Systems & Infrastructure Engineer

As Systems and Infrastructure Engineer, you will manage internal infrastructure, ensure security, patching and TSA compliance, and support ongoing audits. You’ll join project teams to renew systems and deploy new solutions while keeping platforms secure and patched. You’ll diagnose and resolve infrastructure issues alongside Network teams, and maintain up-to-date documentation. This role focuses on proactive security and compliance to enable scalable, reliable services for our fibre network.

• 25 days holiday (increasing with service)
• Birthday leave
• Cycle to work scheme
• Flexible WFH policy
• Private health cover
• Collegial, tech-forward culture

• Install, configure and maintain software, hardware and OS features in support of Network Engineering and Operations
• Ensure secure storage, backup and retrieval of systems and data
• Identify areas for improvement and system issues
• Assist the Network Operations Centre with complex problems
• Replace failed components on-site as required
• Keep documentation updated per requirements
• Security implementations for complex solutions using specialized tools
• Manage NetBox-based infrastructure and ensure scalability
• Plan, deploy and maintain network infrastructure using Terraform and Puppet
• Use Puppet for configuration management across environments
• Automate OS installations and configurations for Linux distributions
• Lead varied testing (unit, integration, performance, security, end-to-end)
• Maintain TSA compliance, including patching, vulnerability management and audits
• Monitor and remediate security vulnerabilities and ensure vendor patching within SLAs
• Ensure logging, monitoring and alerting across managed infrastructure
• Maintain secure configuration baselines and respond to external audits
• Support security incident investigations involving infrastructure

• 5+ years in a server/storage/networking environment
• Strong hands-on experience with DNS (BIND or equivalent)
• DHCP administration and high-availability configurations
• NTP administration and secure time synchronization
• NetBox / IPAM / DCIM administration and integration
• Ability to assess vendor security advisories and plan patches/upgrades
• Experience planning and implementing infrastructure upgrades with minimal disruption
• Vulnerability management and patching automation
• Experience with Tenable, Qualys or equivalent for vulnerability management
• Understanding of CVEs, CVSS and risk assessment
• Experience using logging/monitoring platforms; comfort with automation tools
• Familiarity with firewall technologies (Next-gen) and logging platforms
• Scripting (Bash and Python)
• Tech stack familiarity: DNS (ISC BIND), DHCP (ISC Kea, FreeRadius), Palo Alto, various servers and storage platforms, Elasticsearch/OpenSearch, NetBox, Ansible, Terraform, Puppet, Linux, databases
• Nice-to-haves: data replication, backup/recovery strategies; logging platforms; cycle through technologies

• proactive mindset
• team player
• problem-solving
• DNS administration with BIND
• DHCP administration and HA
• NTP and time synchronization