£500 Per Day (Inside IR35)Based in Oxford, Hybrid Working - On site 2 days per week, 6 Month Contract with view to extend to 12 months and beyond!To Start ASAP Your new company We're supporting a prestigious, nationally significant scientific research organisation whose work drives some of the most advanced and ambitious projects in the UK. Operating at the forefront of innovation, they manage digital and data environments of exceptional scale and complexity. Their Microsoft 365 ecosystem is central to safeguarding sensitive research, enabling scientific collaboration and ensuring critical services run securely and efficiently. They are now strengthening their cloud security posture and are seeking expertise to guide, protect and evolve their Microsoft 365 capabilities. This is a setting where your skills will directly support work with real national impact. Your new role You will take the lead in shaping and securing a sophisticated Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues, conducting deep investigations, remediating threats and ensuring that policies, configurations and controls remain robust and resilient. Your work will involve collaborating closely with cyber security, infrastructure, networking and service delivery teams, ensuring that new services and configurations are delivered securely and aligned with modern best practice. This role will require clarity of thought, technical depth and the confidence to operate autonomously. Your ability to communicate effectively with colleagues at all levels, document secure standards and bring structure to complex environments will be central to strengthening the organisation's security foundations. This is a role where your expertise will be felt across the organisation and where your decisions will help safeguard systems of national significance. What you'll need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such as Conditional Access, MFA, PIM, Defender, Purview and associated governance tools You'll be familiar with interpreting and responding to cloud security threats, managing incidents end to end, and advising stakeholders on how to maintain a strong security posture Experience with SIEM tooling, ideally Microsoft Sentinel, along with a strong understanding of Zero Trust principles, modern authentication and secure baseline configuration, will be highly valuable On a personal level, you'll be proactive, analytical and organised, balancing high technical standards with a clear, concise communication style You will be comfortable managing competing priorities, producing strong documentation and representing your expertise to both technical and non-technical audiences What you'll get in return You'll join an organisation where technology and security form the backbone of major scientific endeavours. You will work within a highly collaborative environment that values expertise, precision and forward thinking solutions. This role offers the opportunity to influence security strategy, shape the development of cloud security capabilities and contribute directly to work that delivers national and global impact. Your contribution will be recognised, your voice will be valued and your technical leadership will help strengthen a mission critical digital landscape. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Jul 12, 2026
Contractor
£500 Per Day (Inside IR35)Based in Oxford, Hybrid Working - On site 2 days per week, 6 Month Contract with view to extend to 12 months and beyond!To Start ASAP Your new company We're supporting a prestigious, nationally significant scientific research organisation whose work drives some of the most advanced and ambitious projects in the UK. Operating at the forefront of innovation, they manage digital and data environments of exceptional scale and complexity. Their Microsoft 365 ecosystem is central to safeguarding sensitive research, enabling scientific collaboration and ensuring critical services run securely and efficiently. They are now strengthening their cloud security posture and are seeking expertise to guide, protect and evolve their Microsoft 365 capabilities. This is a setting where your skills will directly support work with real national impact. Your new role You will take the lead in shaping and securing a sophisticated Microsoft 365 estate within a high value research environment. Acting as the organisation's trusted specialist, you will oversee identity protection, access governance, cloud threat defence and compliance across Entra ID, Conditional Access, MFA, PIM, Microsoft Defender, Purview and related services. You will be responsible for diagnosing complex issues, conducting deep investigations, remediating threats and ensuring that policies, configurations and controls remain robust and resilient. Your work will involve collaborating closely with cyber security, infrastructure, networking and service delivery teams, ensuring that new services and configurations are delivered securely and aligned with modern best practice. This role will require clarity of thought, technical depth and the confidence to operate autonomously. Your ability to communicate effectively with colleagues at all levels, document secure standards and bring structure to complex environments will be central to strengthening the organisation's security foundations. This is a role where your expertise will be felt across the organisation and where your decisions will help safeguard systems of national significance. What you'll need to succeed You will bring substantial hands on experience in Microsoft 365 security, with a deep understanding of identity protection, access control, threat detection and compliance You'll have operated in complex or hybrid environments and will be fully confident configuring, troubleshooting and enhancing services such as Conditional Access, MFA, PIM, Defender, Purview and associated governance tools You'll be familiar with interpreting and responding to cloud security threats, managing incidents end to end, and advising stakeholders on how to maintain a strong security posture Experience with SIEM tooling, ideally Microsoft Sentinel, along with a strong understanding of Zero Trust principles, modern authentication and secure baseline configuration, will be highly valuable On a personal level, you'll be proactive, analytical and organised, balancing high technical standards with a clear, concise communication style You will be comfortable managing competing priorities, producing strong documentation and representing your expertise to both technical and non-technical audiences What you'll get in return You'll join an organisation where technology and security form the backbone of major scientific endeavours. You will work within a highly collaborative environment that values expertise, precision and forward thinking solutions. This role offers the opportunity to influence security strategy, shape the development of cloud security capabilities and contribute directly to work that delivers national and global impact. Your contribution will be recognised, your voice will be valued and your technical leadership will help strengthen a mission critical digital landscape. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Your new company You will be joining a leading UK government-backed financial services organisation. The organisation is at the forefront of digital banking transformation, delivering secure, scalable, and compliant solutions aligned with Open Banking standards, PSD2 regulations, and (url removed) frameworks. You will work within a highly collaborative environment alongside experienced architects, engineers, and stakeholders driving innovation across modern banking platforms. Your New Role As a Banking Solution Architect, you will play a key role in designing and delivering enterprise-scale solutions across banking and financial services platforms. You will be responsible for defining architecture across microservices, APIs, and integration patterns, particularly within payment initiation services and multi-rail payment ecosystems (BACS, Faster Payments, SEPA). You will work closely with third-party vendors across product accounting, risk, and financial crime systems, ensuring seamless integration and regulatory compliance. The role also involves designing solutions across hybrid cloud and legacy environments, covering compute, storage, networking, security, and disaster recovery. Additionally, you will drive DevOps adoption using modern tooling such as Kubernetes, Docker, Terraform, Azure DevOps, and CI/CD pipelines, ensuring scalable, secure, and high-performing platforms. What You'll Need to Succeed To succeed in this role, you will have: Strong experience within banking and financial services architecture Deep knowledge of Open Banking, PSD2, and (url removed) standards Proven experience designing payment systems and API integrations across payment rails such as BACS, SEPA, or Faster Payments Expertise in microservices architecture and integration patterns Strong experience with cloud platforms (AWS/Azure) and legacy data centre environments Knowledge of security frameworks, IAM, and Zero Trust models Hands-on experience with DevOps tools including Kubernetes, Docker, Terraform, Jenkins, GitHub, ArgoCD, and Helm Experience working with third-party vendors across financial platforms such as risk engines, fraud detection, and accounting systems Excellent stakeholder management and communication skills within regulated environments What You'll Get in Return Flexible remote working model Opportunity to work on high-impact national banking transformation programmes Exposure to modern cloud-native and payment technologies A collaborative and forward-thinking environment with strong architectural governance Potential for contract extension based on performance What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Talent Solutions is a trading division of Hays Specialist Recruitment Limited and acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
Jul 12, 2026
Contractor
Your new company You will be joining a leading UK government-backed financial services organisation. The organisation is at the forefront of digital banking transformation, delivering secure, scalable, and compliant solutions aligned with Open Banking standards, PSD2 regulations, and (url removed) frameworks. You will work within a highly collaborative environment alongside experienced architects, engineers, and stakeholders driving innovation across modern banking platforms. Your New Role As a Banking Solution Architect, you will play a key role in designing and delivering enterprise-scale solutions across banking and financial services platforms. You will be responsible for defining architecture across microservices, APIs, and integration patterns, particularly within payment initiation services and multi-rail payment ecosystems (BACS, Faster Payments, SEPA). You will work closely with third-party vendors across product accounting, risk, and financial crime systems, ensuring seamless integration and regulatory compliance. The role also involves designing solutions across hybrid cloud and legacy environments, covering compute, storage, networking, security, and disaster recovery. Additionally, you will drive DevOps adoption using modern tooling such as Kubernetes, Docker, Terraform, Azure DevOps, and CI/CD pipelines, ensuring scalable, secure, and high-performing platforms. What You'll Need to Succeed To succeed in this role, you will have: Strong experience within banking and financial services architecture Deep knowledge of Open Banking, PSD2, and (url removed) standards Proven experience designing payment systems and API integrations across payment rails such as BACS, SEPA, or Faster Payments Expertise in microservices architecture and integration patterns Strong experience with cloud platforms (AWS/Azure) and legacy data centre environments Knowledge of security frameworks, IAM, and Zero Trust models Hands-on experience with DevOps tools including Kubernetes, Docker, Terraform, Jenkins, GitHub, ArgoCD, and Helm Experience working with third-party vendors across financial platforms such as risk engines, fraud detection, and accounting systems Excellent stakeholder management and communication skills within regulated environments What You'll Get in Return Flexible remote working model Opportunity to work on high-impact national banking transformation programmes Exposure to modern cloud-native and payment technologies A collaborative and forward-thinking environment with strong architectural governance Potential for contract extension based on performance What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Talent Solutions is a trading division of Hays Specialist Recruitment Limited and acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)
Sanderson are working with a consulting client who are looking to grow their Zero Trust capability. The client is seeking a Lead to come in and implement and optimise Zero Trust security architectures across the business. Your responsibilities will include: Architecture & Design Leading the strategic design and implementation of Zero Trust architectures for complex enterprise environments, ensuring click apply for full job details
Jul 11, 2026
Full time
Sanderson are working with a consulting client who are looking to grow their Zero Trust capability. The client is seeking a Lead to come in and implement and optimise Zero Trust security architectures across the business. Your responsibilities will include: Architecture & Design Leading the strategic design and implementation of Zero Trust architectures for complex enterprise environments, ensuring click apply for full job details
Role: Infrastructure Engineer - Education Location: Windsor Onsite: 5 days Salary: £40k - £50k Job purpose Our client is seeking a skilled Microsoft-focused Infrastructure Engineer to join our IT team. The IT Department provides and supports all core technology services across the environment, ensuring systems are secure, resilient and capable of supporting users and operational delivery. This is a hands-on technical role supporting and developing the Clients Microsoft infrastructure across Azure, Microsoft 365 and hybrid environments. You will help ensure our systems remain secure, resilient and high performing, while contributing to the continued development of our cloud services. Key tasks and responsibilities You will: Design, implement and support Azure infrastructure and associated cloud services. Contribute to the design and architecture development of the Clients Microsoft cloud and hybrid infrastructure. Administer and optimise Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID). Lead endpoint management using Microsoft Intune (Autopilot, compliance policies, device configuration and update management). Support hybrid identity across Active Directory and Entra ID , including Conditional Access and Zero Trust principles. Contribute to cloud migration and service modernisation initiatives. Manage Infrastructure security , including patching, vulnerability remediation and Microsoft Defender controls. Support the investigation and remediation of security incidents relating to Microsoft cloud and identity platforms. Maintain and test backup, disaster recovery and business continuity processes. Monitor health, resilience and capacity, recommending improvements as appropriate. Maintain SSL certificates, domain registrations and related services. Work with external suppliers to support infrastructure services and project delivery. Produce and maintain clear technical documentation and infrastructure standards. Contribute to the development and maintenance of infrastructure policies and procedures. Provide 3 line support for complex Microsoft cloud and infrastructure issues. Support compliance with relevant security and data protection frameworks, including Cyber Essentials and NCSC guidance where applicable. All employees of the client are also expected to: Develop a good understanding of safeguarding procedures, given all positions at the client are classed as 'regulated activity'. Demonstrate a commitment to safeguarding and promoting the welfare of children. This includes but is not limited to completing safeguarding training as required, complying with all safeguarding procedures and ensuring any safeguarding updates issued by the Client are read and understood. Understand and comply with procedures and legislation relating to confidentiality. Display a commitment to and promotion of equality, diversity and inclusion. Skills and competencies required To be successful in this role, you will demonstrate: Strong hands-on experience designing and supporting Microsoft Azure infrastructure (IaaS, networking, security and monitoring). Excellent knowledge of identity and access management, including Active Directory and Microsoft Entra ID. Experience administering Microsoft 365 and managing modern endpoint environments using Intune Practical understanding of security best practice, including Conditional Access, Defender and Zero Trust principles. Experience operating within hybrid environments (on-premises and cloud). Knowledge of backup, recovery and disaster recovery testing processes. Good understanding of core networking concepts (DNS, DHCP, firewalls, secure connectivity). PowerShell or automation experience to improve efficiency and consistency. Experience supporting high availability, resilience and performance optimisation within cloud environments. Experience operating at 2/3 line support level within an enterprise infrastructure environment. Strong written and verbal communication skills, with a proactive and methodical approach. Desirable Microsoft certifications such as AZ-104, AZ-500 or other relevant Azure/Microsoft security certifications. Experience contributing to cloud migration or infrastructure modernisation programmes. Experience working within an educational environment. Familiarity with security and compliance frameworks such as Cyber Essentials or ISO-aligned standards. You may enjoy this role if: You can work effectively within a team environment. You have a passion for information and communications technology. You are confident and willing to build on knowledge acquired to date. You are an excellent communicator with a friendly and helpful manner. Working pattern You will be working 35 hours per week (core hours 8am to 6pm) Monday to Friday You will be working 52 weeks per year. You will be entitled to 28 days holiday, 3 of these days must be reserved for the Christmas shut down. If a bank holiday falls during a school term period, you will be required to work this day and you will receive an additional day's holiday in lieu. INDIT Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer. By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information. Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application. Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.
Jul 11, 2026
Full time
Role: Infrastructure Engineer - Education Location: Windsor Onsite: 5 days Salary: £40k - £50k Job purpose Our client is seeking a skilled Microsoft-focused Infrastructure Engineer to join our IT team. The IT Department provides and supports all core technology services across the environment, ensuring systems are secure, resilient and capable of supporting users and operational delivery. This is a hands-on technical role supporting and developing the Clients Microsoft infrastructure across Azure, Microsoft 365 and hybrid environments. You will help ensure our systems remain secure, resilient and high performing, while contributing to the continued development of our cloud services. Key tasks and responsibilities You will: Design, implement and support Azure infrastructure and associated cloud services. Contribute to the design and architecture development of the Clients Microsoft cloud and hybrid infrastructure. Administer and optimise Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID). Lead endpoint management using Microsoft Intune (Autopilot, compliance policies, device configuration and update management). Support hybrid identity across Active Directory and Entra ID , including Conditional Access and Zero Trust principles. Contribute to cloud migration and service modernisation initiatives. Manage Infrastructure security , including patching, vulnerability remediation and Microsoft Defender controls. Support the investigation and remediation of security incidents relating to Microsoft cloud and identity platforms. Maintain and test backup, disaster recovery and business continuity processes. Monitor health, resilience and capacity, recommending improvements as appropriate. Maintain SSL certificates, domain registrations and related services. Work with external suppliers to support infrastructure services and project delivery. Produce and maintain clear technical documentation and infrastructure standards. Contribute to the development and maintenance of infrastructure policies and procedures. Provide 3 line support for complex Microsoft cloud and infrastructure issues. Support compliance with relevant security and data protection frameworks, including Cyber Essentials and NCSC guidance where applicable. All employees of the client are also expected to: Develop a good understanding of safeguarding procedures, given all positions at the client are classed as 'regulated activity'. Demonstrate a commitment to safeguarding and promoting the welfare of children. This includes but is not limited to completing safeguarding training as required, complying with all safeguarding procedures and ensuring any safeguarding updates issued by the Client are read and understood. Understand and comply with procedures and legislation relating to confidentiality. Display a commitment to and promotion of equality, diversity and inclusion. Skills and competencies required To be successful in this role, you will demonstrate: Strong hands-on experience designing and supporting Microsoft Azure infrastructure (IaaS, networking, security and monitoring). Excellent knowledge of identity and access management, including Active Directory and Microsoft Entra ID. Experience administering Microsoft 365 and managing modern endpoint environments using Intune Practical understanding of security best practice, including Conditional Access, Defender and Zero Trust principles. Experience operating within hybrid environments (on-premises and cloud). Knowledge of backup, recovery and disaster recovery testing processes. Good understanding of core networking concepts (DNS, DHCP, firewalls, secure connectivity). PowerShell or automation experience to improve efficiency and consistency. Experience supporting high availability, resilience and performance optimisation within cloud environments. Experience operating at 2/3 line support level within an enterprise infrastructure environment. Strong written and verbal communication skills, with a proactive and methodical approach. Desirable Microsoft certifications such as AZ-104, AZ-500 or other relevant Azure/Microsoft security certifications. Experience contributing to cloud migration or infrastructure modernisation programmes. Experience working within an educational environment. Familiarity with security and compliance frameworks such as Cyber Essentials or ISO-aligned standards. You may enjoy this role if: You can work effectively within a team environment. You have a passion for information and communications technology. You are confident and willing to build on knowledge acquired to date. You are an excellent communicator with a friendly and helpful manner. Working pattern You will be working 35 hours per week (core hours 8am to 6pm) Monday to Friday You will be working 52 weeks per year. You will be entitled to 28 days holiday, 3 of these days must be reserved for the Christmas shut down. If a bank holiday falls during a school term period, you will be required to work this day and you will receive an additional day's holiday in lieu. INDIT Planet Recruitment acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Planet Recruitment is an Equal Opportunities Employer. By applying for this role your details will be submitted to Planet Recruitment. Our Candidate Privacy Information Statement explains how we will use your information. Only candidates with the relevant skills and experience will be contacted after application, if you do not hear back from us within 7 days you have unfortunately been unsuccessful in your application. Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and abilities to perform the duties of the position.
Remote Access Project Manager (Contract) 6 Months Contract London (Hybrid - 3 days onsite) 650 - 800PD - Inside IR35 Overview A global retailer is looking for an experienced, delivery-focused Strategic Remote Access Project Manager to lead the implementation and optimisation of secure remote access solutions within a complex enterprise environment. As part of a wider Identity Transformation programme, this role will deliver scalable and secure connectivity solutions across corporate, retail, and operational technology landscapes. This is an opportunity for a strong Project Manager who can operate in fast-paced, complex environments, driving structure, governance, and consistent delivery while collaborating with diverse technology and business teams. Role & Responsibilities Lead delivery of remote access programmes including Azure Virtual Desktop (AVD), Zscaler integrations, and secure connectivity solutions. Define project scope, plans, milestones, and governance aligned with enterprise architecture and security standards. Coordinate engineering, security, OT, infrastructure, and network teams to ensure successful delivery. Oversee remote access readiness across retail, FMCG, and operational technology environments. Manage stakeholders, suppliers, risks, dependencies, and delivery challenges across multiple workstreams. Ensure solutions meet security, identity, compliance, performance, and network requirements. Maintain governance documentation including RAID logs, delivery plans, and architecture artefacts. Support change adoption, operational readiness, and transition into BAU support. Drive continuous improvement across remote access platforms and user experience. Skills & Experience Essential Proven experience delivering complex infrastructure, identity, or remote access programmes in large enterprise environments. Strong expertise in Azure Virtual Desktop (AVD), including deployment, architecture, scalability, and operations. Experience with Zscaler technologies (ZIA/ZPA) and secure remote access solutions. Understanding of OT environments, IoT ecosystems, and secure connectivity models. Experience supporting large-scale retail or FMCG environments. Strong stakeholder management, governance, and delivery experience across multiple workstreams. Knowledge of identity, access management, and cloud security principles. Prince2, PMP, or equivalent project management certification. Desirable Experience with hybrid identity, Active Directory, Entra ID, Conditional Access, and device compliance. Knowledge of Zero Trust architecture, network segmentation, and secure connectivity principles. Exposure to retail technologies including POS, handheld devices, and IoT platforms. Understanding of governance, compliance, and audit requirements. Experience with automation, scripting, APIs, and managing third-party suppliers in transformation programmes.
Jul 10, 2026
Contractor
Remote Access Project Manager (Contract) 6 Months Contract London (Hybrid - 3 days onsite) 650 - 800PD - Inside IR35 Overview A global retailer is looking for an experienced, delivery-focused Strategic Remote Access Project Manager to lead the implementation and optimisation of secure remote access solutions within a complex enterprise environment. As part of a wider Identity Transformation programme, this role will deliver scalable and secure connectivity solutions across corporate, retail, and operational technology landscapes. This is an opportunity for a strong Project Manager who can operate in fast-paced, complex environments, driving structure, governance, and consistent delivery while collaborating with diverse technology and business teams. Role & Responsibilities Lead delivery of remote access programmes including Azure Virtual Desktop (AVD), Zscaler integrations, and secure connectivity solutions. Define project scope, plans, milestones, and governance aligned with enterprise architecture and security standards. Coordinate engineering, security, OT, infrastructure, and network teams to ensure successful delivery. Oversee remote access readiness across retail, FMCG, and operational technology environments. Manage stakeholders, suppliers, risks, dependencies, and delivery challenges across multiple workstreams. Ensure solutions meet security, identity, compliance, performance, and network requirements. Maintain governance documentation including RAID logs, delivery plans, and architecture artefacts. Support change adoption, operational readiness, and transition into BAU support. Drive continuous improvement across remote access platforms and user experience. Skills & Experience Essential Proven experience delivering complex infrastructure, identity, or remote access programmes in large enterprise environments. Strong expertise in Azure Virtual Desktop (AVD), including deployment, architecture, scalability, and operations. Experience with Zscaler technologies (ZIA/ZPA) and secure remote access solutions. Understanding of OT environments, IoT ecosystems, and secure connectivity models. Experience supporting large-scale retail or FMCG environments. Strong stakeholder management, governance, and delivery experience across multiple workstreams. Knowledge of identity, access management, and cloud security principles. Prince2, PMP, or equivalent project management certification. Desirable Experience with hybrid identity, Active Directory, Entra ID, Conditional Access, and device compliance. Knowledge of Zero Trust architecture, network segmentation, and secure connectivity principles. Exposure to retail technologies including POS, handheld devices, and IoT platforms. Understanding of governance, compliance, and audit requirements. Experience with automation, scripting, APIs, and managing third-party suppliers in transformation programmes.
Spectrum IT Recruitment
Gloucester, Gloucestershire
Infrastructure Specialist - (Microsoft 365 SME) Gloucester (Hybrid) Up to £65,000 + Benefits Are you a Microsoft technology expert looking to take ownership of enterprise-scale Microsoft 365 environments? We're seeking a Microsoft specialist to join a growing technical team as the go-to Microsoft Subject Matter Expert (SME). This is an opportunity for an experienced engineer who thrives on designing, securing, and optimising modern Microsoft environments while acting as a trusted advisor to customers and internal stakeholders. Working across a diverse customer base, you will lead the design and delivery of Microsoft 365, identity, endpoint management, and security solutions, helping organisations maximise their investment in Microsoft's cloud technologies. What You'll Be Doing Act as the Microsoft 365 SME, providing technical leadership and best practice guidance across customer environments. Design, deploy, and optimise Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft 365 Groups. Lead Microsoft tenant assessments, migrations, remediation projects, and platform modernisation initiatives. Architect and manage secure identity solutions using Microsoft Entra ID. Implement advanced Microsoft security technologies including Conditional Access, MFA, Passwordless Authentication, Privileged Identity Management (PIM), Microsoft Defender, and Microsoft Purview. Manage endpoint security and device lifecycle management through Microsoft Intune and Windows Autopilot. Apply Microsoft Zero Trust principles and security best practices across customer estates. Support compliance, governance, and security frameworks including GDPR and ISO-aligned standards. Drive automation and operational efficiency through PowerShell scripting and process improvement. Act as the senior escalation point for complex technical issues and project delivery. Mentor engineers and contribute to the development of technical standards and service excellence. What We're Looking For Essential Experience Extensive hands-on experience with Microsoft 365 administration, architecture, and security. Deep technical expertise across: Microsoft Entra ID (Azure AD) Microsoft Intune & Windows Autopilot Microsoft Defender Suite Exchange Online SharePoint Online Microsoft Teams Conditional Access & Identity Security Strong understanding of endpoint management, identity governance, and Microsoft security best practices. Experience working within MSP, consultancy, or multi-tenant environments. Excellent stakeholder management and customer-facing communication skills. Ability to operate as a trusted Microsoft SME and technical authority. Desirable Experience PowerShell scripting and automation. Microsoft Sentinel. Defender XDR. Experience driving technical standards, governance, and engineering improvements. Certifications (Desirable) MS-102: Microsoft 365 Administrator MD-102: Endpoint Administrator SC-Series Security Certifications AZ-Series Azure Certifications Why Join Us? This is an opportunity to become the Microsoft technical authority within a highly respected technology business. You'll work with the latest Microsoft cloud, security, and workplace technologies, influence technical strategy, and play a key role in delivering secure, modern workplace solutions for customers. If you're passionate about Microsoft technologies and want a role where your expertise genuinely makes an impact, we'd love to hear from you. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
Jul 10, 2026
Full time
Infrastructure Specialist - (Microsoft 365 SME) Gloucester (Hybrid) Up to £65,000 + Benefits Are you a Microsoft technology expert looking to take ownership of enterprise-scale Microsoft 365 environments? We're seeking a Microsoft specialist to join a growing technical team as the go-to Microsoft Subject Matter Expert (SME). This is an opportunity for an experienced engineer who thrives on designing, securing, and optimising modern Microsoft environments while acting as a trusted advisor to customers and internal stakeholders. Working across a diverse customer base, you will lead the design and delivery of Microsoft 365, identity, endpoint management, and security solutions, helping organisations maximise their investment in Microsoft's cloud technologies. What You'll Be Doing Act as the Microsoft 365 SME, providing technical leadership and best practice guidance across customer environments. Design, deploy, and optimise Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft 365 Groups. Lead Microsoft tenant assessments, migrations, remediation projects, and platform modernisation initiatives. Architect and manage secure identity solutions using Microsoft Entra ID. Implement advanced Microsoft security technologies including Conditional Access, MFA, Passwordless Authentication, Privileged Identity Management (PIM), Microsoft Defender, and Microsoft Purview. Manage endpoint security and device lifecycle management through Microsoft Intune and Windows Autopilot. Apply Microsoft Zero Trust principles and security best practices across customer estates. Support compliance, governance, and security frameworks including GDPR and ISO-aligned standards. Drive automation and operational efficiency through PowerShell scripting and process improvement. Act as the senior escalation point for complex technical issues and project delivery. Mentor engineers and contribute to the development of technical standards and service excellence. What We're Looking For Essential Experience Extensive hands-on experience with Microsoft 365 administration, architecture, and security. Deep technical expertise across: Microsoft Entra ID (Azure AD) Microsoft Intune & Windows Autopilot Microsoft Defender Suite Exchange Online SharePoint Online Microsoft Teams Conditional Access & Identity Security Strong understanding of endpoint management, identity governance, and Microsoft security best practices. Experience working within MSP, consultancy, or multi-tenant environments. Excellent stakeholder management and customer-facing communication skills. Ability to operate as a trusted Microsoft SME and technical authority. Desirable Experience PowerShell scripting and automation. Microsoft Sentinel. Defender XDR. Experience driving technical standards, governance, and engineering improvements. Certifications (Desirable) MS-102: Microsoft 365 Administrator MD-102: Endpoint Administrator SC-Series Security Certifications AZ-Series Azure Certifications Why Join Us? This is an opportunity to become the Microsoft technical authority within a highly respected technology business. You'll work with the latest Microsoft cloud, security, and workplace technologies, influence technical strategy, and play a key role in delivering secure, modern workplace solutions for customers. If you're passionate about Microsoft technologies and want a role where your expertise genuinely makes an impact, we'd love to hear from you. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
3 Month intial contract, scope for extension Inside IR35, (Apply online only) a day Location: Southampton - 2 x a week on site Role Overview We are seeking an experienced Principal Cloud Platform Engineer with strong DevOps leadership capability to support the design, delivery and continuous improvement of secure, scalable and resilient cloud platforms across Azure and AWS environments. The role will focus on building and governing cloud architecture patterns, landing zones, infrastructure standards and automation practices, while working closely with engineering, security, product and delivery teams. The successful candidate will provide manager-level technical leadership across DevOps, cloud platforms, Infrastructure as Code, CI/CD, networking, security, observability and reliability engineering. They will help shape enterprise-scale transformation, hybrid cloud strategy and platform services aligned to the Azure Well-Architected Framework, ensuring solutions are robust, cost-effective and operationally ready. Own and evolve Azure & AWS cloud architecture, platform patterns, guardrails, and design principles. Provide architectural oversight across Terraform modules, CI/CD pipelines (Azure DevOps, GitHub Actions), networking patterns, and compute/storage design. Evaluate platform changes including major provider upgrades (AzureRM / Cloudflare), DR and high availability improvements, cost optimisation strategies, and observability frameworks. Lead technical designs for large-scale refactoring and provider upgrades, environment creation pipelines, secure container registry access, identity integration and Zero Trust patterns, and event-driven architectures with caching strategies. Drive Cloudflare integration (CDN, WAF, edge, traffic management) aligned to Azure networking and security architecture. Provide engineering governance through review of RFCs, design documents, and technical decisions, and collaborate with delivery teams, security, shared services, and product groups to maintain aligned architecture. Requires 8-12+ years in cloud engineering/architecture, with deep expertise in Azure architecture (networking, App Services, Functions, APIM, PaaS, ACR, VNets, Private Endpoints, identity/security), strong Terraform experience (modules, pipelines, state management), and strong CI/CD background. Experience designing for SRE (DR, failover, monitoring, logging, autoscaling, resilience) and working across multiple engineering teams. Previous Cloudflare experience preferred. Architecture-led platform role (not a pure Solution Architect); deep scripting expertise not a primary requirement.
Jul 10, 2026
Contractor
3 Month intial contract, scope for extension Inside IR35, (Apply online only) a day Location: Southampton - 2 x a week on site Role Overview We are seeking an experienced Principal Cloud Platform Engineer with strong DevOps leadership capability to support the design, delivery and continuous improvement of secure, scalable and resilient cloud platforms across Azure and AWS environments. The role will focus on building and governing cloud architecture patterns, landing zones, infrastructure standards and automation practices, while working closely with engineering, security, product and delivery teams. The successful candidate will provide manager-level technical leadership across DevOps, cloud platforms, Infrastructure as Code, CI/CD, networking, security, observability and reliability engineering. They will help shape enterprise-scale transformation, hybrid cloud strategy and platform services aligned to the Azure Well-Architected Framework, ensuring solutions are robust, cost-effective and operationally ready. Own and evolve Azure & AWS cloud architecture, platform patterns, guardrails, and design principles. Provide architectural oversight across Terraform modules, CI/CD pipelines (Azure DevOps, GitHub Actions), networking patterns, and compute/storage design. Evaluate platform changes including major provider upgrades (AzureRM / Cloudflare), DR and high availability improvements, cost optimisation strategies, and observability frameworks. Lead technical designs for large-scale refactoring and provider upgrades, environment creation pipelines, secure container registry access, identity integration and Zero Trust patterns, and event-driven architectures with caching strategies. Drive Cloudflare integration (CDN, WAF, edge, traffic management) aligned to Azure networking and security architecture. Provide engineering governance through review of RFCs, design documents, and technical decisions, and collaborate with delivery teams, security, shared services, and product groups to maintain aligned architecture. Requires 8-12+ years in cloud engineering/architecture, with deep expertise in Azure architecture (networking, App Services, Functions, APIM, PaaS, ACR, VNets, Private Endpoints, identity/security), strong Terraform experience (modules, pipelines, state management), and strong CI/CD background. Experience designing for SRE (DR, failover, monitoring, logging, autoscaling, resilience) and working across multiple engineering teams. Previous Cloudflare experience preferred. Architecture-led platform role (not a pure Solution Architect); deep scripting expertise not a primary requirement.
Security IAM Architect / Specialist UK Government Outside IR35 550- 600 Remote Start ASAP 6 month contract SR2 is working with a consultancy supporting the delivery of a major central government data transformation programme. They are looking for an experienced Security Identity & Access Management Specialist to help design the security architecture for a large-scale federated data-sharing platform. You'll play a key role in shaping how organisations securely discover, access and share data, leading the design of identity, access control and policy enforcement capabilities across a complex, multi-organisation ecosystem. Working closely with architects, developers and governance teams, you'll translate security, risk and business requirements into scalable, practical technical solutions. Requirements: Strong security architecture experience delivering complex enterprise or federated platforms. Deep knowledge of Identity & Access Management (IAM), federated identity and Zero Trust principles. Experience designing Attribute-Based Access Control (ABAC) solutions and policy-as-code using Open Policy Agent (OPA). Strong understanding of OAuth2, OpenID Connect (OIDC), SAML and SCIM. Experience securing cloud-native, API-driven and distributed systems. Knowledge of threat modelling, security non-functional requirements and security assurance. Experience integrating with enterprise identity providers and IAM platforms. Ability to produce high-quality security architecture and design documentation. Comfortable engaging with both technical and non-technical stakeholders. Previous experience within central government, regulated industries or critical national infrastructure would be beneficial. Please apply with a copy of your CV and Emma from SR2 will be in touch with suitable applicants regarding the next steps.
Jul 09, 2026
Contractor
Security IAM Architect / Specialist UK Government Outside IR35 550- 600 Remote Start ASAP 6 month contract SR2 is working with a consultancy supporting the delivery of a major central government data transformation programme. They are looking for an experienced Security Identity & Access Management Specialist to help design the security architecture for a large-scale federated data-sharing platform. You'll play a key role in shaping how organisations securely discover, access and share data, leading the design of identity, access control and policy enforcement capabilities across a complex, multi-organisation ecosystem. Working closely with architects, developers and governance teams, you'll translate security, risk and business requirements into scalable, practical technical solutions. Requirements: Strong security architecture experience delivering complex enterprise or federated platforms. Deep knowledge of Identity & Access Management (IAM), federated identity and Zero Trust principles. Experience designing Attribute-Based Access Control (ABAC) solutions and policy-as-code using Open Policy Agent (OPA). Strong understanding of OAuth2, OpenID Connect (OIDC), SAML and SCIM. Experience securing cloud-native, API-driven and distributed systems. Knowledge of threat modelling, security non-functional requirements and security assurance. Experience integrating with enterprise identity providers and IAM platforms. Ability to produce high-quality security architecture and design documentation. Comfortable engaging with both technical and non-technical stakeholders. Previous experience within central government, regulated industries or critical national infrastructure would be beneficial. Please apply with a copy of your CV and Emma from SR2 will be in touch with suitable applicants regarding the next steps.
Zero Trust Security Lead - SC Clearable - Perm Location: London Type: Hybrid Site: 2 days on-site, future flexibility needed around consultancy clients Salary: £80,000 - £120,000 + Benefits Package Clearance: Must be eligible or actively have SC Clearance Sanderson Government and Defence are hiring for an exciting new role with a consultancy client who are operating across the forefront of the UK Pub click apply for full job details
Jul 09, 2026
Full time
Zero Trust Security Lead - SC Clearable - Perm Location: London Type: Hybrid Site: 2 days on-site, future flexibility needed around consultancy clients Salary: £80,000 - £120,000 + Benefits Package Clearance: Must be eligible or actively have SC Clearance Sanderson Government and Defence are hiring for an exciting new role with a consultancy client who are operating across the forefront of the UK Pub click apply for full job details
Define, design, and govern the end-to-end technical architecture across cloud and on-premise systems, ensuring scalability, security, maintainability, and alignment with business and enterprise architecture objectives. The role is responsible for establishing Azure-based solution architectures, guiding delivery teams, and ensuring that technology decisions drive long-term value, resilience, and performance across the organisation. Solution Architecture & Design Design end-to-end solution architectures across applications, data, integrations, and infrastructure within Microsoft Azure environments Define architectural patterns for cloud-native, hybrid, and distributed systems Develop high-level and low-level designs (HLD/LLD), ensuring clarity for delivery teams Ensure solutions are scalable, resilient, secure, and cost-optimised Azure Cloud Architecture Define and implement architecture using Azure services, including: Compute: Azure App Services, Azure Kubernetes Service (AKS), Azure Functions Data: Azure SQL, Cosmos DB, Data Lake, Synapse Analytics Integration: Azure API Management, Logic Apps, Service Bus, Event Grid Security: Azure Active Directory (Entra ID), Key Vault, Managed Identities Design for high availability, disaster recovery, and business continuity using Azure-native capabilities Ensure effective use of Infrastructure as Code (IaC) using Bicep, ARM templates, or Terraform Integration & System Design Define integration patterns and system interactions across microservices and enterprise systems Design APIs and event-driven architectures using REST, messaging, and asynchronous patterns Ensure interoperability between legacy systems and modern cloud-based platforms Technical Leadership & Governance Provide technical leadership and architectural guidance to development and engineering teams Review and approve solution designs and key technical decisions Ensure alignment with enterprise architecture standards, governance frameworks, and design principles Define and enforce architecture governance processes, design reviews, and checkpoints Technology Evaluation & Innovation Evaluate new technologies, frameworks, and tools within the Azure ecosystem Conduct proofs of concept (PoCs) and recommend solutions based on business and technical fit Drive adoption of cloud best practices, DevSecOps, and modern engineering approaches Security, Compliance & Risk Management Ensure compliance with security best practices, regulatory requirements (e.g., GDPR), and organisational policies Embed zero-trust architecture principles and secure design practices Identify and mitigate technical risks, vulnerabilities, and architectural gaps Stakeholder Engagement Engage with business stakeholders, product owners, and leadership teams to understand requirements Translate business needs into scalable and pragmatic technical architecture solutions Communicate architecture decisions, trade-offs, and risks clearly to both technical and non-technical audiences Delivery Support & Collaboration Collaborate with Agile delivery teams, DevOps engineers, QA teams, and architects Support programme delivery, roadmap planning, and release strategies Provide guidance during implementation, integration, and deployment phases Bachelor's degree in Computer Science, Engineering, or related discipline Microsoft Certified: Azure Solutions Architect Expert TOGAF or equivalent architecture certification Azure DevOps / Security certifications (advantageous)
Jul 09, 2026
Full time
Define, design, and govern the end-to-end technical architecture across cloud and on-premise systems, ensuring scalability, security, maintainability, and alignment with business and enterprise architecture objectives. The role is responsible for establishing Azure-based solution architectures, guiding delivery teams, and ensuring that technology decisions drive long-term value, resilience, and performance across the organisation. Solution Architecture & Design Design end-to-end solution architectures across applications, data, integrations, and infrastructure within Microsoft Azure environments Define architectural patterns for cloud-native, hybrid, and distributed systems Develop high-level and low-level designs (HLD/LLD), ensuring clarity for delivery teams Ensure solutions are scalable, resilient, secure, and cost-optimised Azure Cloud Architecture Define and implement architecture using Azure services, including: Compute: Azure App Services, Azure Kubernetes Service (AKS), Azure Functions Data: Azure SQL, Cosmos DB, Data Lake, Synapse Analytics Integration: Azure API Management, Logic Apps, Service Bus, Event Grid Security: Azure Active Directory (Entra ID), Key Vault, Managed Identities Design for high availability, disaster recovery, and business continuity using Azure-native capabilities Ensure effective use of Infrastructure as Code (IaC) using Bicep, ARM templates, or Terraform Integration & System Design Define integration patterns and system interactions across microservices and enterprise systems Design APIs and event-driven architectures using REST, messaging, and asynchronous patterns Ensure interoperability between legacy systems and modern cloud-based platforms Technical Leadership & Governance Provide technical leadership and architectural guidance to development and engineering teams Review and approve solution designs and key technical decisions Ensure alignment with enterprise architecture standards, governance frameworks, and design principles Define and enforce architecture governance processes, design reviews, and checkpoints Technology Evaluation & Innovation Evaluate new technologies, frameworks, and tools within the Azure ecosystem Conduct proofs of concept (PoCs) and recommend solutions based on business and technical fit Drive adoption of cloud best practices, DevSecOps, and modern engineering approaches Security, Compliance & Risk Management Ensure compliance with security best practices, regulatory requirements (e.g., GDPR), and organisational policies Embed zero-trust architecture principles and secure design practices Identify and mitigate technical risks, vulnerabilities, and architectural gaps Stakeholder Engagement Engage with business stakeholders, product owners, and leadership teams to understand requirements Translate business needs into scalable and pragmatic technical architecture solutions Communicate architecture decisions, trade-offs, and risks clearly to both technical and non-technical audiences Delivery Support & Collaboration Collaborate with Agile delivery teams, DevOps engineers, QA teams, and architects Support programme delivery, roadmap planning, and release strategies Provide guidance during implementation, integration, and deployment phases Bachelor's degree in Computer Science, Engineering, or related discipline Microsoft Certified: Azure Solutions Architect Expert TOGAF or equivalent architecture certification Azure DevOps / Security certifications (advantageous)
IAM Architect Are you an IAM Architect who wants to design global identity and access strategy for a top tier international firm, not just maintain it? We are partnered with a leading international professional services firm based in Central London who are looking to hire an Architect to play a pivotal role in shaping enterprise wide identity, access and security architecture across a complex global environment. This is a senior hands on architecture role with genuine influence. You will work closely with security, platform engineering and senior technology leadership to modernise identity governance, strengthen privileged access and embed zero trust principles across the firm's global technology estate. What's on offer Opportunity to Architect and influence identity and access strategy at a global scale Work at the intersection of IAM, Security and Infrastructure Architecture Exposure to modern identity technologies including zero trust, ITDR, and passwordless authentication A collaborative, inclusive culture with strong investment in professional development Hybrid working: 3 days in the office, 2 days remote What you'll be doing: Develop and maintain the firm's IAM architecture, including identity life cycle, access governance and privileged access controls. Ensure seamless integration of multi-factor authentication with biometric and mobile device capabilities to improve both security and user experience. Champion the adoption of identity threat detection and response solutions to proactively identify and mitigate identity-based attacks. Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and in conjunction with the Platform Engineering team, Conditional Access policies aligned with Microsoft best practices. Architect and enhance privileged access management (PAM) capabilities, including approval workflows and continuous monitoring. Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation Oversee Conditional Access deployment and risk-based authentication What we're looking for: Proven background working as an IAM Architect with strong experience focussed on Identity and Access Management. Previous experience working in large scale global environment (professional services experience preferred) Deep expertise in Microsoft identity and security across SaaS/PaaS, IAM, and Privileged Access domains, advanced Entra ID/Azure AD and on-prem AD. Relevant industry certifications such as CISSP Strong experience with Azure Strong command of SSO and authentication protocols: OpenID Connect, SAML, OAuth, Kerberos, LDAP. Hands-on RBAC design, entitlement management, and automated provisioning/de-provisioning pipelines. Proficiency with PowerShell and RESTful integrations for identity automation and compliance checks. Familiarity with NDR and Micro-Segmentation patterns; understanding of network topologies and their interplay with IAM. Ability to communicate clearly with non-technical stakeholders Calm, credible and pragmatic approach with strong personal gravitas Interested? This is a fantastic opportunity to secure a pivotal role in a leading global organisation. If you meet the criteria and are excited about this opportunity, apply now to discuss your next move with our specialist tech recruitment team. Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive workplace where all employees feel valued and respected. We encourage applications from candidates of all backgrounds.
Jul 09, 2026
Full time
IAM Architect Are you an IAM Architect who wants to design global identity and access strategy for a top tier international firm, not just maintain it? We are partnered with a leading international professional services firm based in Central London who are looking to hire an Architect to play a pivotal role in shaping enterprise wide identity, access and security architecture across a complex global environment. This is a senior hands on architecture role with genuine influence. You will work closely with security, platform engineering and senior technology leadership to modernise identity governance, strengthen privileged access and embed zero trust principles across the firm's global technology estate. What's on offer Opportunity to Architect and influence identity and access strategy at a global scale Work at the intersection of IAM, Security and Infrastructure Architecture Exposure to modern identity technologies including zero trust, ITDR, and passwordless authentication A collaborative, inclusive culture with strong investment in professional development Hybrid working: 3 days in the office, 2 days remote What you'll be doing: Develop and maintain the firm's IAM architecture, including identity life cycle, access governance and privileged access controls. Ensure seamless integration of multi-factor authentication with biometric and mobile device capabilities to improve both security and user experience. Champion the adoption of identity threat detection and response solutions to proactively identify and mitigate identity-based attacks. Design secure authentication and authorization patterns (OpenID Connect, SAML, OAuth, Kerberos, LDAP) and in conjunction with the Platform Engineering team, Conditional Access policies aligned with Microsoft best practices. Architect and enhance privileged access management (PAM) capabilities, including approval workflows and continuous monitoring. Collaborate with Security to design Azure Policies and guardrails, supporting audit readiness and remediation Oversee Conditional Access deployment and risk-based authentication What we're looking for: Proven background working as an IAM Architect with strong experience focussed on Identity and Access Management. Previous experience working in large scale global environment (professional services experience preferred) Deep expertise in Microsoft identity and security across SaaS/PaaS, IAM, and Privileged Access domains, advanced Entra ID/Azure AD and on-prem AD. Relevant industry certifications such as CISSP Strong experience with Azure Strong command of SSO and authentication protocols: OpenID Connect, SAML, OAuth, Kerberos, LDAP. Hands-on RBAC design, entitlement management, and automated provisioning/de-provisioning pipelines. Proficiency with PowerShell and RESTful integrations for identity automation and compliance checks. Familiarity with NDR and Micro-Segmentation patterns; understanding of network topologies and their interplay with IAM. Ability to communicate clearly with non-technical stakeholders Calm, credible and pragmatic approach with strong personal gravitas Interested? This is a fantastic opportunity to secure a pivotal role in a leading global organisation. If you meet the criteria and are excited about this opportunity, apply now to discuss your next move with our specialist tech recruitment team. Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive workplace where all employees feel valued and respected. We encourage applications from candidates of all backgrounds.
Robert Half is supporting a leading organisation in the search for an experienced Identity & Access Management (IAM) Lead to provide critical coverage during a key transition period within the Cyber Security function. This is a hands-on IAM leadership role, responsible for maintaining and enhancing the organisation's identity security controls while supporting major strategic initiatives, including IAM transformation and privileged access management programmes. Assignment Details: Initial 4-6 month contract (strong likelihood of extension) Start Date: ASAP Location : UK Hybrid some travel needed to Leeds Rate : c.£500-550 p/day via FCA Umbrella Company Key Responsibilities: Ensure privileged, non-privileged and third-party access is appropriately administered and governed Work closely with business stakeholders and application owners to define and configure access profiles and role-based controls Support the ongoing implementation and optimisation of SailPoint and Delinea platforms Configure, manage and enhance Entra ID (Azure AD) and Conditional Access controls Conduct regular IAM audits, access reviews and security assurance activities Identify, assess and respond to identity-related risks, threats and control weaknesses Support Security Operations activities, incident response and security engineering initiatives Collaborate with Security, Infrastructure, Network and Application teams to ensure effective IAM integration Provide IAM expertise and governance support across technology and business change programmes Assist in the development and implementation of IAM strategy, policies, standards and procedures Engage with senior stakeholders, application owners and delivery teams across the organisation Required Experience: Proven experience in a hands-on IAM Lead, IAM Engineer or Identity Security role Strong knowledge of Active Directory, Entra ID (Azure AD) and cloud identity management Experience configuring and managing Entra Conditional Access and Zero Trust security controls Strong working knowledge of SailPoint, Delinea, Azure PIM or other Privileged Access Management solutions Experience delivering Identity Governance & Administration (IGA) initiatives Ability to identify, assess and mitigate IAM-related security risks and insider threats Strong understanding of IAM governance, policies, procedures and control frameworks Experience working with technical teams, business stakeholders and senior leadership teams Excellent communication and stakeholder management skills Relevant Cyber Security certifications and/or degree desirable Desirable: SailPoint implementation or transformation experience Delinea implementation or administration experience Security Operations or Security Engineering background Experience supporting enterprise-wide IAM transformation programmes Experience engaging with CIO, senior technology leaders and application owners All candidates must complete standard screening (Right to Work, DBS, credit/sanctions and employment verification). Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data:
Jul 09, 2026
Contractor
Robert Half is supporting a leading organisation in the search for an experienced Identity & Access Management (IAM) Lead to provide critical coverage during a key transition period within the Cyber Security function. This is a hands-on IAM leadership role, responsible for maintaining and enhancing the organisation's identity security controls while supporting major strategic initiatives, including IAM transformation and privileged access management programmes. Assignment Details: Initial 4-6 month contract (strong likelihood of extension) Start Date: ASAP Location : UK Hybrid some travel needed to Leeds Rate : c.£500-550 p/day via FCA Umbrella Company Key Responsibilities: Ensure privileged, non-privileged and third-party access is appropriately administered and governed Work closely with business stakeholders and application owners to define and configure access profiles and role-based controls Support the ongoing implementation and optimisation of SailPoint and Delinea platforms Configure, manage and enhance Entra ID (Azure AD) and Conditional Access controls Conduct regular IAM audits, access reviews and security assurance activities Identify, assess and respond to identity-related risks, threats and control weaknesses Support Security Operations activities, incident response and security engineering initiatives Collaborate with Security, Infrastructure, Network and Application teams to ensure effective IAM integration Provide IAM expertise and governance support across technology and business change programmes Assist in the development and implementation of IAM strategy, policies, standards and procedures Engage with senior stakeholders, application owners and delivery teams across the organisation Required Experience: Proven experience in a hands-on IAM Lead, IAM Engineer or Identity Security role Strong knowledge of Active Directory, Entra ID (Azure AD) and cloud identity management Experience configuring and managing Entra Conditional Access and Zero Trust security controls Strong working knowledge of SailPoint, Delinea, Azure PIM or other Privileged Access Management solutions Experience delivering Identity Governance & Administration (IGA) initiatives Ability to identify, assess and mitigate IAM-related security risks and insider threats Strong understanding of IAM governance, policies, procedures and control frameworks Experience working with technical teams, business stakeholders and senior leadership teams Excellent communication and stakeholder management skills Relevant Cyber Security certifications and/or degree desirable Desirable: SailPoint implementation or transformation experience Delinea implementation or administration experience Security Operations or Security Engineering background Experience supporting enterprise-wide IAM transformation programmes Experience engaging with CIO, senior technology leaders and application owners All candidates must complete standard screening (Right to Work, DBS, credit/sanctions and employment verification). Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data:
Help us to make a world of difference Urenco is a global leader in the production of low carbon energy. We work at the cutting edge of the transition to a sustainable, net zero world. We are seeking an Information Security Technical Assurance Lead to join our team at our Paddington Head Office. This role sits within the CISO function, which is dedicated to continuously evolving and strengthening Urenco s cyber security capabilities to protect our business, customers, and the wider public, while supporting the safe and sustainable use of nuclear technology. As part of the Cyber Security Assurance team , and reporting to the Head of Cyber Security Assurance, you will play a key role in driving improvements to Urenco s overall cyber security maturity. This position requires close collaboration with business stakeholders, as well as colleagues across IT and Information Security. With a strong focus on application security across both on-premises and cloud environments, you will lead assurance activities that help embed secure practices across the organisation. This is a hybrid role, with an expectation of a minimum of two days per week in our London Paddington office. Occasional travel may be required. The successful candidate will be required to obtain and maintain SC clearance. At Urenco we re committed to giving you opportunities to be your best. If you feel you meet some, but not all of what we're looking for, please still apply. We believe in embracing the passion and potential of our people, and to achieve this we offer market leading training and development experiences. Along with the opportunity to be mentored and coached by some of the smartest minds in the industry. What you ll do: Assure Security Designs and Solutions Produce and review technical security documentation to support secure solution delivery. Partner with business stakeholders to understand requirements and embed strong security practices across initiatives. Act as a trusted advisor and security advocate, promoting a security-first culture across the organisation. Review technical designs against security standards and policies, identifying gaps and recommending improvements to controls. Provide assurance across both on-premises and cloud environments, ensuring consistent security coverage. Assess and Manage Security Risk Collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes. Work closely with IT teams to validate and assure the effectiveness of technical controls against identified threats. Translate business strategy and requirements into secure architectural approaches, clearly communicating risk and enabling appropriate control solutions. Conduct supplier assurance activities across on-premises, cloud, and hybrid services, providing clear, actionable recommendations. Define Security Standards, Policies and Guidance Develop and maintain application security policies, standards, and guidelines. Ensure alignment between security frameworks, architectural standards, and overall business strategy. Stay current with emerging threats, technologies, and industry best practices, continuously enhancing Urenco s security posture. What do you need to thrive in this role? Proven experience working in a global organisation, delivering against the key responsibilities outlined above. A degree in Computer Science, Information Security, or a related discipline, or equivalent industry experience. Relevant cybersecurity certifications (one or more), such as: CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) CSSLP (Certified Secure Software Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series / Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. Understanding of government security classifications and associated handling requirements. What can you expect from us? More than just a job, we offer a future. More than just a place to work, we provide an opportunity to prosper. As an employee of Urenco you will receive: Annual leave of 27 days per annum. A generous bonus scheme based on achievement of personal and company objectives. A diverse range of family friendly policies. A defined contribution pension scheme: contributions start at 4% (employee) and 10% (employer). Hybrid Working Pattern: up to two days working remotely on average per week. Flexible start and finish times, with a 1.30pm finish on Fridays. Flexible benefits package; including life assurance and income protection. In addition, you ll have an opportunity to purchase additional benefits that suit your lifestyle. Paid time off for volunteering. The opportunity to join our private medical and dental insurance schemes. Education and training; we take pride in helping people learn and develop by supporting, accelerating and directing your learning. As well as the completion of mandatory health and safety courses, training packages will be offered to meet your specific needs. Security vetting Due to the nature of the industry that Urenco operates in, all personnel regardless of employment status working for Urenco are required to obtain security clearance at the level required for their role. Security clearances are assessed in accordance with regulations and official guidance issued by the relevant competent authorities for national security vetting. In certain circumstances, additional enhanced security clearance considerations apply to roles within Urenco owing to the particular activities that the Urenco Group undertakes in relation to uranium enrichment. Successful candidates will need to satisfy security requirements, and all offers of appointment are made subject to the successful approval of all checks initiated. Creating a diverse and inclusive workforce As a truly global company with a presence in the UK, USA, Germany, and the Netherlands, we know that our individual differences make us stronger. Putting people at the heart of our business, we strive to create an open and inclusive workplace that allows every voice to be heard and diversity to thrive. If you require any reasonable adjustments to the recruitment process, please let our talent acquisition team know. Because together, we are one Urenco. We are enriching the world. And enriching your future.
Jul 09, 2026
Full time
Help us to make a world of difference Urenco is a global leader in the production of low carbon energy. We work at the cutting edge of the transition to a sustainable, net zero world. We are seeking an Information Security Technical Assurance Lead to join our team at our Paddington Head Office. This role sits within the CISO function, which is dedicated to continuously evolving and strengthening Urenco s cyber security capabilities to protect our business, customers, and the wider public, while supporting the safe and sustainable use of nuclear technology. As part of the Cyber Security Assurance team , and reporting to the Head of Cyber Security Assurance, you will play a key role in driving improvements to Urenco s overall cyber security maturity. This position requires close collaboration with business stakeholders, as well as colleagues across IT and Information Security. With a strong focus on application security across both on-premises and cloud environments, you will lead assurance activities that help embed secure practices across the organisation. This is a hybrid role, with an expectation of a minimum of two days per week in our London Paddington office. Occasional travel may be required. The successful candidate will be required to obtain and maintain SC clearance. At Urenco we re committed to giving you opportunities to be your best. If you feel you meet some, but not all of what we're looking for, please still apply. We believe in embracing the passion and potential of our people, and to achieve this we offer market leading training and development experiences. Along with the opportunity to be mentored and coached by some of the smartest minds in the industry. What you ll do: Assure Security Designs and Solutions Produce and review technical security documentation to support secure solution delivery. Partner with business stakeholders to understand requirements and embed strong security practices across initiatives. Act as a trusted advisor and security advocate, promoting a security-first culture across the organisation. Review technical designs against security standards and policies, identifying gaps and recommending improvements to controls. Provide assurance across both on-premises and cloud environments, ensuring consistent security coverage. Assess and Manage Security Risk Collaborate with GRC teams, security architects, and business stakeholders to conduct risk assessments, define mitigations, and document outcomes. Work closely with IT teams to validate and assure the effectiveness of technical controls against identified threats. Translate business strategy and requirements into secure architectural approaches, clearly communicating risk and enabling appropriate control solutions. Conduct supplier assurance activities across on-premises, cloud, and hybrid services, providing clear, actionable recommendations. Define Security Standards, Policies and Guidance Develop and maintain application security policies, standards, and guidelines. Ensure alignment between security frameworks, architectural standards, and overall business strategy. Stay current with emerging threats, technologies, and industry best practices, continuously enhancing Urenco s security posture. What do you need to thrive in this role? Proven experience working in a global organisation, delivering against the key responsibilities outlined above. A degree in Computer Science, Information Security, or a related discipline, or equivalent industry experience. Relevant cybersecurity certifications (one or more), such as: CISSP (Certified Information Systems Security Professional) CISA (Certified Information Systems Auditor) CSSLP (Certified Secure Software Lifecycle Professional) GWAPT (GIAC Web Application Penetration Tester) GCSA (GIAC Cloud Security Automation) CASE (Certified Application Security Engineer) Certified DevSecOps Professional Strong familiarity with OWASP (including Top 10 and ASVS) At least 5 years experience in information security assurance, with a strong focus on application security. Hands-on experience with information security frameworks and regulatory compliance, such as ISO 27001 and the NIST SP 800 series / Cybersecurity Framework. Desirable Knowledge of regulatory requirements within the nuclear industry, particularly across the United States, United Kingdom, Netherlands, and Germany. Understanding of government security classifications and associated handling requirements. What can you expect from us? More than just a job, we offer a future. More than just a place to work, we provide an opportunity to prosper. As an employee of Urenco you will receive: Annual leave of 27 days per annum. A generous bonus scheme based on achievement of personal and company objectives. A diverse range of family friendly policies. A defined contribution pension scheme: contributions start at 4% (employee) and 10% (employer). Hybrid Working Pattern: up to two days working remotely on average per week. Flexible start and finish times, with a 1.30pm finish on Fridays. Flexible benefits package; including life assurance and income protection. In addition, you ll have an opportunity to purchase additional benefits that suit your lifestyle. Paid time off for volunteering. The opportunity to join our private medical and dental insurance schemes. Education and training; we take pride in helping people learn and develop by supporting, accelerating and directing your learning. As well as the completion of mandatory health and safety courses, training packages will be offered to meet your specific needs. Security vetting Due to the nature of the industry that Urenco operates in, all personnel regardless of employment status working for Urenco are required to obtain security clearance at the level required for their role. Security clearances are assessed in accordance with regulations and official guidance issued by the relevant competent authorities for national security vetting. In certain circumstances, additional enhanced security clearance considerations apply to roles within Urenco owing to the particular activities that the Urenco Group undertakes in relation to uranium enrichment. Successful candidates will need to satisfy security requirements, and all offers of appointment are made subject to the successful approval of all checks initiated. Creating a diverse and inclusive workforce As a truly global company with a presence in the UK, USA, Germany, and the Netherlands, we know that our individual differences make us stronger. Putting people at the heart of our business, we strive to create an open and inclusive workplace that allows every voice to be heard and diversity to thrive. If you require any reasonable adjustments to the recruitment process, please let our talent acquisition team know. Because together, we are one Urenco. We are enriching the world. And enriching your future.
hackajob is collaborating with EY to connect them with exceptional professionals for this role. Director, Cybersecurity, Engineering, OT, TC, UKI Location: London Other locations: Primary Location Only Salary: Competitive Date: 26 Jan 2026 Job description Requisition ID: At EY, we're all in to shape your future with confidence. We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Job Title: Director - Cybersecurity OT About EY: At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services. The Opportunity: As a Director in Cybersecurity, you will bring diverse perspectives and deep subject matter expertise to deliver high quality insights and outcomes for our clients. You will play a strategic leadership role in shaping and overseeing complex cybersecurity engagements, strengthening senior client relationships, and guiding teams to develop innovative, practical solutions that address the evolving security challenges organisations face. Key Responsibilities: Lead and manage large OT Security engagements, overseeing day to day delivery across industrial environments including manufacturing, energy, utilities, and critical infrastructure. Ensure delivery meets quality, time and budget expectations while navigating complex OT operational constraints. Apply deep technical and sector knowledge across OT, ICS, and IIoT environments to shape and deliver client programmes. Leverage expertise in IEC 62443, NIST CSF for OT, and the Purdue Model to conduct maturity assessments, design secure architectures, and lead OT cyber risk reduction initiatives. Identify, shape, and originate new OT security opportunities, using established industry relationships across engineering, operations, and cyber functions. Position the firm with senior OT decision makers, including engineering directors, CISOs, and asset owners, demonstrating a strong understanding of safety, reliability, and availability priorities. Partner with senior practice and market leaders to pursue high value OT security focused opportunities. Develop differentiated proposals, point of view materials, and transformation roadmaps aligned to industrial cybersecurity trends such as OT-IT convergence, zero trust for OT, asset visibility, and secure remote access. Provide visible leadership into a globally established high performing OT security team, sharing deep domain expertise in ICS/SCADA, industrial protocols, and secure OT architecture patterns. Mentor consultants to develop both technical skills and commercial acumen, fostering a culture of continuous learning and cross disciplinary collaboration. Develop impactful OT cybersecurity thought leadership, articulating market-relevant insights on IEC 62443 adoption, secure operations, industrial threat landscapes, and practical transformation strategies. Support the creation of frameworks and tools that differentiate the firm's OT security offering. Build and maintain strategic relationships with senior client leaders, including operations executives, heads of engineering, CTOs, and CISOs. Use these relationships to identify transformation opportunities, influence senior stakeholders, and steer delivery outcomes across complex industrial ecosystems. Skills and Attributes for Success: Exceptional communicator, able to clearly explain complex OT security concepts, risks, and architectures to both technical engineering teams and senior business stakeholders. Skilled at translating OT cyber risks into operational, safety, and financial impact. Strategic thinker with deep OT cybersecurity expertise, capable of diagnosing complex industrial cyber challenges and shaping robust, standards-aligned solutions (e.g., IEC 62443 reference models, Purdue Model segmentation strategies, OT Zero Trust). Able to secure executive buy in by aligning cyber outcomes with operational priorities such as uptime, safety, and regulatory compliance. Proven people leader, experienced in developing skilled OT cybersecurity teams through coaching, mentoring, and modelling inclusive, collaborative leadership behaviours. Strong commercial acumen, consistently delivering high quality outcomes, managing programme risks, and ensuring operational excellence across large scale industrial cybersecurity engagements. Experienced programme and engagement leader, adept at structuring and managing multi site OT security transformations, including asset discovery, segmentation, architecture redesign, and secure remote access implementation. Skilled at navigating the unique constraints of OT systems including legacy technologies and safety-critical environments. Pragmatic, client centric approach, able to navigate ambiguity across industrial operations, anticipate issues related to safety and continuity, and guide clients confidently through complex decision making regarding OT system modernisation and cyber risk reduction. Strong market access and trusted relationships, leveraging established networks in OT-heavy sectors (e.g., energy, utilities, manufacturing, transport) to influence market conversations, originate new opportunities, and position the firm as a leader in industrial cybersecurity. To Qualify for the Role, You Must Have: Proven experience defining and delivering OT centric cybersecurity strategies across industrial environments (ICS, SCADA, IIoT), with the ability to clearly articulate the operational and commercial value of OT security to senior stakeholders across engineering and enterprise leadership. A strong track record developing OT cybersecurity investment and transformation cases, including business justification, cost-benefit analysis, and prioritisation of remediation activities across multi site industrial estates. Capable of aligning OT security investment with organisational goals such as regulatory compliance, contractual obligations and digital transformation. Hands on experience designing and implementing OT security target operating models, covering governance, incident response, asset lifecycle management, engineering processes, and roles/responsibilities across IT-OT converged environments. Experienced in embedding secure by design principles aligned to IEC 62443, NIST , and recognised OT security best practice. Robust understanding of OT relevant cybersecurity regulations and frameworks, including IEC 62443, NIST , NIS/NIS2, sector specific regulatory requirements, and the Purdue Model for segmentation. Ideally, You'll Also Have: Relevant security and OT security specific qualifications, such as CISSP, CIISEC, GICSP, or ISA/IEC 62443 certifications. Experience operating within or alongside NCSC Assured Cyber Consultancies or equivalent industrial cybersecurity practices, including delivering OT threat assessments, architecture reviews, red team exercises, or resilience programmes in regulated sectors. Sector experience across OT heavy industries, such as Energy & Utilities, Oil & Gas, Manufacturing, Transport, Chemicals, Pharmaceuticals, or Critical National Infrastructure - with a strong understanding of engineering processes, operational constraints, and safety critical environments. Professional services experience delivering large scale OT cybersecurity transformations, working with multi disciplinary teams of engineers, cyber specialists, and operational leaders in market leading organisations. Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address may be required and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK. Join Us: At EY, you'll have the chance to build a meaningful and fulfilling career, supported by an inclusive culture and cutting-edge technology. Together, we can create a better working world for all. What we look for We're interested in people with integrity who can collaborate with people from a diverse range of backgrounds and crucially a growth mindset. What we offer We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer: Continuous learning: You'll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way. . click apply for full job details
Jul 08, 2026
Full time
hackajob is collaborating with EY to connect them with exceptional professionals for this role. Director, Cybersecurity, Engineering, OT, TC, UKI Location: London Other locations: Primary Location Only Salary: Competitive Date: 26 Jan 2026 Job description Requisition ID: At EY, we're all in to shape your future with confidence. We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Job Title: Director - Cybersecurity OT About EY: At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services. The Opportunity: As a Director in Cybersecurity, you will bring diverse perspectives and deep subject matter expertise to deliver high quality insights and outcomes for our clients. You will play a strategic leadership role in shaping and overseeing complex cybersecurity engagements, strengthening senior client relationships, and guiding teams to develop innovative, practical solutions that address the evolving security challenges organisations face. Key Responsibilities: Lead and manage large OT Security engagements, overseeing day to day delivery across industrial environments including manufacturing, energy, utilities, and critical infrastructure. Ensure delivery meets quality, time and budget expectations while navigating complex OT operational constraints. Apply deep technical and sector knowledge across OT, ICS, and IIoT environments to shape and deliver client programmes. Leverage expertise in IEC 62443, NIST CSF for OT, and the Purdue Model to conduct maturity assessments, design secure architectures, and lead OT cyber risk reduction initiatives. Identify, shape, and originate new OT security opportunities, using established industry relationships across engineering, operations, and cyber functions. Position the firm with senior OT decision makers, including engineering directors, CISOs, and asset owners, demonstrating a strong understanding of safety, reliability, and availability priorities. Partner with senior practice and market leaders to pursue high value OT security focused opportunities. Develop differentiated proposals, point of view materials, and transformation roadmaps aligned to industrial cybersecurity trends such as OT-IT convergence, zero trust for OT, asset visibility, and secure remote access. Provide visible leadership into a globally established high performing OT security team, sharing deep domain expertise in ICS/SCADA, industrial protocols, and secure OT architecture patterns. Mentor consultants to develop both technical skills and commercial acumen, fostering a culture of continuous learning and cross disciplinary collaboration. Develop impactful OT cybersecurity thought leadership, articulating market-relevant insights on IEC 62443 adoption, secure operations, industrial threat landscapes, and practical transformation strategies. Support the creation of frameworks and tools that differentiate the firm's OT security offering. Build and maintain strategic relationships with senior client leaders, including operations executives, heads of engineering, CTOs, and CISOs. Use these relationships to identify transformation opportunities, influence senior stakeholders, and steer delivery outcomes across complex industrial ecosystems. Skills and Attributes for Success: Exceptional communicator, able to clearly explain complex OT security concepts, risks, and architectures to both technical engineering teams and senior business stakeholders. Skilled at translating OT cyber risks into operational, safety, and financial impact. Strategic thinker with deep OT cybersecurity expertise, capable of diagnosing complex industrial cyber challenges and shaping robust, standards-aligned solutions (e.g., IEC 62443 reference models, Purdue Model segmentation strategies, OT Zero Trust). Able to secure executive buy in by aligning cyber outcomes with operational priorities such as uptime, safety, and regulatory compliance. Proven people leader, experienced in developing skilled OT cybersecurity teams through coaching, mentoring, and modelling inclusive, collaborative leadership behaviours. Strong commercial acumen, consistently delivering high quality outcomes, managing programme risks, and ensuring operational excellence across large scale industrial cybersecurity engagements. Experienced programme and engagement leader, adept at structuring and managing multi site OT security transformations, including asset discovery, segmentation, architecture redesign, and secure remote access implementation. Skilled at navigating the unique constraints of OT systems including legacy technologies and safety-critical environments. Pragmatic, client centric approach, able to navigate ambiguity across industrial operations, anticipate issues related to safety and continuity, and guide clients confidently through complex decision making regarding OT system modernisation and cyber risk reduction. Strong market access and trusted relationships, leveraging established networks in OT-heavy sectors (e.g., energy, utilities, manufacturing, transport) to influence market conversations, originate new opportunities, and position the firm as a leader in industrial cybersecurity. To Qualify for the Role, You Must Have: Proven experience defining and delivering OT centric cybersecurity strategies across industrial environments (ICS, SCADA, IIoT), with the ability to clearly articulate the operational and commercial value of OT security to senior stakeholders across engineering and enterprise leadership. A strong track record developing OT cybersecurity investment and transformation cases, including business justification, cost-benefit analysis, and prioritisation of remediation activities across multi site industrial estates. Capable of aligning OT security investment with organisational goals such as regulatory compliance, contractual obligations and digital transformation. Hands on experience designing and implementing OT security target operating models, covering governance, incident response, asset lifecycle management, engineering processes, and roles/responsibilities across IT-OT converged environments. Experienced in embedding secure by design principles aligned to IEC 62443, NIST , and recognised OT security best practice. Robust understanding of OT relevant cybersecurity regulations and frameworks, including IEC 62443, NIST , NIS/NIS2, sector specific regulatory requirements, and the Purdue Model for segmentation. Ideally, You'll Also Have: Relevant security and OT security specific qualifications, such as CISSP, CIISEC, GICSP, or ISA/IEC 62443 certifications. Experience operating within or alongside NCSC Assured Cyber Consultancies or equivalent industrial cybersecurity practices, including delivering OT threat assessments, architecture reviews, red team exercises, or resilience programmes in regulated sectors. Sector experience across OT heavy industries, such as Energy & Utilities, Oil & Gas, Manufacturing, Transport, Chemicals, Pharmaceuticals, or Critical National Infrastructure - with a strong understanding of engineering processes, operational constraints, and safety critical environments. Professional services experience delivering large scale OT cybersecurity transformations, working with multi disciplinary teams of engineers, cyber specialists, and operational leaders in market leading organisations. Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address may be required and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK. Join Us: At EY, you'll have the chance to build a meaningful and fulfilling career, supported by an inclusive culture and cutting-edge technology. Together, we can create a better working world for all. What we look for We're interested in people with integrity who can collaborate with people from a diverse range of backgrounds and crucially a growth mindset. What we offer We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer: Continuous learning: You'll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way. . click apply for full job details
Cloud Security Consultant Salary: Up to £100,000 base + package Location: Hybrid (UK client sites, office and home-based) We're recruiting for an experienced Cloud Security Consultant to join a leading cybersecurity consulting practice delivering secure cloud solutions across government and highly regulated environments. This is an exciting opportunity to work on complex cloud transformation programmes, helping clients design, secure and implement cloud environments across public, private and hybrid platforms. What you'll be doing You'll work closely with clients, architects and engineering teams to deliver secure cloud solutions, including: Designing secure cloud architectures for public, private and hybrid cloud environments Developing cloud security strategies and enterprise security use cases Creating security reference architectures and governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps practices Providing technical guidance and mentoring to colleagues and clients What we're looking for We're interested in speaking with Cloud Security professionals who have experience in one or more of the following: Cloud security architecture and design Public cloud platforms including AWS, Azure and/or Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications (AWS, Azure or Google Cloud) Security Requirements Due to the nature of the work, applicants must : Be a sole UK national Hold active SC (Security Check) clearance Have lived continuously in the UK for the last five years What's on offer Up to £100,000 base salary Hybrid working model Opportunity to work on high-profile, security-cleared programmes Exposure to enterprise-scale cloud transformation and security projects Excellent career development within a growing cybersecurity consulting practice If you're passionate about cloud security and want to work on technically challenging projects in secure environments, we'd love to hear from you.
Jul 08, 2026
Full time
Cloud Security Consultant Salary: Up to £100,000 base + package Location: Hybrid (UK client sites, office and home-based) We're recruiting for an experienced Cloud Security Consultant to join a leading cybersecurity consulting practice delivering secure cloud solutions across government and highly regulated environments. This is an exciting opportunity to work on complex cloud transformation programmes, helping clients design, secure and implement cloud environments across public, private and hybrid platforms. What you'll be doing You'll work closely with clients, architects and engineering teams to deliver secure cloud solutions, including: Designing secure cloud architectures for public, private and hybrid cloud environments Developing cloud security strategies and enterprise security use cases Creating security reference architectures and governance models Supporting the design and deployment of secure cloud infrastructure Embedding security throughout the cloud lifecycle using Secure by Design principles Conducting threat modelling and architecture reviews Working with cross-functional teams to integrate secure cloud solutions across hybrid IT environments Implementing security automation, orchestration and DevSecOps practices Providing technical guidance and mentoring to colleagues and clients What we're looking for We're interested in speaking with Cloud Security professionals who have experience in one or more of the following: Cloud security architecture and design Public cloud platforms including AWS, Azure and/or Google Cloud Platform (GCP) Secure cloud governance and operating models DevSecOps, Infrastructure as Code (IaC) and CI/CD security Zero Trust security principles Threat modelling and security architecture reviews Cloud networking, identity and access management, application and data security Security automation and orchestration Relevant cloud security certifications (AWS, Azure or Google Cloud) Security Requirements Due to the nature of the work, applicants must : Be a sole UK national Hold active SC (Security Check) clearance Have lived continuously in the UK for the last five years What's on offer Up to £100,000 base salary Hybrid working model Opportunity to work on high-profile, security-cleared programmes Exposure to enterprise-scale cloud transformation and security projects Excellent career development within a growing cybersecurity consulting practice If you're passionate about cloud security and want to work on technically challenging projects in secure environments, we'd love to hear from you.
Spectrum IT Recruitment
Gloucester, Gloucestershire
Infrastructure Specialist - (Microsoft 365 SME) Gloucester (Hybrid) Up to 65,000 + Benefits Are you a Microsoft technology expert looking to take ownership of enterprise-scale Microsoft 365 environments? We're seeking a Microsoft specialist to join a growing technical team as the go-to Microsoft Subject Matter Expert (SME). This is an opportunity for an experienced engineer who thrives on designing, securing, and optimising modern Microsoft environments while acting as a trusted advisor to customers and internal stakeholders. Working across a diverse customer base, you will lead the design and delivery of Microsoft 365, identity, endpoint management, and security solutions, helping organisations maximise their investment in Microsoft's cloud technologies. What You'll Be Doing Act as the Microsoft 365 SME, providing technical leadership and best practice guidance across customer environments. Design, deploy, and optimise Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft 365 Groups. Lead Microsoft tenant assessments, migrations, remediation projects, and platform modernisation initiatives. Architect and manage secure identity solutions using Microsoft Entra ID. Implement advanced Microsoft security technologies including Conditional Access, MFA, Passwordless Authentication, Privileged Identity Management (PIM), Microsoft Defender, and Microsoft Purview. Manage endpoint security and device lifecycle management through Microsoft Intune and Windows Autopilot. Apply Microsoft Zero Trust principles and security best practices across customer estates. Support compliance, governance, and security frameworks including GDPR and ISO-aligned standards. Drive automation and operational efficiency through PowerShell scripting and process improvement. Act as the senior escalation point for complex technical issues and project delivery. Mentor engineers and contribute to the development of technical standards and service excellence. What We're Looking For Essential Experience Extensive hands-on experience with Microsoft 365 administration, architecture, and security. Deep technical expertise across: Microsoft Entra ID (Azure AD) Microsoft Intune & Windows Autopilot Microsoft Defender Suite Exchange Online SharePoint Online Microsoft Teams Conditional Access & Identity Security Strong understanding of endpoint management, identity governance, and Microsoft security best practices. Experience working within MSP, consultancy, or multi-tenant environments. Excellent stakeholder management and customer-facing communication skills. Ability to operate as a trusted Microsoft SME and technical authority. Desirable Experience PowerShell scripting and automation. Microsoft Sentinel. Defender XDR. Experience driving technical standards, governance, and engineering improvements. Certifications (Desirable) MS-102: Microsoft 365 Administrator MD-102: Endpoint Administrator SC-Series Security Certifications AZ-Series Azure Certifications Why Join Us? This is an opportunity to become the Microsoft technical authority within a highly respected technology business. You'll work with the latest Microsoft cloud, security, and workplace technologies, influence technical strategy, and play a key role in delivering secure, modern workplace solutions for customers. If you're passionate about Microsoft technologies and want a role where your expertise genuinely makes an impact, we'd love to hear from you. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
Jul 08, 2026
Full time
Infrastructure Specialist - (Microsoft 365 SME) Gloucester (Hybrid) Up to 65,000 + Benefits Are you a Microsoft technology expert looking to take ownership of enterprise-scale Microsoft 365 environments? We're seeking a Microsoft specialist to join a growing technical team as the go-to Microsoft Subject Matter Expert (SME). This is an opportunity for an experienced engineer who thrives on designing, securing, and optimising modern Microsoft environments while acting as a trusted advisor to customers and internal stakeholders. Working across a diverse customer base, you will lead the design and delivery of Microsoft 365, identity, endpoint management, and security solutions, helping organisations maximise their investment in Microsoft's cloud technologies. What You'll Be Doing Act as the Microsoft 365 SME, providing technical leadership and best practice guidance across customer environments. Design, deploy, and optimise Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft 365 Groups. Lead Microsoft tenant assessments, migrations, remediation projects, and platform modernisation initiatives. Architect and manage secure identity solutions using Microsoft Entra ID. Implement advanced Microsoft security technologies including Conditional Access, MFA, Passwordless Authentication, Privileged Identity Management (PIM), Microsoft Defender, and Microsoft Purview. Manage endpoint security and device lifecycle management through Microsoft Intune and Windows Autopilot. Apply Microsoft Zero Trust principles and security best practices across customer estates. Support compliance, governance, and security frameworks including GDPR and ISO-aligned standards. Drive automation and operational efficiency through PowerShell scripting and process improvement. Act as the senior escalation point for complex technical issues and project delivery. Mentor engineers and contribute to the development of technical standards and service excellence. What We're Looking For Essential Experience Extensive hands-on experience with Microsoft 365 administration, architecture, and security. Deep technical expertise across: Microsoft Entra ID (Azure AD) Microsoft Intune & Windows Autopilot Microsoft Defender Suite Exchange Online SharePoint Online Microsoft Teams Conditional Access & Identity Security Strong understanding of endpoint management, identity governance, and Microsoft security best practices. Experience working within MSP, consultancy, or multi-tenant environments. Excellent stakeholder management and customer-facing communication skills. Ability to operate as a trusted Microsoft SME and technical authority. Desirable Experience PowerShell scripting and automation. Microsoft Sentinel. Defender XDR. Experience driving technical standards, governance, and engineering improvements. Certifications (Desirable) MS-102: Microsoft 365 Administrator MD-102: Endpoint Administrator SC-Series Security Certifications AZ-Series Azure Certifications Why Join Us? This is an opportunity to become the Microsoft technical authority within a highly respected technology business. You'll work with the latest Microsoft cloud, security, and workplace technologies, influence technical strategy, and play a key role in delivering secure, modern workplace solutions for customers. If you're passionate about Microsoft technologies and want a role where your expertise genuinely makes an impact, we'd love to hear from you. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
IT Security Architect, Financial Services London, City (Hybrid) Highly competitive salary with bonus and FS benefits A leading global financial services firm is building out its security architecture function and looking for a strong Security Architect to join a lean, fast-moving team at a genuinely interesting moment. The firm is mid-transformation: cloud migration, a Zero Trust programme, and a growing AI security agenda. There is real work to do, and real scope to shape how security architecture is delivered across the business. The role You will conduct security design reviews end to end, perform threat modelling, author security standards and patterns, and provide architecture consultancy to project teams across the business. You will build deep knowledge of a specific business division while remaining part of a central, shared team. This is not a governance role. You will need to know your technology well enough to have real conversations with engineers and shape solutions, not just review them. What they are looking for The ideal profile sits between pure theorist and hands-on practitioner. Close to technology, technically credible, and operating confidently at architecture level. Core requirements: Currently working as a Security Architect, not transitioning from SecOps or engineering Strong Azure and Microsoft cloud knowledge, including identity, networking, and workload protection Solid IAM background covering federation, SSO, MFA, and privileged access Experience in a regulated environment, either financial services or consultancy with FS clients Proven threat modelling and security design review experience, with the ability to write clear security standards Strong differentiators: Awareness of AI and LLM security risks (a live priority here, not a futureone) Network segmentation, Zero Trust, and SASE/SSE experience, SABSA certification The environment This firm moves fast. If you are used to a large architecture team where everyone owns a small slice of a long process, this probably is not the right fit. If you want breadth, real ownership, and the chance to build something properly, it is worth a conversation.
Jul 08, 2026
Full time
IT Security Architect, Financial Services London, City (Hybrid) Highly competitive salary with bonus and FS benefits A leading global financial services firm is building out its security architecture function and looking for a strong Security Architect to join a lean, fast-moving team at a genuinely interesting moment. The firm is mid-transformation: cloud migration, a Zero Trust programme, and a growing AI security agenda. There is real work to do, and real scope to shape how security architecture is delivered across the business. The role You will conduct security design reviews end to end, perform threat modelling, author security standards and patterns, and provide architecture consultancy to project teams across the business. You will build deep knowledge of a specific business division while remaining part of a central, shared team. This is not a governance role. You will need to know your technology well enough to have real conversations with engineers and shape solutions, not just review them. What they are looking for The ideal profile sits between pure theorist and hands-on practitioner. Close to technology, technically credible, and operating confidently at architecture level. Core requirements: Currently working as a Security Architect, not transitioning from SecOps or engineering Strong Azure and Microsoft cloud knowledge, including identity, networking, and workload protection Solid IAM background covering federation, SSO, MFA, and privileged access Experience in a regulated environment, either financial services or consultancy with FS clients Proven threat modelling and security design review experience, with the ability to write clear security standards Strong differentiators: Awareness of AI and LLM security risks (a live priority here, not a futureone) Network segmentation, Zero Trust, and SASE/SSE experience, SABSA certification The environment This firm moves fast. If you are used to a large architecture team where everyone owns a small slice of a long process, this probably is not the right fit. If you want breadth, real ownership, and the chance to build something properly, it is worth a conversation.
International Trade Compliance Manager Denham Lead it. Resolve it. Trust it with lives! Step into a role where legal expertise meets global operational impact. As the International Trade Compliance (ITC) Manager at Denham, you will lead a dedicated team to navigate the complex, high-stakes world of aerospace export control. From regulations to real-world delivery, your leadership ensures our life-saving technology reaches global pilots safely and without delay. Direct Impact, Global Scale. Life-Saving Mission. At Martin-Baker, the work we do matters. We design, manufacture and support life-saving equipment used by aircrew around the world. Our products operate in demanding environments, where quality, reliability and attention to detail are critical. We re proud of our long history in aerospace and defence, also focused on the future. Joining Martin-Baker means becoming part of a business with a clear purpose, strong engineering capability and a long-term commitment to its people, products and customers. Whether you work in engineering, operations, commercial, finance, supply chain or support functions, your contribution helps deliver equipment that protects lives. It is challenging work, but it is also meaningful, and with over 7,700 lives saved, it gives our people the opportunity to be part of something with real impact. The Opportunity As the International Trade Compliance Manager, you will report directly to the Group Head of Compliance and take full ownership of our daily export and customs operations. You will step into a highly visible, strategic role, leading a tight-knit team of four ITC professionals in a complex, fast-paced environment where compliance is rarely black and white. This is a unique opportunity to act as a pragmatic leader who interprets export law confidently to find compliant, service-driven solutions. Furthermore, you will drive business transformation by leading a major £1 million Global Trade Solution (GTS) project to modernise our customs systems. This role is based at our Denham site, where you will directly influence senior leadership and keep our global business moving. What You ll Do Team Leadership: Manage and develop a team of four ITC professionals, providing technical guidance, hands-on coaching, and nurturing future talent. Compliance & Licensing: Oversee all export licensing, sanctions screening, and technology export licenses for employee business travel. Operational Flow: Manage daily business-as-usual activities, including standard sales orders and off-system orders, to ensure zero delays in shipping. Project Delivery: Lead the implementation of our £1 million GTS project covering customs import, customs export, and trade preference management. Strategic Guidance: Stay ahead of changing global trade legislation (such as international tariffs) and bring clear, risk-assessed options and recommendations to senior leadership. What We re Looking For Deep ITC Experience: 5 to 10 years of dedicated experience living and breathing export control and international trade compliance (essential). Aerospace & Defence Background: Strong, practical knowledge of US export controls (ITAR and EAR) and EU regulations (essential). Customs Knowledge: A solid, broad understanding of customs compliance and import/export regulations (essential). Pragmatic Law Interpretation: Proven ability to confidently interpret and apply complex export laws in a real-world, commercial environment (essential). Systems Project Experience: Prior involvement with Global Trade Solution (GTS) software implementations or master data for imports and exports (desirable). Mindset: A confident, collaborative, solution-oriented professional who thrives on finding legal, calculated ways forward in grey areas. Share and demonstrate the Martin-Baker values. Our Values At Martin-Baker, we value professionalism, understanding, teamwork, humility, accountability and integrity. We look for people who take pride in their work, collaborate openly and act with care because the work we do matters. What We Offer Excellent pension package with strong employer support Martin-Baker contributes 9% of your salary (non-contributory to the employee), with further employer contributions that grow as you increase your own Life Assurance Lunchtime finish on a Friday Personalised training and development plan Healthcare plan 25 days annual leave plus bank holidays Opportunity to purchase additional annual leave Martin-Baker + (retail discounts platform) Occupational Health team Workplace Nursery Benefit scheme Cycle to work scheme How to Apply / Your Interview Journey Please submit your CV and should you wish, a brief covering letter outlining your suitability, including any relevant experience, skills and expertise you can bring to the role. Hit "Apply Now" After submitting your application, your details will be reviewed, and the recruitment team will be in touch. Initial Telephone interview: A detailed conversation with your Recruitment Business Partner to understand your background and motivation for joining Martin-Baker. First Stage Interview : An initial virtual discussion to explore your background, motivations and suitability for the role Final Stage Interview : A face-to-face technical and operational assessment at our Denham site, allowing you to demonstrate your compliance capability, leadership approach, and technical expertise. We believe in equal opportunity, committed to creating an inclusive environment where everyone is respected. We want you to be able to do your best work. Martin-Baker is a signatory to the Armed Forces Covenant, showing our support and commitment to our Armed Forces and their families, proudly supporting those who serve. This role is subject to pre-employment screening in line with the UK Government s Baseline Personnel Security Standard (BPSS). The role also involves access to information governed by U.S. Export Control Laws (including ITAR); therefore, all applicants must satisfy ITAR eligibility requirements.
Jul 08, 2026
Full time
International Trade Compliance Manager Denham Lead it. Resolve it. Trust it with lives! Step into a role where legal expertise meets global operational impact. As the International Trade Compliance (ITC) Manager at Denham, you will lead a dedicated team to navigate the complex, high-stakes world of aerospace export control. From regulations to real-world delivery, your leadership ensures our life-saving technology reaches global pilots safely and without delay. Direct Impact, Global Scale. Life-Saving Mission. At Martin-Baker, the work we do matters. We design, manufacture and support life-saving equipment used by aircrew around the world. Our products operate in demanding environments, where quality, reliability and attention to detail are critical. We re proud of our long history in aerospace and defence, also focused on the future. Joining Martin-Baker means becoming part of a business with a clear purpose, strong engineering capability and a long-term commitment to its people, products and customers. Whether you work in engineering, operations, commercial, finance, supply chain or support functions, your contribution helps deliver equipment that protects lives. It is challenging work, but it is also meaningful, and with over 7,700 lives saved, it gives our people the opportunity to be part of something with real impact. The Opportunity As the International Trade Compliance Manager, you will report directly to the Group Head of Compliance and take full ownership of our daily export and customs operations. You will step into a highly visible, strategic role, leading a tight-knit team of four ITC professionals in a complex, fast-paced environment where compliance is rarely black and white. This is a unique opportunity to act as a pragmatic leader who interprets export law confidently to find compliant, service-driven solutions. Furthermore, you will drive business transformation by leading a major £1 million Global Trade Solution (GTS) project to modernise our customs systems. This role is based at our Denham site, where you will directly influence senior leadership and keep our global business moving. What You ll Do Team Leadership: Manage and develop a team of four ITC professionals, providing technical guidance, hands-on coaching, and nurturing future talent. Compliance & Licensing: Oversee all export licensing, sanctions screening, and technology export licenses for employee business travel. Operational Flow: Manage daily business-as-usual activities, including standard sales orders and off-system orders, to ensure zero delays in shipping. Project Delivery: Lead the implementation of our £1 million GTS project covering customs import, customs export, and trade preference management. Strategic Guidance: Stay ahead of changing global trade legislation (such as international tariffs) and bring clear, risk-assessed options and recommendations to senior leadership. What We re Looking For Deep ITC Experience: 5 to 10 years of dedicated experience living and breathing export control and international trade compliance (essential). Aerospace & Defence Background: Strong, practical knowledge of US export controls (ITAR and EAR) and EU regulations (essential). Customs Knowledge: A solid, broad understanding of customs compliance and import/export regulations (essential). Pragmatic Law Interpretation: Proven ability to confidently interpret and apply complex export laws in a real-world, commercial environment (essential). Systems Project Experience: Prior involvement with Global Trade Solution (GTS) software implementations or master data for imports and exports (desirable). Mindset: A confident, collaborative, solution-oriented professional who thrives on finding legal, calculated ways forward in grey areas. Share and demonstrate the Martin-Baker values. Our Values At Martin-Baker, we value professionalism, understanding, teamwork, humility, accountability and integrity. We look for people who take pride in their work, collaborate openly and act with care because the work we do matters. What We Offer Excellent pension package with strong employer support Martin-Baker contributes 9% of your salary (non-contributory to the employee), with further employer contributions that grow as you increase your own Life Assurance Lunchtime finish on a Friday Personalised training and development plan Healthcare plan 25 days annual leave plus bank holidays Opportunity to purchase additional annual leave Martin-Baker + (retail discounts platform) Occupational Health team Workplace Nursery Benefit scheme Cycle to work scheme How to Apply / Your Interview Journey Please submit your CV and should you wish, a brief covering letter outlining your suitability, including any relevant experience, skills and expertise you can bring to the role. Hit "Apply Now" After submitting your application, your details will be reviewed, and the recruitment team will be in touch. Initial Telephone interview: A detailed conversation with your Recruitment Business Partner to understand your background and motivation for joining Martin-Baker. First Stage Interview : An initial virtual discussion to explore your background, motivations and suitability for the role Final Stage Interview : A face-to-face technical and operational assessment at our Denham site, allowing you to demonstrate your compliance capability, leadership approach, and technical expertise. We believe in equal opportunity, committed to creating an inclusive environment where everyone is respected. We want you to be able to do your best work. Martin-Baker is a signatory to the Armed Forces Covenant, showing our support and commitment to our Armed Forces and their families, proudly supporting those who serve. This role is subject to pre-employment screening in line with the UK Government s Baseline Personnel Security Standard (BPSS). The role also involves access to information governed by U.S. Export Control Laws (including ITAR); therefore, all applicants must satisfy ITAR eligibility requirements.
Cloud Systems Engineer Permanent Hybrid Working South Wales Are you an experienced Cloud Engineer looking for an opportunity to shape cloud strategy, influence technical decisions, and take ownership of a growing multi-cloud environment? We're supporting a well-established organisation undergoing a significant digital transformation programme. As part of this journey, they're looking to appoint a Cloud Systems Engineer to lead the design, security, operation and continuous improvement of their cloud platforms. This role will suit someone who thrives on solving complex technical challenges, enjoys working across multiple teams, and wants to play a key role in delivering secure, resilient and scalable cloud services. The Role As the Cloud Systems Engineer, you'll act as the organisation's cloud subject matter expert, taking primary responsibility for AWS environments while also supporting Azure and Microsoft 365 services. You'll be responsible for designing, implementing and managing cloud infrastructure, ensuring platforms remain secure, cost-effective, highly available and aligned to best practice. Working closely with infrastructure, development, cyber security and support teams, you'll provide both hands-on engineering expertise and strategic technical guidance. Key Responsibilities Cloud Engineering & Architecture Design, build and maintain secure cloud infrastructure across AWS and Azure Develop cloud architectures aligned with industry best practice and the AWS Well-Architected Framework Implement and manage Infrastructure as Code (CloudFormation and similar technologies) Design secure multi-account environments, networking and connectivity solutions Define cloud standards, patterns and engineering best practices Support the organisation's ongoing digital transformation initiatives Security, Identity & Governance Implement and maintain secure identity and access management controls Apply Zero Trust and least-privilege security principles Integrate AWS workloads with Microsoft Entra ID Manage cloud-native security services, monitoring and alerting Work alongside cyber security teams to improve security posture and reduce risk Resilience & Operations Manage monitoring, performance and availability across cloud environments Design and maintain backup, disaster recovery and business continuity solutions Provide 3rd line support for cloud-related incidents and technical issues Support service reliability and operational excellence Cost & Performance Optimisation Monitor cloud consumption and costs Implement governance, reporting and optimisation measures Balance performance, resilience and commercial efficiency What We're Looking For Essential Experience Strong hands-on AWS engineering experience within an enterprise or commercial environment Experience acting as a cloud SME or technical authority Experience designing and operating secure cloud platforms Strong infrastructure automation and Infrastructure as Code experience Experience working closely with cyber security teams Technical Skills AWS EC2, Auto Scaling and Load Balancing VPC design, networking and connectivity RDS and managed database services Lambda and event-driven architectures IAM, KMS, Secrets Manager and Parameter Store CloudWatch, CloudTrail and AWS Config GuardDuty, Security Hub, WAF and other AWS security services AWS Organizations Azure networking, virtual machines and monitoring Microsoft Entra ID, MFA and Conditional Access AWS and Azure identity integration Desirable Microsoft 365 administration and governance IBM Cloud exposure Hybrid or multi-cloud experience Experience supporting large-scale transformation programmes Knowledge of OAuth2, OIDC and SAML Certifications Highly desirable: AWS Solutions Architect Associate or Professional Additional certifications welcomed: AWS Security Specialty Azure Certifications Microsoft 365 Certifications Security+ CCNA Other infrastructure, networking or cyber security qualifications What's in It for You? Salary of £47,00 - £51,000 Hybrid working model in South Wales Generous annual leave entitlement Excellent pension scheme Ongoing professional development and training opportunities Opportunity to play a key role in a major cloud transformation programme Collaborative and supportive working environment Apply Now If you're a skilled AWS-focused Cloud/Infrastructure Engineer looking to combine architecture, security, automation and technical leadership in a highly visible role, we'd love to hear from you.
Jul 07, 2026
Full time
Cloud Systems Engineer Permanent Hybrid Working South Wales Are you an experienced Cloud Engineer looking for an opportunity to shape cloud strategy, influence technical decisions, and take ownership of a growing multi-cloud environment? We're supporting a well-established organisation undergoing a significant digital transformation programme. As part of this journey, they're looking to appoint a Cloud Systems Engineer to lead the design, security, operation and continuous improvement of their cloud platforms. This role will suit someone who thrives on solving complex technical challenges, enjoys working across multiple teams, and wants to play a key role in delivering secure, resilient and scalable cloud services. The Role As the Cloud Systems Engineer, you'll act as the organisation's cloud subject matter expert, taking primary responsibility for AWS environments while also supporting Azure and Microsoft 365 services. You'll be responsible for designing, implementing and managing cloud infrastructure, ensuring platforms remain secure, cost-effective, highly available and aligned to best practice. Working closely with infrastructure, development, cyber security and support teams, you'll provide both hands-on engineering expertise and strategic technical guidance. Key Responsibilities Cloud Engineering & Architecture Design, build and maintain secure cloud infrastructure across AWS and Azure Develop cloud architectures aligned with industry best practice and the AWS Well-Architected Framework Implement and manage Infrastructure as Code (CloudFormation and similar technologies) Design secure multi-account environments, networking and connectivity solutions Define cloud standards, patterns and engineering best practices Support the organisation's ongoing digital transformation initiatives Security, Identity & Governance Implement and maintain secure identity and access management controls Apply Zero Trust and least-privilege security principles Integrate AWS workloads with Microsoft Entra ID Manage cloud-native security services, monitoring and alerting Work alongside cyber security teams to improve security posture and reduce risk Resilience & Operations Manage monitoring, performance and availability across cloud environments Design and maintain backup, disaster recovery and business continuity solutions Provide 3rd line support for cloud-related incidents and technical issues Support service reliability and operational excellence Cost & Performance Optimisation Monitor cloud consumption and costs Implement governance, reporting and optimisation measures Balance performance, resilience and commercial efficiency What We're Looking For Essential Experience Strong hands-on AWS engineering experience within an enterprise or commercial environment Experience acting as a cloud SME or technical authority Experience designing and operating secure cloud platforms Strong infrastructure automation and Infrastructure as Code experience Experience working closely with cyber security teams Technical Skills AWS EC2, Auto Scaling and Load Balancing VPC design, networking and connectivity RDS and managed database services Lambda and event-driven architectures IAM, KMS, Secrets Manager and Parameter Store CloudWatch, CloudTrail and AWS Config GuardDuty, Security Hub, WAF and other AWS security services AWS Organizations Azure networking, virtual machines and monitoring Microsoft Entra ID, MFA and Conditional Access AWS and Azure identity integration Desirable Microsoft 365 administration and governance IBM Cloud exposure Hybrid or multi-cloud experience Experience supporting large-scale transformation programmes Knowledge of OAuth2, OIDC and SAML Certifications Highly desirable: AWS Solutions Architect Associate or Professional Additional certifications welcomed: AWS Security Specialty Azure Certifications Microsoft 365 Certifications Security+ CCNA Other infrastructure, networking or cyber security qualifications What's in It for You? Salary of £47,00 - £51,000 Hybrid working model in South Wales Generous annual leave entitlement Excellent pension scheme Ongoing professional development and training opportunities Opportunity to play a key role in a major cloud transformation programme Collaborative and supportive working environment Apply Now If you're a skilled AWS-focused Cloud/Infrastructure Engineer looking to combine architecture, security, automation and technical leadership in a highly visible role, we'd love to hear from you.
Security Engineer Hybrid (London) £77,000 + Bonus A well-established eComm business is looking for a Security Engineer to take real ownership of its security engineering function. This is a rare opportunity to join a lean, high-trust team and shape - not just operate - security controls across a modern, cloud-first technology estate. If you're an experienced security engineer who's ready to move from executing a playbook to writing one, this role was built for you. Security Engineer Role Reporting to the Information Security Manager, you'll be the engineering force behind the business's cyber resilience programme. The estate spans cloud platforms (GCP and AWS), marketplace technology, SaaS, and in-house engineering - and your remit covers all of it. You'll design and deliver security controls, drive automation, build visibility across assets and identities, and embed security across engineering, product, and operations. AI tooling is actively encouraged as a force multiplier - this is a team that works smart, not just hard. What You'll Work On as the Security Engineer • Designing and operating controls across cloud, identity, endpoint, data, and application layers • Leading an Asset & Application Visibility Programme - bringing continuous, automated discovery to the full estate • Zero Trust enforcement - identity-aware access across remote and internal services • SIEM engineering, detection tuning, and vulnerability management - focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking For as the Security Engineer • 5+ years in security engineering or architecture, with clear technical depth and autonomy • Proven hands-on delivery across cloud security (GCP/AWS), identity (Entra ID), SIEM/detection engineering, DLP, or zero trust - ideally three or more • Strong foundations in networking, operating systems, identity protocols, and cloud architecture • A track record of building or significantly improving security capabilities, not just maintaining them • The communication skills to influence without authority across technical and non-technical teams • Comfortable making sound security judgements in ambiguous situations and defending them clearly Nice to Have • Experience with Rapid7 InsightVM / InsightIDR, SentinelOne, Cloudflare, OneTrust, or Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership - a genuine mandate to drive change, with the tooling and trust to back it up • Modern security stack: Rapid7 (with MDR), SentinelOne, OneTrust, and AI tooling at organisation level • Remote-first working with flexible in-person time at a London office • A lean, high-trust team where your decisions have direct impact Interested? Please click APPLY NOW for immediate consideration for the Security Engineer
Jul 07, 2026
Full time
Security Engineer Hybrid (London) £77,000 + Bonus A well-established eComm business is looking for a Security Engineer to take real ownership of its security engineering function. This is a rare opportunity to join a lean, high-trust team and shape - not just operate - security controls across a modern, cloud-first technology estate. If you're an experienced security engineer who's ready to move from executing a playbook to writing one, this role was built for you. Security Engineer Role Reporting to the Information Security Manager, you'll be the engineering force behind the business's cyber resilience programme. The estate spans cloud platforms (GCP and AWS), marketplace technology, SaaS, and in-house engineering - and your remit covers all of it. You'll design and deliver security controls, drive automation, build visibility across assets and identities, and embed security across engineering, product, and operations. AI tooling is actively encouraged as a force multiplier - this is a team that works smart, not just hard. What You'll Work On as the Security Engineer • Designing and operating controls across cloud, identity, endpoint, data, and application layers • Leading an Asset & Application Visibility Programme - bringing continuous, automated discovery to the full estate • Zero Trust enforcement - identity-aware access across remote and internal services • SIEM engineering, detection tuning, and vulnerability management - focused on outcomes and automation • Data Loss Prevention and Identity Lifecycle controls (JML) in Entra ID and key SaaS platforms • Supporting incident response and triage of alerts requiring business context • Influencing engineering, product, and senior stakeholders on security direction What We're Looking For as the Security Engineer • 5+ years in security engineering or architecture, with clear technical depth and autonomy • Proven hands-on delivery across cloud security (GCP/AWS), identity (Entra ID), SIEM/detection engineering, DLP, or zero trust - ideally three or more • Strong foundations in networking, operating systems, identity protocols, and cloud architecture • A track record of building or significantly improving security capabilities, not just maintaining them • The communication skills to influence without authority across technical and non-technical teams • Comfortable making sound security judgements in ambiguous situations and defending them clearly Nice to Have • Experience with Rapid7 InsightVM / InsightIDR, SentinelOne, Cloudflare, OneTrust, or Microsoft Purview • Background in eComm, marketplace, or retail technology • Scripting (Python, PowerShell), Terraform, or detection-as-code experience • Familiarity with NIST CSF, ISO 27001, OWASP LLM Top 10, or similar frameworks What's on Offer for the Security Engineer • Real ownership - a genuine mandate to drive change, with the tooling and trust to back it up • Modern security stack: Rapid7 (with MDR), SentinelOne, OneTrust, and AI tooling at organisation level • Remote-first working with flexible in-person time at a London office • A lean, high-trust team where your decisions have direct impact Interested? Please click APPLY NOW for immediate consideration for the Security Engineer
