Senior/Principal Security Infrastructure Engineer

inoverse-groupe; Bristol; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading tech company is seeking a Senior/Principle Security Infrastructure Engineer based in Bristol. This hybrid role demands technical leadership in securing enterprise infrastructure and networks, focusing on compliance and resilience in a multi-technology environment. Key responsibilities include designing secure networks, deploying MFA solutions, and operating SIEM tools. Candidates should have proven experience in enterprise security, especially with Microsoft technologies. Flexible working and career development opportunities are also offered.

Qualifications

• Proven experience in infrastructure or network security within enterprise environments.
• Strong knowledge of Microsoft technologies (Windows Server/Desktop, Active Directory, Group Policy).
• Hands-on experience with MFA, virtualisation, and network security appliances.

Responsibilities

• Design, build and maintain secure on-premises and cloud network and system architectures.
• Harden Microsoft Server/Desktop platforms and Active Directory.
• Deploy and manage MFA solutions for enterprise identity protection.

Skills

Infrastructure security

Network security

Microsoft technologies

MFA deployment

Virtualisation security

SIEM operations

Vulnerability management

Communication skills

Tools

Splunk

Microsoft Sentinel

Qualys

Tenable

Job description

Senior/Principle Security Infrastructure Engineer

Permanent | £70,000 to £90,000 | Bristol (hybrid)

Our client is seeking a Senior/Principle Security Infrastructure Engineer to provide technical leadership and hands‑on expertise in securing enterprise infrastructure and networks. This role focuses on resilience, compliance, and integrity across a complex multi‑technology environment.

Key Responsibilities

• Design, build and maintain secure on-premises and cloud network and system architectures
• Harden Microsoft Server/Desktop platforms, Active Directory, and Group Policies
• Deploy and manage MFA solutions (YubiKey, RSA) for enterprise identity and access protection
• Secure virtualisation platforms (Hyper‑V, VMware) and implement endpoint security (EDR, anti‑malware, DLP)
• Operate and optimise SIEM tools (Splunk, Microsoft Sentinel) for threat detection and incident response
• Perform vulnerability assessments using Qualys and Tenable, driving remediation and continuous improvement
• Align security controls with ISO 27001, NIST, CIS, and Cyber Essentials, supporting audits and compliance

Skills & Experience

• Proven experience in infrastructure or network security within enterprise environments
• Strong knowledge of Microsoft technologies (Windows Server/Desktop, Active Directory, Group Policy)
• Hands‑on experience with MFA, virtualisation, and network security appliances
• Understanding of SIEM operations, vulnerability management, and endpoint protection
• Familiarity with recognised security frameworks (ISO 27001, NIST, CIS, Cyber Essentials)
• Excellent problem‑solving and communication skills
• DV cleared.

A key opportunity to lead technical security initiatives, embed best‑practice controls, and work on strategic infrastructure projects with flexible working and career development opportunities.