Senior Infrastructure Engineer UK - Export Finance - G7

Location

Westminster, London

About the job

Job summary

About the Role

We’re looking for a highly skilled Senior Infrastructure Engineer to design, implement, and support the core systems and services that drive value and power UK Export Finance. This is a hands-on, highly technical role with strategic influence, ideal for someone who thrives on solving complex problems and ensuring infrastructure performance, scalability, and security.

You will need exceptional Infrastructure and Platform services experience and working closely with our internal teams, stakeholders and also with managed services providers. You will ensure that KPI’s, SLAs and customer satisfaction targets are consistently achieved.

We are looking for someone who is positive, collaborative and helpful colleague with good attention to detail when working in a fast paced, dynamic government department.

Job description

Main Activities

Be a senior infrastructure engineer for the organisation
Provide Senior Infrastructure support to 500+ colleagues in a variety of locations across multiple different systems
Respond and resolve infrastructure issues, incidents & requests
Architect, deploy, and maintain infrastructure solutions across on-premise and cloud environments (e.g., AWS, Azure).
Lead infrastructure modernization projects, including automation, monitoring, and configuration management that deliver high value to the UKEF business
Provide significant expertise and support of Microsoft Active Directory, Azure Administration, InTune and Office 365 and other windows / infrastructure / Cisco technologies
Ensure high availability, disaster recovery planning, and business continuity processes are implemented and tested regularly
Monitor system performance and reliability, making proactive improvements to prevent outages and optimize usage.
Collaborate with Engineering, DevOps, Security, and IT Operations teams to maintain robust infrastructure standards.
Maintain comprehensive documentation of infrastructure configurations, processes, and procedures.
Partner with Security, Network, DevOps and Business teams to align infrastructure roadmaps. 
Work closely with our internal security and SOC teams to ensure the integrity and security of UKEFS infrastructure
Work closely with managed service providers to deliver our infrastructure services
Ensuring that IT SLAs are met, and IT policies are adhered to by planning, managing, and maintaining workload;
Ensure the Infrastructure team effectively manage customer issues through incident management framework
Maintain good working relationships with key service stakeholders, suppliers and customers to help understand their business requirements and priorities;
Be available for out of hours for high priority technical infrastructure support

 

Additional activities include:

You will be supporting and using technologies such as but not limited to;

Microsoft Azure and Amazon Web Services
GitHub Actions and Azure DevOps
Azure Resource Manager (ARM) templates, BICEP and Terraform.
Docker, Azure Container Apps and Azure Container Registry (ACR)
Azure Cognitive Search
Azure SQL, Azure SQL Managed Instances, Azure MySQL and Cosmos DB.
Azure Monitor   
Cisco Meraki

This list is not exhaustive, and you may be required to carry out additional duties according to business needs.

Person specification

Essential
Qualifications

Microsoft Certified: Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), or DevOps Engineer (AZ-400) (A, I)
ITIL Foundation Certification (A, I)
Advanced or specialist cloud certifications (e.g. Azure Security, DevOps, Networking) are highly desirable (A, I)

Knowledge

Substantial experience with Microsoft Azure (preferred), AWS, or GCP (A, I)
Infrastructure as Code using Bicep, Terraform, or ARM templates (A, I)
Scripting and automation using PowerShell, Bash, or Python (A, I)
CI/CD pipeline management using Azure DevOps, GitHub Actions, or Jenkins (A, I)
Monitoring and observability using Azure Monitor, Log Analytics, and Application Insights (A, I)
Windows Server and Active Directory administration (A, I)
Microsoft Intune and device deployment (A, I)
Networking fundamentals including TCP/IP, VLANs, VPNs, and firewalls (A, I)
Virtualisation and containerisation (e.g. Hyper-V, Docker, Kubernetes) (A, I)
Identity, access, and certificate management (A, I)
Change, incident, and configuration management within an ITIL environment (A, I)
Experience supporting meeting room technologies including Microsoft Surface Hub (A, I)
Cisco Meraki Network Management
PaloAlto Firewall Management

Skills/Ability

Excellent communication skills able to meet the requirements and demands of different stakeholders. (A, I,T)
From the ‘Infrastructure engineer - Government Digital and Data Profession Capability Framework: (A,I,T)
An ability to think critically about systems and to adjust consistently as needed (A, I)

Experience

Enterprise-grade infrastructure design & operations (A, I)
Substantial experience building and running mission-critical environments (physical, virtual and cloud) (A, I)
Proven track record delivering high-availability, multi-site architectures (A, I)
Monitoring and observability using Azure Monitor, Log Analytics, and Application Insights (A, I)
Windows Server and Active Directory administration (A, I)
Microsoft Intune and device deployment (A, I)
Networking fundamentals including TCP/IP, VLANs, VPNs, and firewalls (A, I)
Virtualisation and containerisation (e.g. Hyper-V, Docker, Kubernetes) (A, I)
Identity, access, and certificate management (A, I)
Change, incident, and configuration management within an ITIL environment (A, I, T)
Public cloud migrations & management (A, I,T)
Demonstrable experience with AWS, Azure or GCP hybrid networking, identity & access controls and cost governance (A, I,T)
Linux & Windows Server administration Active Directory/Group Policy, PowerShell DSC, patch management (A, I)
Networking & security SD-WAN, Firewalls (Cisco ASA/Palo Alto), vulnerability scanning (A, I)
Automation & scripting (A, I)
Monitoring, observability & capacity planning (A, I)
Backup & disaster-recovery strategy. Implement and test backups. DR-site failover drills (A, I)
Soft-skills & process discipline with demonstrable analytical/problem-solving mindset, excellent written/verbal communication and the ability to juggle multiple priorities in a matrixed environment (A, I,T)

Demonstrable experience in managing complicated infrastructure and platform environments (A, I,T)

Knowledge and understanding of best practices for service management. (A, I,T)

Experience managing infrastructure incident response and escalation (A, I, T)
Experience managing relationships with senior stakeholders and external partners, being trusted to report accurately against progress and escalate risks and issues to an appropriate level for resolution or mitigation (A, I,T)

Desirable
Qualifications

Bachelor’s degree in Computer Science, Information Technology, Engineering or a closely related field. This provides a solid grounding in systems, networking and software fundamentals.

Knowledge

Security & Compliance Frameworks
Backup, Business Continuity & Disaster Recovery
Government & Procurement Frameworks

An understanding of central government, preferably with experience of delivering IT support in this environment. (A, I)
Experience in designing and implementing Docker images through containerisation  
PaaS, Kubernetes,  oauth2/saml2 integrations in NodeJS
Experience in prototyping through reuse of existing Open-Source components  
An understanding of Information Technology Infrastructure Library (ITIL) and project management methodology. (A, I)

Experience

Experience working in a government or regulated environment (A, I)
Prototyping using open-source components (A, I)
CI/CD pipeline management using Azure DevOps, GitHub Actions, or Jenkins (A, I)
Cost optimisation and governance in cloud environments (A, I)
Collaboration with cross-functional teams including security, architecture, and software engineering (A, I)
Infrastructure as Code using Bicep, Terraform, or ARM templates (A, I)

Qualifications

• Microsoft Certified: Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), or DevOps Engineer (AZ-400) (A, I)
• ITIL Foundation Certification (A, I)
• Advanced or specialist cloud certifications (e.g. Azure Security, DevOps, Networking) are highly desirable (A, I)

Behaviours

We'll assess you against these behaviours during the selection process:

Changing and Improving
Managing a Quality Service
Delivering at Pace

Technical skills

We'll assess you against these technical skills during the selection process:

Technical Questions
Case Study