[What the role is]

[What you will be working on]

• Maintain the security posture and system hardening for both on-premises endpoints and cloud IT infrastructure (e.g. AWS, Azure), including the management of Government security monitoring services such as the Government Cyber Security Operations Centre (GCSOC) and Automated Baseline Log Review (ABLR).
• Maintain and support IT endpoint and infrastructure security tools, including Microsoft Defender, Secure Service Edge, firewalls, and related technologies.
• Ensure that critical platforms are reliable, scalable, observable, and maintainable; this includes implementing monitoring and observability tools, and leading incident response and root cause analysis to minimise downtime and prevent recurrence.
• Develop scripts, Infrastructure as Code (IaC), and internal tools to reduce manual intervention and improve operational efficiency and recovery times.
• Act as a point of contact with the internal security team on security alerts arising from Security Information and Event Management (SIEM), ABLR, and GCSOC, and represent the team in security-related discussions.
• Participate in infrastructure cyber hygiene reviews with relevant teams and ensure systems comply with recognised standards such as the Centre for Internet Security (CIS), National Institute of Standards and Technology (NIST), and Government Technology Agency Instruction Manual for ICT & SS Management.
• Support regular security assurance activities, including IT audits, penetration testing, and vulnerability assessments, and ensure timely remediation of identified findings.
• Collaborate across teams to implement security policies and controls, ensuring secure, scalable, and repeatable deployment of IT infrastructure.
• Manage procurement, projects, and the lifecycle of platform services, including upgrades, maintenance, and deployment of new infrastructure, ensuring security considerations are embedded throughout.
• Conduct regular reviews of existing on-premises and cloud infrastructure, and provide recommendations to enhance security, performance, and resilience.

[What we are looking for]

• Qualifications in Computer Science, Computer Engineering, or a related discipline.
• At least 5 years of relevant experience in platform reliability engineering and infrastructure security operations, with familiarity in AWS and Azure cloud architecture.
• Strong communication skills, with the ability to articulate complex security concepts and issues to non-technical stakeholders.
• Professional certifications such as CISSP, CEH, AWS, Azure, or other relevant certifications in cybersecurity and platform reliability are advantageous.