and validate backup strategy; perform regular restore testing; keep DR runbooks current and practical.
• Support endpoint security posture in partnership with Support Technician (baseline standards, compliance reporting, escalation handling).
• Act as technical escalation for the Support Technician and provide coaching/upskilling to improve first-time fix and consistency.
• Maintain accurate technical documentation (network diagrams, configuration records, incident write-ups, DR procedures).

Security Responsibilities

• Maintain endpoint/server protection configuration and investigate high-severity alerts (e.g., XDR detections) in coordination with the IT Manager.
• Maintain vulnerability and patch governance; reduce attack surface through secure baselines and hardening.
• Support SIEM processes where applicable (alert triage, evidence capture, escalation paths).
• Ensure vendor access aligns to governance (MFA, time-bound access, segmentation, approved tooling).

Communication Skills: Excellent verbal and written communication skills to explain technical concepts to non-technical users.

Interpersonal Skills: Ability to build trusted relationships across Operations, Engineering, Finance, and site teams.

Problem-Solving Skills: Calm, structured approach to incident handling in a time-critical environment.

Experience

• 3+ years’ experience in a complex network/Infrastructure role (or equivalent).
• Strong knowledge of Windows Server and core services
• Hands-on experience with virtualisation and backup/DR concepts
• Strong networking fundamentals (switching, VLANs, routing, Wi-Fi) and firewall/VPN administration.
• Demonstrable experience implementing or maintaining security controls (

Desirable

• Experience in manufacturing / 24/7 operational environments.
• PowerShell scripting for automation and standardisation.
• Familiarity with common tooling referenced in the current environment
• Basic awareness of SQL, SSRS, Power BI and reporting dependencies.
• Experience working to change control and documenting technical environments and incidents.