Infrastructure Engineer Senior

Description:

Platform Engineer Azure Infrastructure, Monitoring & Endpoint Security

Role Overview

We are seeking a Platform Engineer with strong Azure, Windows Server, Linux, networking, and endpoint security experience to support enterprise infrastructure platforms across on-premises and cloud environments. The role will focus on deploying and supporting XDR agents, Azure Arc onboarding, Azure Monitor Agent (AMA) installations, infrastructure monitoring, and maintaining secure, reliable platform services across Windows and Linux server estates.

Key Responsibilities

Azure Infrastructure & Hybrid Cloud

• Deploy, configure, and support Microsoft Azure infrastructure services.
• Install and onboard Windows and Linux servers to Azure Arc.
• Configure and manage Azure Arc-enabled servers and associated extensions.
• Support Azure resource management, subscriptions, resource groups, and RBAC permissions.
• Assist with hybrid cloud integration and infrastructure modernization initiatives.

Monitoring & Observability

• Install, configure, and troubleshoot Azure Monitor Agent (AMA) on Windows and Linux servers.
• Configure Azure Monitor, Log Analytics Workspaces, Data Collection Rules (DCRs), dashboards, and alerting solutions.
• Monitor infrastructure performance, availability, capacity, and security events.
• Support operational monitoring and reporting across enterprise environments.

Endpoint Security & XDR Deployment

• Deploy, configure, upgrade, and maintain XDR/EDR agents across Windows and Linux server environments.
• Perform large-scale security agent rollouts using automated deployment methods.
• Troubleshoot agent installation, connectivity, onboarding, and performance issues.
• Ensure endpoint security agents remain compliant and operational across the server estate.
• Support security operations teams with endpoint protection and monitoring requirements.

Windows Server Administration

• Install, configure, administer, and maintain Windows Server environments.
• Manage Active Directory, DNS, DHCP, Group Policy, and certificate services.
• Perform server patching, upgrades, security hardening, and lifecycle management.
• Troubleshoot operating system, application, and infrastructure issues.

Linux Server Administration

• Install, configure, administer, and maintain Linux server environments.
• Manage system services, package repositories, storage, user access, and SSH configurations.
• Perform Linux patching, upgrades, and security hardening activities.
• Troubleshoot operating system, application, and networking issues.

Networking

• Configure and troubleshoot TCP/IP networking in on-premises and Azure environments.
• Support DNS, routing, firewalls, load balancers, VPNs, and proxy services.
• Troubleshoot connectivity issues affecting Azure Arc, Azure Monitor Agent, and XDR agent communications.
• Support Azure networking technologies including:
  • Virtual Networks (VNets)
  • Network Security Groups (NSGs)
  • Azure Firewall
  • VPN Gateway
  • ExpressRoute
  • Private Endpoints

Automation & Platform Engineering

• Automate operational tasks using PowerShell and Bash scripting.
• Support Infrastructure as Code (IaC) initiatives using Terraform, Bicep, or ARM templates.
• Develop deployment and validation scripts for Azure Arc, Azure Monitor Agent, and XDR solutions.
• Maintain technical documentation, standards, and operational procedures.

Security & Compliance

• Implement security best practices and hardening standards across Windows and Linux platforms.
• Support vulnerability remediation, compliance initiatives, and security audits.
• Investigate infrastructure and endpoint security alerts.
• Work closely with Cyber Security, Infrastructure, and Operations teams to maintain secure platforms.

Required Skills & Experience

Technical Skills

• Strong Microsoft Azure administration and support experience.
• Hands-on experience installing and managing Azure Arc-enabled servers.
• Experience deploying and supporting Azure Monitor Agent (AMA).
• Experience deploying and supporting XDR/EDR security agents.
• Strong Windows Server administration skills.
• Strong Linux server administration skills.
• Knowledge of Active Directory, DNS, DHCP, and Group Policy.
• Strong networking fundamentals including TCP/IP, DNS, routing, VPNs, firewalls, and proxies.
• Experience with PowerShell and Bash scripting.
• Experience with Azure Monitor, Log Analytics, and infrastructure monitoring solutions.

Preferred Skills

• Experience with Microsoft Defender XDR, CrowdStrike, SentinelOne, Cortex XDR, or equivalent platforms.
• Experience with Microsoft Intune, SCCM, Ansible, or other deployment tools.
• Experience with Terraform, Bicep, or ARM templates.
• Knowledge of Microsoft Entra ID and Defender for Cloud.
• Familiarity with DevOps practices and CI/CD pipelines.
• Understanding of ITIL service management processes.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or equivalent experience.
• 5+ years of experience in Platform Engineering, Infrastructure Engineering, Cloud Engineering, or Systems Administration.
• Experience supporting enterprise Windows and Linux server environments.

Key Competencies

• Strong troubleshooting and analytical skills.
• Excellent communication and stakeholder management abilities.
• Ability to work independently and within cross-functional teams.
• Strong focus on security, reliability, and operational excellence.
• Proactive approach to automation, monitoring, and continuous improvement.

Enable Skills-Based Hiring No Region try { var fgTooltip = new FG.Tooltip({ element: $('#cf_descz18051517413973032789902'), text: "Geographical\x20Region" }).initialize(); } catch(err) {}

Additional Details

• Senior Interim Hire : No
• Region : South East
• Requisition Type : 1. New Requirement
• Name of Nominated Worker : (No Value)
• Please provide any additional information specific to this role : (No Value)
• If any professional qualifications are required for the role, please list certificates here: : (No Value)
• Desired Skill 1 : TECH & DIGITAL|Infrastructure
• Desired Skill 2 : (No Value)
• Desired Skill 3 : (No Value)
• Desired Skill 4 : (No Value)
• Desired Skill 5 : (No Value)
• Are there any Health and Safety requirements or hazards associated to this role? : Yes
• If yes, please specify the Health and Safety Considerations : (No Value)
• Is the role in or out of scope of IR35? : In Scope
• Level of screening : DV (Developed Vetting)
• Internal Job Title : Senior Infrastructure Engineer
• Grade : Grade confirmation needed
• AMS Job Category : Technology|Infrastructure Engineer
• Equivalent Permanent Grade : FCDO Services (FCDO S)|Grade confirmation needed
• Armed Forces Covenant Signatory : Unknown
• Disability Confident Level : Unknown
• Business Unit Name Hierarchy : FCDO Services
• Business Unit Code Hierarchy : FCDO S