Infrastructure Security Engineer

Role Overview

We have an exciting opportunity for an Infrastructure Security Engineer to join our Cyber Engineering team, providing technical consultancy, subject matter expertise and service innovation across Microsoft-aligned cyber security offerings, with a particular focus on Active Directory, Windows Server, hybrid identity and platform security.

Working closely with customers, teammates and service leads, you will assess infrastructure and identity security posture, identify risks and control gaps, and develop prioritised, actionable remediation plans that align with business objectives and risk requirements. You will bring strong expertise across Microsoft infrastructure, helping organisations strengthen core identity services, improve platform resilience and reduce risk across hybrid environments.

Responsibilities

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations, contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

About You

• Experienced consultant or engineer, comfortable operating in complex environments and balancing technical requirements with operational impact, user experience and organisational constraints.
• Able to translate security requirements into practical, scalable controls that balance confidentiality, integrity, availability and operational efficiency.
• Strong technical credibility across identity and platform security, providing context-driven recommendations that reflect real-world implementation challenges across Microsoft environments.
• Experience collaborating with technical and business stakeholders to ensure security solutions support organisational objectives and operational needs.
• Clear and effective communicator who translates security risks and control gaps into actionable outcomes, with an interest in service improvement, standardisation and commercially aware delivery.

Knowledge and Experience (Highly Advantageous)

• Proven experience with Active Directory, Entra ID, Windows Server, Group Policy and hybrid identity security.
• Understanding of security baselines, hardening standards and control frameworks used to support risk-based recommendations.
• Experience of phased remediation approaches across identity, infrastructure and platform security controls.
• Working knowledge of Azure DevOps or similar delivery tooling.

Desirable Certifications

• SC-300 (Microsoft Identity and Access Administrator)
• SC-500 (Microsoft Certified: Cloud and AI Security Engineer Associate)
• AZ-104 (Microsoft Certified: Azure Administrator Associate)
• AZ-800 / AZ-801 (Microsoft Certified: Windows Server Hybrid Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)

What We Look for in Our People

• Strong alignment with FSP values and ethos.
• Commitment to teamwork, quality and mutual success.
• Proactivity with an ability to operate with pace and energy.
• Strong communication and interpersonal skills.
• Dedication to excellence and quality.

Who are FSP?

Founded in 2012, FSP Consulting Services (FSP) are a leading enterprise-level digital evolution and cyber security consultancy. We enable peak performance, cultural cohesion and business growth through technology by adopting a comprehensive approach to strategy and creating viable, sustainable and resilient digital futures for organisations and their teams.

At the heart of everything we do is our unwavering commitment to the evolution of organisations and their people. We work in partnership with our clients, helping them become responsive, engaged and supremely equipped for a successful future, blending high-quality business and technology delivery with a dedication to exceptional client experience.

Behind this commitment is a dedicated employee-first strategy, built around our organisation's core values. We are proud to be a multi award-winning workplace, most notably recognised by Best Companies™ as the #1 Best Company To Work For in the UK, Tech and the South East in 2023.

We are ISO 27001 and ISO 9001 certified by UKAS. We are also a CREST approved penetration testing and SOC company, an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified.

Learn more about FSP here: