IT Infrastructure & Platforms Senior Engineer

at  Lightsource bp

SUMMARY

The IT Infrastructure & Platforms Senior Engineer will be responsible for providing 2nd and 3rd line support, monitoring and developing the infrastructure platforms which enables business operations. The role will take responsibility for a wide range of infrastructure components from server to network, primarily across cloud-based technologies. There is a strong focus on vulnerability management and continual improvement of the enterprise security posture of Lightsource bp. This is a proactive, technical hands-on role with the scope to contribute across a variety of business areas.

EXPERIENCE & KNOWLEDGE

• At least 5 years experience working in medium sized organization across M365, Entra, Intune stacks in a technical support role
• At least 5 years experience in application packaging/deployment, focused around Intune technologies
• Industry experience in Backup Technologies
• Industry experience in implementing alerting/monitoring systems
• Possessing critical thinking skills to help troubleshoot issues
• Be comfortable presenting/leading user-facing calls with regards to technical demos, training.
• Microsoft Active Directory, DNS/DHCP/File, Group Policy, Powershell Scripting
• M365 E5, including Admin Console, Teams Admin, Exchange Online, SharePoint Online, Viva
• Entra + Intune Endpoint management portals, with experience of creation of conditional access policies
• Policy creation in Intune to manage both corporate and personal BYOD devices
• Experienced in utilisation of Intune Endpoint Analytics to assist with device health
• Expertise in Windows Autopilot, white glove deployment
• Windows 11 Builds to CIS Benchmark standards
• Experienced in use of Defender suite, inclusive of Defender XDR, Defender for Cloud, Cloud Apps, Identity, Servers, Endpoint
• Purview/Security and Compliance experience focused around DLP policies
• Azure cloud environment administration with a particular focus on IaaS. AWS desirable.
• Azure Sentinel experience, including rule tuning, log ingestion management.
• VMware ESXi, vCenter.
• Veeam Backup Technologies
• Mimecast, KnowBe4
• Crowdstrike
• Cisco Firepower, Cisco Meraki and Cisco Umbrella experience
• Experienced in use of security and enterprise infrastructure products and tools, such as anti-malware products, vulnerability scanning tools, cloud platforms etc.
• Understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks
• Experienced working within an ITIL framework, ideally focused around utilisation of ServiceNow as ITSM Tool. Understanding of request, incident, problem, change process and CMDB concepts required.

EDUCATION

• IT related degree or equivalent
• Professional qualifications focused on Microsoft technologies – M365, Entra, Azure Cloud

WORK & GENERAL SKILLS

• Team player, able to empathize with and help others
• Able to thrive in a collaborative, fast paced team environment
• Able to provide a high level of service to users
• Able to multitask effectively
• Able to work effectively with minimal supervision
• Curiosity, a desire to solve technical problems
• Flexible & “can do” attitude
• Strong stakeholder management skills

DUTIES AND RESPONSIBILITIES

• Proactive administration, maintenance and management of core infrastructure services including servers, storage, backups, applications and databases
• Support and assist with the design of new IT infrastructure and associated services, including LLD and HLD where appropriate
• Contribute to the development of infrastructure standards, processes and procedures and guidelines to mitigate software, hardware and networking issues
• Maintain and implement appropriate industry-standard best practices
• Perform upgrades and patch management of all infrastructure components taking into consideration outages and security
• Proactively monitor the infrastructure platform ensuring 5 9’s availability.
• Report, trend and analyse infrastructure load and system availability producing effective capacity planning to maximise uptimes and throughput
• Lead on Vulnerability Management, assessing new threats and utilising toolsets to resolve or mitigate critical, high, zero days vulnerabilities to agreed timeframes
• Lead on enterprise-wide application security posture management and provide third-line assurance around vulnerability remediation
• Take a threat led approach to enhancing configurations and policy to reduce risk
• Continually monitor the organisations security systems and related infrastructure for signs of compromise, integrating threat detection solutions to our most critical business applications.
• Focus on maximising security value from existing investments.
• Monitor logs and review system configurations, including user accounts, to ensure that the core infrastructure is secure, available and recoverable
• Work with the broader Cyber Security team to investigate, contain and remediate cyber security incidents
• Provide 2nd & 3rd line support that has been escalated through the service desk, line management or other senior members
• Ensure incidents are resolved, requests fulfilled, and problems investigated with appropriate resolution and contribution to the central knowledge base
• Interact with vendors to identify and evaluate new technology products
• Out of hours work required to maintain and update business critical infrastructure. Out of hours includes, evening and weekends, as business demands.