28 jobs found

hackajob is collaborating with Leonardo to connect them with exceptional professionals for this role. Job Description: Salary Range: £53,269 - £71,400 Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Your Impact Are you ready to take on complex technical challenges at the forefront of cyber and platform engineering? At Leonardo, our Principal Platform Engineers are hands-on experts who shape the design, integration, and delivery of secure platforms that keep our customers' missions running. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team-centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. Leonardo UK is seeking a Principal Platform Engineer to join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Principal Platform Engineer Act as the technical authority on one of our platform engineering domains (e.g. virtualisation) providing specialist domain expertise to projects and programmes. Lead the design and implementation of secure platforms across on-premise environments. Capture, analyse, and interpret complex customer requirements to drive system design and architecture. Develop high- and low-level designs, ensuring alignment with secure-by-design principles. Take ownership of technical delivery within work packages, including planning, estimation, and progress reporting. Mentor, coach, and develop junior and senior engineers, raising technical capability across the community. Provide input to technology strategies, feasibility studies, and innovation projects. Engage with internal and external stakeholders, presenting technical solutions and justifying design decisions. What you'll bring Extensive technical expertise across multiple platform domains, with a track record of delivering secure solutions. The ability to balance hands-on engineering with technical leadership and mentorship. A problem-solving mindset, able to innovate and recommend the best approach for complex challenges. Core areas (must have): Windows and Linux operating systems Virtualisation platforms (VMware, Hyper-V) VMware Cloud Foundation (VCF) stack (vSphere, vSAN, NSX-T, Aria Suite) Design, build and operation of software-defined datacentre platforms Network virtualisation and micro-segmentation concepts (NSX, platform-integrated) Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation and scripting (PowerShell, Bash, Python, Ansible, Terraform) Knowledge of cyber security controls and accreditation requirements Experience across the systems engineering lifecycle Integration of compute, storage, and network layers into a unified platform Delivery within secure / enterprise / defence environments Desirable: VCAP certifcation Expertise with cloud platforms (AWS) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines VxRail and hyper-converged infrastructure Automation of VCF lifecycle (patching, upgrades, deployment) Integration with enterprise identity and security services (AD, PKI, PAM) Containerisation platforms (Kubernetes, Docker) This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) will apply. This role requires Developed Vetting (DV) clearance prior to starting. For more information and guidance please visit: Location This role will be based at one of our UK sites - Yeovil. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: Award-winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Onsite

hackajob is collaborating with Leonardo to connect them with exceptional professionals for this role. Job Description: Salary Range: £53,269 - £71,400 Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Your Impact Are you ready to take on complex technical challenges at the forefront of cyber and platform engineering? At Leonardo, our Principal Platform Engineers (Technical Specialist Path) are hands-on experts who shape the design, integration, and delivery of secure platforms that keep our customers' missions running. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team-centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. Leonardo UK is seeking a Principal Platform Engineer to join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Principal Platform Engineer Act as the technical authority on one of our platform engineering domains (e.g. virtualisation) providing specialist domain expertise to projects and programmes. Lead the design and implementation of secure platforms across on-premise, hybrid, and cloud environments. Capture, analyse, and interpret complex customer requirements to drive system design and architecture. Develop high- and low-level designs, ensuring alignment with secure-by-design principles. Take ownership of technical delivery within work packages, including planning, estimation, and progress reporting. Mentor, coach, and develop junior and senior engineers, raising technical capability across the community. Provide input to technology strategies, feasibility studies, and innovation projects. Engage with internal and external stakeholders, presenting technical solutions and justifying design decisions. What you'll bring Extensive technical expertise across multiple platform domains, with a track record of delivering secure solutions. The ability to balance hands-on engineering with technical leadership and mentorship. A problem-solving mindset, able to innovate and recommend the best approach for complex challenges. Core areas (must have): Windows and Linux operating systems Virtualisation platforms (VMware, Hyper-V) Privileged Access Management concepts and implementation (CyberArk or similar) Secure credential storage, rotation, and access control models Integration of PAM into enterprise platforms and services Networking concepts (TCP/IP, DNS, DHCP, firewalls) Automation and scripting (PowerShell, Bash, Python, Ansible, Terraform) Knowledge of cyber security controls and accreditation requirements Experience across the systems engineering lifecycle Design and implementation of privileged access models across complex systems Delivery within highly controlled / secure environments (e.g. air-gapped, defence) Desirable: Expertise with cloud platforms (AWS, Azure) and Infrastructure as Code Experience integrating enterprise services (Active Directory, PKI, monitoring, SIEM) Hands-on use of DevSecOps tools and CI/CD pipelines Automation of account onboarding/offboarding (API-driven) Integration with SIEM / SOC tooling for audit and monitoring Containerisation platforms (Kubernetes, Docker) Experience working with enterprise identity and access management solutions Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) will apply. This role requires Developed Vetting (DV) clearance prior to starting. For more information and guidance please visit: Location This role can be based at one of our UK sites Yeovil. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: Award-winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Onsite

hackajob is collaborating with Leonardo to connect them with exceptional professionals for this role. Job Description: Salary Range: £44,171 - £61,950 Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Your Impact Are you ready to take the next step in your engineering career and lead the delivery of critical platforms that protect national security? At Leonardo, our Senior Platform Engineers combine technical expertise with leadership, driving the design, integration, and support of complex systems that underpin our customers' missions. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team-centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. Leonardo UK is seeking a Senior Platform Engineer to join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Senior Platform Engineer Lead the design, build, and support of secure platforms on-premise and hybrid environments. Take ownership of engineering delivery for one or more work packages, including planning, estimation, execution, and reporting. Develop and review system architectures, low-level designs, and technical documentation. Integrate and test platform components, ensuring compliance with security and performance requirements. Provide mentoring, guidance, and technical leadership to Platform Engineers and Technicians. Collaborate with stakeholders, project teams, and customers to ensure solutions meet requirements. Drive continuous improvement initiatives and contribute to internal engineering standards. What you'll bring Strong technical ability with experience of delivering and supporting complex platforms. Ability to balance hands-on engineering with technical leadership and mentoring responsibilities. Confidence to take ownership of solutions and represent engineering in technical discussions. Core areas (must have): Windows and Linux (RHEL) operating systems administration and engineering Virtualised infrastructure (VMware / Hyper-V) design, build, and support Platform hardening, patching, and security compliance across Windows and Linux environments Enterprise identity and access integration (Active Directory, Group Policy, LDAP concepts) Automation and configuration management (PowerShell, Bash, Ansible, or similar) Networking concepts (TCP/IP, DNS, DHCP, routing, firewalls) Knowledge of cyber security controls and accreditation requirements Experience across the systems engineering lifecycle Integration of compute, storage, and virtualisation layers into a unified platform Delivery within secure / enterprise / defence environments Desirable: RHEL ecosystem tooling (e.g. Satellite, lifecycle management) Windows enterprise services (e.g. AD advanced config, Group Policy design) Virtualisation platform depth (VMware stack, clustering, HA/DR) Performance tuning and troubleshooting across Linux and Windows systems Container platforms (Kubernetes / OpenShift / Docker) Integration with enterprise services (PKI, PAM, monitoring, backup) Automation at scale (Infrastructure as Code, pipelines) Experience supporting mixed OS environments in secure or regulated contexts This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) will apply. This role requires Developed Vetting (DV) clearance prior to starting. For more information and guidance please visit: Location This role will be based at one of our UK sites - Yeovil. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: Award-winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Onsite

Solution Architect - PAM/PAW 6 Months Hybrid/London - 2 days per week on site (Apply online only) per day (Inside IR35) My client in the telecommunications industry are looking for a Solution Architect to join their fast-paced team on an initial 6 month contract. The ideal candidate will have hands-on experience, structured thinking, strong communication skills, and the ability to operate in a complex enterprise environment. The selected candidate MUST HAVE Privileged Access Management/Privileged Access Workstations experience The Solution Architect will be responsible for defining and owning the end-to-end solution architecture for PAM and PAW across the programme. The role will ensure that the solution is secure, scalable, compliant, operationally supportable, and aligned with the business' enterprise architecture, security standards, and programme objectives. Key Responsibilities Own the end-to-end PAM / PAW solution architecture for the assigned workstream. Define the target-state architecture, including integration with identity platforms, network systems, access controls, monitoring, and operational tooling. Assess current-state privileged access processes and identify gaps, risks, and required changes. Translate business, security, operational, and compliance requirements into a practical solution architecture. Work closely with security, network, infrastructure, operations, and application teams to ensure architectural alignment. Define architecture principles, design patterns, security controls, and implementation guardrails. Support decision-making around PAM tooling, PAW standards, access models, and integration approaches. Ensure the solution supports audit, regulatory, and governance requirements. Identify architectural risks, dependencies, and constraints, and propose mitigation options. Provide technical leadership to designers, engineers, PMs, BAs, and delivery teams. Produce and maintain key architecture artefacts, including high-level designs, architecture diagrams, options papers, and decision records. Present solution options, recommendations, and risks to senior stakeholders and governance boards. Ensure the solution is fit for transition into BAU operations. Required Skills and Experience Strong experience as a Solution Architect in security, identity, network, or infrastructure programmes. Good understanding of Privileged Access Management concepts, including privileged accounts, session management, credential vaulting, least privilege, access approval workflows, and audit logging. Good understanding of Privileged Access Workstation concepts, including hardened workstations, admin tiers, secure access models, and separation of privileged and standard user activities. Experience working in complex enterprise or telecom environments. Strong understanding of network environments, operational support models, and security governance. Ability to convert complex security and operational requirements into practical solution designs. Experience working with senior stakeholders, architecture review boards, cyber security teams, and operations teams. Ability to take ownership, drive decisions, and remove ambiguity. Desirable Skills Experience with PAM tools such as CyberArk, BeyondTrust, Delinea, or similar. Experience with Microsoft security technologies, Active Directory, Entra ID, conditional access, device hardening, or endpoint management. Experience in Solution Architecture, separation, migration, divestment, or integration programmes. Knowledge of telecom network operations and privileged access controls. Expected Outcomes Approved PAM / PAW target architecture. Clear architecture decisions and design principles. Identified risks, dependencies, and mitigation plans. Architecture aligned with company security and operational standards. Solution ready for detailed design, delivery, and operational handover. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

Solution Designer - PAM/PAW 6 Months Hybrid/London - 2 days per week on site (Apply online only) per day (Inside IR35) My client in the telecommunications sector are looking for a Designer to join their fast-paced team on an initial 6 month contract. The selected candidate MUST HAVE Privileged Access Management/Privileged Access Workstations design experience The Solution Designer will be responsible for developing detailed designs for the PAM and PAW solution based on the approved architecture. The role will convert high-level architecture into implementable designs, ensuring that the solution can be built, tested, deployed, and supported effectively. Key Responsibilities Produce detailed technical designs for PAM and PAW implementation. Translate architecture principles and requirements into build-ready design specifications. Define user access flows, privileged account onboarding models, workstation access patterns, and integration requirements. Design PAM onboarding processes for privileged accounts, network devices, platforms, and administrative users. Define PAW configuration requirements, including device hardening, access restrictions, connectivity, monitoring, and support processes. Work with network, security, infrastructure, endpoint, identity, and operations teams to validate the design. Identify design-level risks, gaps, assumptions, and dependencies. Support engineers and implementation teams during build, test, and deployment. Ensure designs include operational considerations such as support model, monitoring, logging, incident handling, and access review. Produce detailed design documents, interface specifications, workflow diagrams, and configuration guides. Support test planning, defect resolution, and design clarification during implementation. Ensure the design is compliant with security policies, audit requirements, and regulatory expectations. Required Skills and Experience Strong technical design experience in security, identity, infrastructure, or network environments. Practical understanding of PAM and PAW concepts and implementation considerations. Experience designing secure access solutions for privileged users and administrators. Understanding of network access, firewall rules, remote access, jump servers, hardened workstations, and administrative access paths. Ability to produce clear, detailed, and implementation-ready technical documentation. Experience working with architects, engineers, testers, PMs, BAs, and operations teams. Strong problem-solving skills and ability to work through complex technical dependencies. Ability to take ownership of design deliverables and drive them through review and approval. Desirable Skills Experience with PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar. Experience with endpoint security, device hardening, Active Directory, Entra ID, Intune, SCCM, or similar tooling. Experience in telecom, managed services, or large enterprise security programmes. Experience with TSA, migration, separation, or transformation programmes. Expected Outcomes Approved low-level designs and detailed design documents. Clear implementation guidance for PAM and PAW deployment. Defined onboarding, access, support, and operational processes. Design risks and dependencies actively managed. Implementation teams enabled to build and deploy the solution successfully. Other Transferable Skills Required Strong understanding of PAM and PAW concepts. Experience in complex enterprise, network, infrastructure, security, or telecom environments. Ability to work across multiple teams and manage ambiguity. Strong stakeholder management and communication skills. Ability to own deliverables and drive outcomes. Good understanding of governance, risk, compliance, and operational readiness. Ability to identify risks, dependencies, and blockers early. Strong documentation and presentation skills. Experience working in high-pressure, time-sensitive delivery environments. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

Platform Engineer Hybrid 3 days onsite 2 days remote 5-Month Contract Warwickshire VIQU is seeking an experienced Senior Hybrid Platform Engineer / Technical Lead to join a major enterprise customer based in Warwickshire. This is an exciting opportunity to lead the evolution of a complex hybrid platform environment, with a strong focus on Microsoft Azure (approximately 75%) supported by on-premises infrastructure (approximately 25%). We're looking for a technically hands-on engineer who can drive platform transformation, lead infrastructure change, and support business-critical production environments. This role requires strong Azure expertise alongside solid VMware and on-prem infrastructure experience, with Terraform playing a key role in platform automation. The Role As the technical lead for platform engineering initiatives, you will own technical design decisions from concept through to implementation. You'll play a key role in modernising enterprise infrastructure, supporting Azure platform transformation, and ensuring services remain secure, resilient and highly available. Key Responsibilities Lead technical design and delivery of hybrid platform and infrastructure changes. Drive Azure platform modernisation, including migration from legacy Azure Landing Zones. Manage and support enterprise Azure services across compute, networking, storage, identity and security. Maintain hybrid connectivity between Azure and on-premises infrastructure. Support and administer Windows Server environments, including Active Directory, DNS, DHCP and Group Policy. Manage and maintain VMware vSphere/ESXi infrastructure. Implement and maintain Infrastructure as Code using Terraform. Lead incident resolution, troubleshooting and root cause analysis across hybrid platforms. Collaborate with Architecture, Security and Engineering teams to deliver platform improvements. Produce technical documentation, operational procedures and platform standards. Essential Skills & Experience Strong commercial experience supporting enterprise Microsoft Azure environments. Hands-on experience with Azure Networking, Compute, Storage, Entra ID (Azure AD), Security and Governance. Strong experience implementing Infrastructure as Code using Terraform. Proven VMware vSphere/ESXi administration experience. Strong Windows Server infrastructure knowledge including Active Directory, DNS, DHCP and Group Policy. Experience supporting hybrid cloud environments and integrating Azure with on-prem infrastructure. Experience supporting business-critical production platforms. Excellent troubleshooting, problem-solving and root cause analysis skills. Experience leading technical infrastructure or platform initiatives. Strong communication and stakeholder management skills. Desirable Skills Azure Landing Zone design and migration experience. AWS exposure. Monitoring and observability tooling. ITIL knowledge. Microsoft Azure or VMware certifications. Experience working within enterprise or regulated environments. Key Technologies Microsoft Azure, Terraform, VMware vSphere/ESXi, Windows Server, Active Directory, Entra ID, Azure Networking, Azure Landing Zones, DNS, DHCP, Group Policy, Hybrid Cloud, Infrastructure as Code, AWS (desirable). If you're an experienced Hybrid Platform Engineer with deep Azure expertise, strong VMware knowledge and proven Terraform experience, we'd love to hear from you. Apply now to speak with VIQU IT in confidence. Or reach out to Phoebe Thompson via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.

Job title: PKI Architect Duration: 9 months Clearance required: DV or DV Eligible Rate: To be discussed Location: Hybrid, onsite in Corsham twice a week Specification: Below Overview: An experienced Public Key Infrastructure (PKI) Architect and Subject Matter Expert (SME) is required to lead the design, build, integration and assurance of PKI services within secure, offline (air gapped) environments. The post holder will provide technical leadership to deliver a robust, resilient and compliant cryptographic trust service in support of a UK secure account, working predominantly from customer sites within controlled environments. The role demands proven experience designing and implementing PKI platforms for high-assurance use cases, including certificate life cycle management, cryptographic policy enforcement, secure key management, and integration with enterprise services and security controls. Key Responsibilities: Lead the architecture, design and delivery of PKI platforms operating in offline/disconnected networks, ensuring solutions are secure, supportable and auditable. Define and implement PKI components, including (as applicable): Root CA (offline), Issuing CAs, Registration Authorities (RA) OCSP/CRL services and distribution models suitable for disconnected environments Certificate templates, enrolment policies, and certificate life cycle processes Develop secure and repeatable mechanisms for certificate and revocation data transfer into/out of air gapped environments in accordance with approved processes. Establish and maintain cryptographic governance, including certificate policy and certificate practice statements (CP/CPS) where required, and alignment to programme security requirements. Design secure key management processes, including key generation, storage, backup, escrow (if authorised), destruction, and compromise handling. Define operational models, including role separation, dual control, and privileged administration, aligned to security policy and audit requirements. Produce and maintain formal design and assurance documentation and provide technical input into risk assessments and accreditation evidence packs. Support the integration of PKI services with enterprise capabilities (as applicable), including: Microsoft Active Directory Certificate Services (AD CS) and Group Policy distribution 802.1X/NAC, VPN, TLS for internal services, code signing, device identity Provide technical leadership for troubleshooting, incident support, root cause analysis, and continuous improvement of PKI services. Engage with internal and external stakeholders at all levels, including security, infrastructure, delivery teams and customer representatives, primarily on-site within secure facilities. Required Skills & Experience: Demonstrable experience operating as a PKI Architect or senior PKI SME within complex enterprise environments. Proven experience designing and building PKI platforms in offline/air gapped environments, including handling of: Controlled import/export processes Revocation publishing strategies (CRL/OCSP) for disconnected networks Secure media handling and procedural controls Strong knowledge of PKI concepts and implementation including: X.509 certificates, trust chains, certificate policies, key usage and extended key usage Certificate life cycle management (issue, renew, revoke, recover, replace) CRL/Delta CRL design, OCSP stapling considerations (where applicable) Strong understanding of cryptography fundamentals and operational security, including: Algorithm selection and key sizes appropriate to policy HSM design/operations (preferred), secure key ceremonies, tamper controls Role-based administration, segregation of duties, dual control Experience with designing secure operational models (build, run, audit), including: Break-glass and recovery arrangements Compromise response procedures Monitoring, logging and evidence generation Demonstrable experience producing formal technical documentation, including: High-Level Designs (HLDs) Low-Level Designs (LLDs) Security architecture documentation Standard Operating Procedures (SOPs), runbooks, and key ceremony scripts Strong stakeholder engagement and communication skills, including the ability to brief technical and non-technical audiences. Government Security Standards: The post holder must be able to design and assure solutions in alignment with relevant UK Government security policies and guidance, including (as applicable to the programme): JSP 440 - Defence Manual of Security JSP 604 - Network Rules and Design Principles JSP 453 - Information Assurance Policy (where applicable) NCSC Cyber Security Design Principles and applicable NCSC guidance for secure configuration and cryptographic services MOD-aligned Secure by Design principles following NIST framework and MOD Security framework, and evidence-based assurance in support of accreditation Desirable: Experience working within the Defence and/or Aerospace sector, including delivery into regulated, high-assurance environments. Experience with Microsoft AD CS architectures (offline root, issuing CA tiers, template governance) and/or other enterprise PKI stacks. Experience implementing PKI for: Device identity (workstations/Servers), user authentication, mutual TLS, code signing, S/MIME (as required) Familiarity with HSM operations and assurance requirements and conducting or supporting key ceremonies. If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion. At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.

Enable Technology Borehamwood Full-time Optional WFH Fridays The role You're the engine room of our service desk: the incidents 1st line can't crack land with you, and most of them should never need to go further. You'll own problems through to root cause, deliver project work alongside reactive support, and help 1st line engineers become better than they were last month. This role is the bridge between keeping clients running today and engineering the desk we're building for tomorrow. Who we are We're Enable Technology, a Borehamwood-based MSP of around 20 people, supporting a diverse and growing SME client base across London and the South East. We act as far more than an IT supplier to our clients - for many of them we're their virtual IT director, shaping strategy as well as keeping the lights on. We're independent, profitable and entirely free of private equity ownership. Technical decisions here are made on operational merit, not quarterly EBITDA targets - and our CEO has over 25 years of enterprise IT leadership behind him, so good technical arguments win. And the team is the reason people stay. We're a genuinely friendly, supportive and helpful bunch: engineers here back each other up by default, questions are welcomed rather than judged, and nobody gets left to struggle alone on a hard ticket. It's a culture we protect deliberately as we grow - and it's the first thing you'll notice when you walk in. Where we're heading We're building an automation-first, AI-enabled MSP - proactive by design, not reactive break-fix. Our platform is HaloPSA for service management, NinjaOne for RMM, CIPP for Microsoft 365 security automation, and Hudu for documentation. Self-healing scripts, intelligent alerting and predictive maintenance aren't buzzwords here; they're how we're evolving the business. For you, that means your fixes shouldn't stay one-off fixes - when you resolve something twice, we want it documented, and ideally automated, so it never comes back. What you'll actually be doing Owning escalated incidents through to resolution - servers, networks, M365, endpoints - and performing root-cause analysis so issues stay fixed Windows Server and infrastructure work: Active Directory, GPO, file services, hybrid Entra ID environments Intune and Conditional Access policy work - device compliance, application deployment, security baselines Resolving complex NinjaOne monitoring alerts and contributing to smarter alert thresholds and remediation scripts Delivering project work: M365 migrations, Intune rollouts, client onboardings, infrastructure upgrades Mentoring 1st line engineers - reviewing escalations, coaching diagnostic technique, improving the quality of the whole desk Feeding Hudu with runbooks and documentation that make the next engineer faster Our stack Service management: HaloPSA (PSA and ticketing), Hudu (documentation and knowledge base) Monitoring and automation: NinjaOne RMM, CIPP for multi-tenant Microsoft 365 security Microsoft cloud: Microsoft 365, Exchange Online, SharePoint, Teams, Intune, Entra ID, Conditional Access Infrastructure: Windows Server, Active Directory/GPO, hybrid environments, firewalls, routing and VPN Also in the mix: macOS and Jamf, Mimecast, hosted telephony What you'll bring 3+ years in commercial IT support, including time in an MSP environment Strong Microsoft 365 administration: Exchange Online, Intune, Entra ID, and ideally Conditional Access Solid Windows Server and Active Directory experience - comfortable in hybrid on-prem/cloud environments Networking beyond fundamentals: routing, VPN configuration, firewall basics A structured troubleshooting methodology - you can explain how you approach a problem you've never seen Clear, patient communication with non-technical users, and the professionalism clients remember Bonus points PowerShell scripting - reading and modifying scripts now, writing them soon Azure infrastructure exposure RMM platform experience (NinjaOne, Datto RMM or similar) Microsoft role-based certifications (MD-102, MS-102, AZ-104 or similar) Experience with macOS/Jamf or firewall administration Building your IT career There's no better place to forge an IT career than an MSP. In an internal IT team you learn one environment; here you'll work across dozens of clients, industries and technology stacks, so you compress years of experience into months. Different infrastructures, different problems, different people - it's the fastest way to build genuine range as an engineer, and it's why so many of the best people in IT started at an MSP. Within Enable, our service desk runs on a clear 1st - 2nd - 3rd line ladder, and we're scaling from around 20 to 40 staff over the next two years - so the roles above you are being created, not waited for. We promote on capability, not tenure. The expected path from this role is 3rd line - taking ownership of architecture, automation design and the hardest escalations - or a projects specialism if delivery is where you shine. Either way, the step up exists here and is taken on merit. Pay, benefits and working pattern Salary: 35,000 - 42,000 DOE Holiday: 22 days, plus a day off for your birthday (or the nearest weekday) Working pattern: office-based in Borehamwood, with optional work-from-home Fridays; core hours 09:00-17:30 Perkbox: employee perks platform, with guaranteed points for your birthday and work anniversary Team culture: weekly team takeaway lunch and quarterly socials Kit: modern, top-tier hardware and software - the same standard we hold for our clients Training: vendor-led training on HaloPSA, NinjaOne and CIPP, plus funded certifications tailored to your development Why you should apply Plenty of MSPs will let you close tickets forever. Here, 2nd line is where you develop range: infrastructure, cloud, automation, projects and mentoring, with a genuine route to 3rd line as we scale. If you want your next role to stretch you rather than repeat you - apply.

TransUnion's Job Applicant Privacy Notice Team Overview The Global Business Platforms team is responsible for the operational stability, release management, governance, and ongoing optimisation of key business platforms deployed across the UK region. The team partners closely with global and regional stakeholders to ensure secure, compliant, and reliable platform delivery. This role reports into Senior Director of Platform Engineering. Role Overview And Core Responsibilities Leading the regional execution of major, minor, and emergency releases through automated CI/CD pipelines, ensuring timely, controlled, and high-quality deployments. Coordinating post-deployment validation with Global Platform testers, ensuring issues are identified, documented, and resolved efficiently. Supporting and deputising for the Operations and Technical Release Manager across the full CAB ticket lifecycle, maintaining deployment traceability and compliance. Leading and prioritising Kanban workflows in partnership with the Operations and Technical Release Manager, supporting effective tracking and continuous improvement of release processes. Coordinating regression testing and change activity for Global Business Platforms deployed in the UK region, ensuring updates are validated, documented, and aligned with stakeholder requirements. Providing technical leadership for platform operations, monitoring, incident management, and escalation processes to ensure compliance with SLAs, SLOs, RTOs, and service commitments. Acting as the technical lead for critical and high-severity incidents, representing the team on incident bridges and supporting timely service restoration. Coordinating post-incident reviews with global and regional teams, documenting lessons learned and driving corrective actions to prevent recurrence. Leading risk, compliance, and audit-related activities for UK-deployed Global Business Platforms, ensuring proactive mitigation, audit readiness, and ongoing operational resilience. Driving continuous improvement by analysing release, testing, incident, and platform performance outcomes, identifying risks, and implementing process enhancements. Required Knowledge And Experiences Proven experience in technical leadership roles within cloud-native, containerised environments, with experience delivering and supporting complex solutions at scale. Strong understanding of release, deployment, testing, change, incident, problem, risk, compliance, and governance processes within a regulated operational environment. Experience managing production platforms against service commitments, including SLAs, SLOs, RTOs, monitoring, escalation, and 24x7 out-of-hours support requirements. Ability to translate high-level architectural blueprints into detailed low-level designs and support secure, scalable, and reliable platform delivery. Excellent communication, stakeholder management, mentoring, and cross-functional collaboration skills, with the ability to build team capability and drive technical excellence. Required Technical Skills Strong expertise in Kubernetes, including managing and supporting GKE (Google Kubernetes Engine) clusters, containers, and Helm charts in production environments. Strong GCP experience across cloud networking, load balancing, traffic management, Google Cloud Storage, compute services, and Dataproc cluster administration. Hands-on experience with CI/CD pipeline management using Harness, infrastructure automation with Terraform, and integration with Harness IaC pipelines. Experience with monitoring, observability, and security tooling, including GCP Native Observability, Prometheus, Grafana, OpenTelemetry, Wiz, HashiCorp Vault, and CheckMarxOne or similar tools. Strong working knowledge of platform and data technologies including PostgreSQL, Redis, Kafka, Ping and/or Keycloak IAM, Kong APIM, Cloudflare, and application security best practices. What's in it for you? At TransUnion you will be joining a friendly, forward thinking global business. As well as an excellent salary and bonus scheme or commission scheme (if joining our sales teams) our benefits package comes with: 26 days annual leave and bank holidays (increasing with service) Global paid wellness days off and a bonus day off to celebrate your birthday A generous contributory pension scheme and access to the TransUnion Employee Stock Purchase Plan Private health care and a variety of physical, mental and financial fitness wellbeing programmes such as access to mindfulness tools Access to our diversity forums and communities so you can get involved in causes close to your heart TransUnion - a place to grow: If there's something on the list of essential or desirable skills that you can't quite tick off, don't let that stop you from applying. We are open to exploring training and development opportunities for the right candidate to ensure you are successful. We know imposter syndrome is real, lets confront it so we can continue to grow and thrive together. Flexibility at TU: We recognise that our people need the freedom to balance their day-to-day lives with their work. This is why we've set out to create inclusive and flexible policies and practices for you to accommodate all your responsibilities and needs: children, family and beyond. If the role is advertised as full time, don't let this stop you from applying. Let us know if you're looking for a part time or flexible working arrangement and we can discuss this with you. Additional support: At TransUnion, we're committed to fostering an inclusive and diverse workplace where all individual's talents and perspectives are valued. When you apply for a position with us, you're not just joining a team, you're becoming part of a community that celebrates differences and embraces equality. We understand that everyone has different needs, which is why we offer a range of reasonable adjustments to our recruitment process. Please let us know if you require any reasonable adjustments to help you through the application process or to attend an interview with us by contacting (url removed) . Interview & Hiring Process: Most of our recruitment processes are virtual, so you'll get to know our hiring managers and teams over the phone and through video. If we need you to attend a physical in person interview, your recruiter will inform you of this. We do not accept any unsolicited CV's from recruitment agencies. If you are a recruitment agency on our PSL, our talent team will contact you directly should we require any assistance. Find out more about Life At TU UK: (url removed) (url removed)/ TransUnion Overview: At TransUnion, we encourage and are committed to creating a real, positive impact and shared sense of purpose within our Workforce for Good, which empowers our people to grow, innovate and contribute to a better future for our communities and customers. We strive to build an environment where our associates are in the driver's seat of their professional development- while having access to help along the way. We recognize that success comes when our associates thrive both professionally and personally; that's why we prioritize work/life flexibility and offer resources for our teams across the globe to collaborate and drive excellence. Be a part of our Workforce for Good - you'll work with great people, pioneering products and cutting-edge technology. TransUnion Job Title Advisor, Software Development

Lead Technical Architect (SC Cleared) 36-Month Programme | Extension Reviews Every 6 months Hybrid Travel Required Across UK Delivery Locations The Opportunity We are seeking an experienced Lead Technical Architect to take ownership of the technical strategy and architecture for a major national-scale data andanalytics transformation programme. This position represents the highest level of technical authority within the delivery organisation and will be responsible for shaping the long-term architectural direction of a modern cloud-based data platform. The successful candidate will provide strategic leadership across architecture, engineering, infrastructure, platform operations, security, and governance, ensuring all solutions align with enterprise standards and future business objectives. Working closely with senior stakeholders, governance bodies, and technical leadership, you will define architectural principles, guide technical decision-making, oversee assurance activities, and establish the frameworks that will support the platform throughout itslifecycle. This is a long-term programme engagement offering an initial 36-month contract, with programme reviews and extension opportunities conducted on a rolling six-month basis. Key Responsibilities Enterprise Architecture Leadership Define and maintain the overarching technical architecture roadmap for a large-scale cloud-native data platform. Establish architectural standards, patterns, and governance frameworks across engineering, infrastructure, security, platform services, and DevOps capabilities. Ensure alignment between business objectives and technical delivery throughout the programme life cycle. Technical Governance & Assurance Act as the senior technical representative for architecture governance, design review boards, assurance forums, and technical approval processes. Produce, review, and defend architecture submissions, technical designs, and assurance responses. Provide authoritative guidance on architectural decisions, technical risk management, and solution direction. Strategic Platform Design Lead architectural design activities for highly complex and business-critical platform components. Define approaches for enterprise-scale data governance, data sharing, multi-domain collaboration, capacity planning, tenancy architecture, and security controls. Guide the evolution of platform capabilities to support future organisational requirements. Leadership & Mentoring Lead and mentor a team of architects operating across multiple workstreams. Conduct design reviews and ensure architectural consistency across all programme deliverables. Drive quality standards for architecture artefacts including High-Level Designs (HLDs), Low-Level Designs (LLDs), and technical standards documentation. Stakeholder Engagement Build trusted relationships with senior technical leaders, enterprise architects, programme directors, and executive stakeholders. Present architectural recommendations and technical options to both technical and non-technical audiences. Influence long-term technology strategy and future platform investments. Non-Functional Architecture Define and manage non-functional requirements including: Performance Scalability Security Resilience Availability Cost optimisation Disaster Recovery Ensure compliance with agreed standards throughout design, build, testing, and operational readiness phases. Knowledge Transfer & Capability Development Establish architectural documentation standards and reusable design patterns. Support internal teams through coaching, mentoring, and knowledge transfer activities. Ensure architecture decisions and operational guidance are fully documented for long-term sustainability. Essential Experience Applicants must demonstrate extensive experience operating at Lead Architect, Principal Architect, or Enterprise Architect level within large-scale cloud and data transformation programmes.You will possess: Significant experience defining enterprise architecture for cloud-native data platforms. Deep expertise across Microsoft Fabric including: Lakehouse architecture Data Warehousing OneLake Real Time Analytics Fabric Networking Capacity Planning Multi-workspace governance Strong understanding of modern Azure data services, including: Azure Data Factory Azure Data Lake Storage Gen2 Azure Databricks Azure Synapse Analytics Delta Lake Extensive experience implementing enterprise data governance solutions and metadata management frameworks. Strong knowledge of architecture governance, design assurance processes, and enterprise architecture controls. Extensive experience designing secure cloud platforms using: Zero Trust principles Identity and Access Management Network segmentation Private networking strategies Security monitoring and threat protection services Proven experience producing and presenting architecture documentation for senior governance audiences. Strong understanding of Infrastructure-as-Code and modern delivery pipelines using technologies such as Terraform and Bicep. Experience supporting Real Time data processing and event-driven architectures. Desirable Experience The following would be advantageous: Leading migration programmes from Legacy on-premise data environments to cloud-based platforms. Enterprise Architecture frameworks such as TOGAF. Experience working within highly regulated public sector or government environments. Knowledge of UK government security and compliance frameworks. Familiarity with large-scale data management, analytics, and digital transformation initiatives. Experience defining strategic technology roadmaps for multi-year delivery programmes. Required Certifications Essential Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Desirable Microsoft Certified: Azure Data Engineer Associate (DP-203) Microsoft Fabric Analytics Engineer Associate (DP-600) TOGAF Practitioner or Certified Microsoft Certified: Cybersecurity Architect Expert (SC-100) Equivalent experience may be considered where appropriate. Clearance Requirement Active Security Check (SC) Clearance is mandatory. Candidates must hold live SC clearance at the point of application and be eligible to maintain clearance throughout the duration of the engagement.

Job Title Infrastructure Engineer Location Swinton, Manchester wih potential for hybrid working Reports to (direct) Head of Infrastructure Salary £45-50k p.a., pension, 24 days holidays Our client, a UK based consulting company, has established an exciting opportunity for an Infrastructure Engineer to work with the infrastructure team to implement, maintain, optimise and support multi-site Infrastructure on-prem and, potentially in the cloud. Candidates will: - utilise expertise with Windows Servers, Azure cloud, VMware hypervisors and SAN storage to maintain business continuity. - take part in incident escalations to recover or prevent business disruptions. - Proactively assist in capacity, disaster recovery and business continuity planning. Roles and Responsibilities Work with and be part of the infrastructure team to ensure business objectives are achieved. Implement, manage and support the internal IT Infrastructure at an enterprise level. Proactively support the business and ensure hardware and software systems are patched and up to date. Daily use of the company ticketing system to respond, communicate and document incidents, problems and service requests in a timely and professional manner. Create, update and maintain installation, implementation, maintenance and configuration documentation as needed. Support the wider business by ensuring system performance, uptime, customer SLA's and internal metrics are met. Abide by and comply with company compliance standards, policies, guidelines and or procedures. Support multiple environments; on-prem office, datacentre, virtual environments, networks, physical and or cloud solutions as required. Participate in paid out of hours support as part of the On-call rota. Occasional travel required between offices and datacentres. Required skills, knowledge & experience Possess at least 5 years experience in a hands-on enterprise Infrastructure support role. Excellent understanding and experience managing Active Directory. Certified in at least one of the following: MCSA Windows server VCP Cloud Foundation Azure Administrator Associate SIgnificant experience in respect of Microsoft Server, Virtualisation (VMWare and/or Proxmox and SAN setup/configuration. Ability to attain relevant security clearance (SC clearance). Working knowledge of HA, DR and N+1 enterprise architecture. Excellent organisational, prioritisation and time management skills. Must be able to work under pressure. Ability to research and recommend solutions for technical issues. Must stay current in knowledge of IT technologies, solutions and best practices. Working experience with cloud platforms. Excellent problem-solving skills. Be able to communicate complex technical details to a non-technical audience. Desirable skills, knowledge & experience: Certified in one of the following: CCNA, MCSE, VCP Datacentre and or Azure Architect. Experience with SQL and clusters. Windows Cluster management experience. Administration of Load balancers. Knowledge of Infrastructure and application security.

Job Description Home Based (with occasional UK travel) Competitive Salary + benefits + bonus + car allowance Here at Sysco GB our HR function is going through significant change and transformation, with investment in people, processes and systems, which has created a fantastic opportunity for a Reward Business Partner to join our team who will ensure our business remains competitive to attract talent, retain our colleagues and support our recipe for growth. As the Reward subject matter expert for Sysco GB, reporting to the Director of HR Operations you will work collaboratively with the Global Reward Team, HR Business Partners and Centres of Excellence to shape and embed a forward-looking reward strategy. You will leverage Workday to drive compensation outcomes, maintain robust governance and compliance, and lead key strategic initiatives including Gender Pay Gap reporting and action planning. The role is home based with some travel to sites and comes with a competitive base salary, attractive car allowance, annual bonus scheme, pension, private healthcare, additional holiday purchase scheme, award-winning products at virtually cost price and a range of range of employee perks through our online benefits platform. Key Responsibilities Develop, implement and deliver the Sysco GB Reward Strategy, ensuring alignment with business objectives and the wider people strategy. Act as the primary reward lead covering GB and key point of contact for the Global Reward Team, ensuring effective collaboration, alignment and execution of global reward initiatives within Sysco GB. Partner closely with HR Business Partners, Centres of Excellence (Talent and Development, DEI, Recruitment and HR Operations) and business leaders to develop, embed and continuously evolve reward solutions that support organisational performance and engagement. Work in partnership with Global Reward Team to implement compliant reward processes, policies and procedures to ensure effective execution of key reward activities across the organisation. Support HR Directors across GB with compensation benchmarking, ensuring alignment with Sysco total reward principles and source relevant market salary surveys to meet specific business needs. Represent Sysco GB in external pay and benefits surveys and develop strong external networks to maintain market awareness and reward best practice In collaboration with Finance and HRBP provide input into the principles on design of local incentive progress, ensuring a robust governance process is in place for target setting and performance tracking, and develop an appropriate communication plan to keep participants engaged. Drive continuous improvement within reward-related processes, maximising the use of technology, including Workday, to increase efficiency, enhance data quality, strengthen governance and support compensation outcomes. In collaboration with the Global Reward Team, lead all cyclical remuneration processes, including annual pay reviews, legislative pay reporting, incentive schemes, and salary benchmarking, providing expert guidance and insight throughout. Act as the Sysco GB subject matter expert for Workday Advanced Compensation, driving continuous enhancement of compensation planning processes and functionality, and ensuring alignment with global standards and local business requirements. In partnership with GB Benefits, support the review, design and development of reward and benefits programmes, ensuring they remain competitive, commercially effective and aligned to business needs. Lead the annual Gender Pay Gap reporting ensuring alignment to evolving legislation and incorporating data analysis, narrative development, action planning and stakeholder engagement to drive meaningful progress and ensure statutory compliance. Provide expert advice and guidance on all reward matters, ensuring the business remains legally compliant and aligned with best practice, including preparation for Trade Union engagement. Chair and actively participate in the monthly Job Evaluation Panel, ensuring consistency and governance in role evaluation decisions and alignment with Sysco job architecture and grading approach. Maintain accountability for SOX controls and governance requirements across all Reward processes. Support internal and external audit activity and act as the key HR contact for Reward-related audits with KPMG, EY and Sysco Internal Audit teams. About you: You'll be an experienced Reward Business Partner with a strong background in compensation, job evaluation, benchmarking, and incentive schemes within a large and complex organisation, ideally with experience with a high-volume front-line workforce. You'll be confident partnering with HR Business Partners, Centres of Excellence and business leaders to develop and deliver reward solutions that support business goals and employee engagement. Strong analytical skills are essential, with the ability to interpret reward and people data, identify trends and provide clear, actionable insights. Experience of salary benchmarking and Gender Pay Gap reporting and pay equity analysis is required. You will have experience leading annual reward and compensation cycles, ensuring appropriate governance, compliance and controls are maintained. Experience with Workday is helpful but not essential, experience with other HCM systems is preferable. You will be comfortable using reward technology and analytics to support compensation outcomes, improve processes and enhance the employee and manager experience. You will be a proactive and collaborative leader with strong project management skills and a continuous improvement mindset. Advanced Microsoft 365 skills, particularly Excel, are essential, along with the ability to influence stakeholders and deliver results in a fast-paced environment.

Technical Solutions Architect - London £750 - £850 p/d (outside IR35) 3 month initial term Well-established, highly profitable and rapidly expanding engineering business is seeking an experienced Technical Solutions Architect to join them on a contract basis. Following a number of recent acquisitions, the organisation has an ambitious growth strategy with plans to acquire 8-10 businesses per year, creating significant demand for scalable, secure and standardised technology solutions. This is a key role within an organisation undergoing major digital transformation, where technology architecture will play a critical role in enabling growth, driving standardisation and supporting the successful integration of newly acquired businesses. Working closely with the Group IT Director and Enterprise Architect, you'll design and assure enterprise-scale solutions across cloud, infrastructure, applications, integration, data and security. You'll provide technical leadership across strategic initiatives including digital transformation, M&A, AI adoption, cloud modernisation and business systems implementation, ensuring solutions are secure, scalable and aligned with the organisation's technology strategy. This is an excellent opportunity for an experienced Solution or Technical Architect who enjoys working across complex enterprise environments, influencing technology strategy while remaining hands-on with solution design. Responsibilities: Design end-to-end technical solutions across infrastructure, cloud, applications, integration, data and security Produce High-Level Designs (HLDs), Low-Level Designs (LLDs) and technical documentation Ensure solutions are secure, scalable, resilient and aligned with enterprise architecture standards Work closely with the Enterprise Architect to deliver target-state architecture Support Microsoft Azure and Microsoft 365 cloud transformation initiatives Design integration architectures, APIs and data flows between enterprise systems Lead technical design for M&A activities, including due diligence, integration and migration planning Design AI-enabled solutions, including Microsoft Copilot, Power Platform and automation technologies Participate in Technical Design Authority (TDA) and Architecture Review Boards, providing governance and technical assurance Identify architectural risks, technical debt and continuous improvement opportunities Ensure solutions comply with cybersecurity standards and operational best practice Requirements: Significant experience as a Technical Architect, Solution Architect, Infrastructure Architect or similar Proven experience designing enterprise-scale solutions across cloud, infrastructure and applications Strong knowledge of Microsoft Azure and Microsoft 365 Experience designing secure, resilient and highly available enterprise solutions Strong understanding of cloud architecture, networking, infrastructure, cybersecurity and systems integration Experience delivering digital transformation and M&A technology integration projects Experience designing AI-enabled solutions, including Microsoft Copilot, Power Platform or similar technologies Strong stakeholder management skills with the ability to translate business requirements into practical technical solutions Excellent analytical, documentation and problem-solving skills £750 - £850 p/d (outside IR35) 3 month initial term Must be eligible to work in the UK Hybrid (4 days per week in their London office)

IAM Solution Architect + Site based role in South West + 680 to 720 per day - Inside IR35 + Requires DV Clearance We are seeking an experienced Solution Architect to lead the design and delivery of a greenfield Identity & Access Management (IAM) platform within a highly secure environment. This is a key role where you'll shape a modern Microsoft-based identity solution, working closely with infrastructure, security, and engineering teams. Key Responsibilities Lead the architecture and implementation of a new on-premise IAM platform. Design secure identity solutions using Windows Server 2022 , Active Directory , and ADFS . Deliver Single Sign-On (SSO), federation, and Role-Based Access Control (RBAC) solutions. Define architecture standards, technical governance, and best practices. Produce HLDs, LLDs, and technical documentation. Provide technical leadership, mentoring, and stakeholder engagement throughout project delivery. Essential Skills Proven experience as a Solution or Technical Architect delivering Microsoft identity solutions. Strong knowledge of Active Directory , ADFS , Windows Server 2022 , and enterprise IAM. Experience with SAML , OAuth 2.0 , OpenID Connect , SSO, and RBAC. Good understanding of networking, DNS, firewalls, routing, and load balancing. Excellent communication and stakeholder management skills. Experience working within Defence or other highly secure environments. Desirable Microsoft Identity or Solutions Architect certifications. Hybrid identity and PowerShell automation experience. Security Requirements Applicants must hold active UKSV DV clearance and be sole British nationals with a valid UK passport. This is an excellent opportunity to lead a high-profile IAM transformation programme, working with cutting-edge Microsoft technologies in a secure, mission-critical environment.

My client, a well established MSP, is looking for an experienced Senior IT Infrastructure Engineer to join their team. The Role As a Senior IT Infrastructure Engineer, you will act as a senior technical escalation point within the business. You will diagnose and resolve complex incidents, lead root cause analysis, support and mentor junior engineers, and help design and deliver secure, resilient technology solutions for our clients. The role combines advanced technical support with project delivery and infrastructure consultancy. You will need to move confidently between different client environments, priorities and technologies while maintaining clear documentation and excellent communication. Key Responsibilities Act as a senior escalation point for complex infrastructure, cloud, networking and security incidents. Take ownership of high-priority technical issues through to resolution. Design, plan and deliver infrastructure, cloud, migration and networking projects. Architect and deploy advanced Microsoft cloud, server and network solutions across multiple client sites. Build, migrate, configure and maintain Windows Server environments. Manage Microsoft 365, Entra ID and Microsoft Intune environments. Core Technical Competencies Cloud and Infrastructure Expert knowledge of Microsoft 365, including Exchange Online, SharePoint Online and Microsoft Teams. Advanced administration of Microsoft Entra ID, formerly Azure Active Directory. Server and Virtualisation Extensive hands on experience building, migrating, managing and troubleshooting Windows Server infrastructure, including Windows Server 2016 through to Windows Server 2025. Strong knowledge of Active Directory, Group Policy, DNS, DHCP, file services and certificate services. Networking and Security Advanced understanding of TCP/IP, DNS, DHCP, VLANs, routing, switching and wireless networking. Strong experience configuring and managing enterprise firewalls, including platforms such as Fortinet, SonicWall or Sophos Automation Strong PowerShell scripting skills. Experience using PowerShell for system administration, mass deployment, reporting and process automation. Backup and Disaster Recovery Experience designing, implementing and troubleshooting business-critical backup and disaster-recovery solutions. Strong working knowledge of platforms such as Veeam and Datto. Understanding of recovery objectives, retention policies, off-site replication and disaster-recovery testing. Ability to investigate failed backups and confidently manage restoration and recovery processes. About You You will have: Substantial experience in a senior infrastructure, third-line support or technical project role. Previous experience working for a managed service provider (MSP) The ability to manage multiple client environments and competing priorities. A structured and methodical approach to troubleshooting. The ability to understand both the immediate technical issue and its underlying cause. Experience delivering technically complex projects from planning through to completion. A full UK driving licence and the ability to travel to client sites when required. Desirable Experience Experience in any of the following would be beneficial: Microsoft Azure infrastructure and Azure Virtual Desktop. Microsoft Defender and the wider Microsoft security platform. Autotask, Datto RMM or similar MSP platforms. Cyber Essentials or other recognised security frameworks. Dell or comparable enterprise server and storage technologies. Only relevant candidates will be contacted.

hackajob is collaborating with Leonardo to connect them with exceptional professionals for this role. Job Description: Salary Range: £44,171 - £61,950 Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Your Impact Are you ready to support and enhance enterprise applications that underpin national security and critical services? At Leonardo UK, our Senior Application Engineers play a key role in maintaining and improving business-critical platforms - ensuring they are secure, scalable, and aligned with operational needs. You'll work collaboratively across engineering and service teams, contributing to technical delivery and continuous improvement. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team-centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. Leonardo UK is seeking a Senior Application Engineer to join the Cyber & Security Solutions Division team. This role is focused on delivering, maintaining, and improving platform and systems engineering solutions that underpin critical defence, government and public sector services. What you will do as a Senior Application Engineer Support, configure, and enhance security tooling platforms (e.g. SIEM, EDR) that underpin threat detection and response Deliver engineering tasks within defined work packages, ensuring alignment with user needs, security requirements, and service-level objectives. Contribute to application architecture, integration, and lifecycle activities under the guidance of senior engineers. Collaborate with stakeholders across engineering, service management, and business teams to resolve technical issues. Mentor junior engineers and specialists, supporting their development and promoting best practices. Participate in continuous improvement initiatives, including automation, documentation, and knowledge sharing. Ensure compliance with engineering governance, ITSM processes, and cyber security policies. What you'll bring Solid experience in supporting, configuring, and enhancing security tooling platforms (e.g. SIEM, EDR, or similar) Ability to solve moderately complex application-related issues and contribute to secure, scalable solutions. Understanding of application lifecycle management, integration patterns, and secure-by-design principles. Strong communication and collaboration skills across engineering and business teams. A proactive mindset with a passion for continuous improvement and knowledge sharing. Core areas (must have): Support, configuration, and enhancement of security tooling platforms (SIEM, EDR, vulnerability management) Log and event management including ingestion, parsing, and correlation of system and security logs Integration of security tooling with platform, network, and identity services Operational support and tuning of security tooling in live environments Application lifecycle management (deployment, maintenance, upgrades, decommissioning) Integration patterns and identity management (e.g. SSO, RBAC, API integration) Secure-by-design principles and application security practices Technical problem solving and resolution of application-related issues Collaboration with engineering, SOC, and service management teams Experience working within security and ITIL-aligned environments Delivery within secure / enterprise / defence environments Desirable: Experience with SIEM / EDR / vulnerability management tools (e.g. Splunk, Trellix, Tenable, or similar) SOAR platforms and automation of security response workflows Integration with monitoring, alerting, and incident response systems Threat detection, analytics, and use case development Experience integrating with enterprise services (Active Directory, identity platforms) Exposure to DevOps / CI-CD practices Experience working in secure or regulated environments Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) will apply. This role requires Developed Vetting (DV) clearance prior to starting. For more information and guidance please visit: Location This role will be based at one of our UK sites - Yeovil. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: Award-winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee-led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Onsite

Job Opportunity: PKI Engineer (6-Month Contract) Location: London or Brighton (Open to either location) Contract Duration: 6 Months Job Type: Contract About the Role Are you an experienced Public Key Infrastructure (PKI) professional looking for your next challenge? We are currently seeking a highly skilled and motivated PKI Engineer for a 6-month contract. In this role, you will play a critical part in designing, deploying, and managing certificate lifecycles, working with industry-leading PKI products and cloud identity platforms. If you have a strong background in cryptography, certificate management, and Azure ecosystems, we want to hear from you! Key Requirements (What You Bring) To be successful in this role, you should have hands-on experience and a solid understanding of the following: Core PKI Expertise: Strong working knowledge of PKI management and concepts, including Certificate Authority (CA) deployment, template creation, and end-to-end certificate lifecycle management. PKI Products: Proven experience or exposure implementing solutions such as Keyfactor, EJBCA, Auto-enrollment, and Orchestration services. Microsoft & Azure Ecosystem: Solid understanding of Azure federation, identity synchronization, ADFS, and core networking concepts. Hands-on experience with Active Directory (AD), Azure AD, and Active Directory Certificate Services (ADCS), as well as NDES. Architecture & Design: Working knowledge of creating high-level architecture design diagrams (a specific focus on PKI architecture is a major plus). Identity & Access: Familiarity with Single Sign-On (SSO), SAML, and a strong understanding of claims-aware applications. Systems Administration: Deep understanding of roles and permissions across both Windows and Linux environments. Automation & Scripting: Proficiency in PowerShell scripting with the ability to create custom workflows for API integrations. Hardware & Lifecycle Management: Hands-on experience working with Hardware Security Modules (HSM) and Certificate Lifecycle Management (CLM) tools. Desirable Skills (Bonus Points) While not strictly required, the following skills will make your application stand out: Protocols: Knowledge and practical experience working with SCEP (Simple Certificate Enrollment Protocol), as well as ACME, CMP, and EST protocols. EJBCA: Advanced knowledge or specialized experience working specifically with EJBCA. IAM: Broad exposure to Identity and Access Management (IAM) principles and technologies. OS Familiarity: Comfort and familiarity working within Linux/Unix operating systems. ITSM Tools: Experience utilizing IT Service Management solutions such as ServiceNow or BMC Remedy. Apply today at Prasanna com with your CV highlighting your relevant PKI and Azure experience, along with your availability to start. Randstad Technologies is acting as an Employment Business in relation to this vacancy.

VMware Architect - DV Cleared Location: South West (100% On-site) Contract: Initial 12 Months+ Start: September 2026 Rate: 700 to 720 per day - Inside IR35 We are looking for an experienced VMWare Architect to join a secure programme delivering enterprise infrastructure solutions within a high-security environment. This role requires a hands-on architect with strong experience across VMware, networking, identity management, and secure infrastructure design. Key Responsibilities Design secure, scalable, and resilient infrastructure solutions. Produce High and Low Level Designs (HLDs/LLDs) and technical documentation. Provide technical leadership throughout project delivery. Architect VMware Cloud Foundation (VCF) and NSX-T environments. Design enterprise networking, firewall, routing, and switching solutions. Provide expertise across Active Directory, ADFS, Windows, and Linux platforms. Ensure solutions meet security, compliance, and operational standards. Essential Skills Proven experience as a Technical or Infrastructure Architect. Strong VMware Cloud Foundation (VCF) and NSX-T experience. Enterprise networking, security, firewall, routing, and switching expertise. Active Directory and ADFS architecture experience. Windows and Linux infrastructure knowledge. Excellent stakeholder engagement and documentation skills. Desirable Hybrid cloud and Infrastructure as Code (IaC) experience. Knowledge of Zero Trust security principles. Security Requirements Candidates must hold active UKSV DV clearance (transferable).