Infrastructure Engineer

Infrastructure Engineer

• Location: Mostly remote, with occasional travel to Leeds
• Rate: £560 per day, Inside IR35
• Duration: Until November 2027
• Central government or NHS experience essential

Overview

We’re looking for a hands-on Infrastructure Engineer to join NHS England and work down a significant vulnerability backlog across national, mission-critical services. New findings land every week from scanners, pen tests, audits and security advisories. Your job is to fix them safely in production, prove they’re closed and keep live services running.

Key Responsibilities

• Work through the vulnerability backlog, fixing findings from scanners, pen tests, IT health checks and audits
• Patch and upgrade operating systems, packages, middleware, container base images and application dependencies
• Fix insecure cloud configuration, including over-permissive IAM, open security groups and unencrypted resources
• Keep legacy data stores patched and contained, and support their removal as migrations complete
• Put compensating controls in place where fixes can’t be applied straight away, and document the risk
• Respond quickly to critical CVEs, zero-days, NHS England cyber alerts and vendor advisories
• Support security and service incidents hands-on, including containment, emergency changes and recovery
• Test fixes in lower environments and plan rollback for every production change
• Deliver changes through formal change control, including emergency changes
• Use and extend Terraform, Ansible and CI/CD pipelines to apply fixes consistently
• Re-scan to verify fixes, update tickets and the risk register, and report progress and blockers
• Lead and coordinate a small team of engineers, allocate work and review fixes

Key Requirements

• Central government or NHS experience (essential)
• Strong track record of remediating vulnerabilities in live production environments, at volume and to deadlines
• Deep Linux expertise (RHEL or similar), including patching, kernel and service upgrades and hardening
• Hands-on AWS experience fixing misconfigurations in IAM, security groups, S3, encryption and logging
• Able to interpret scanner and pen test output (Qualys, Tenable, AWS Inspector, container image scanners)
• Experience patching and rebuilding containers and base images, and updating dependencies with dev teams
• Delivering changes with Terraform, Ansible and CI/CD (GitLab CI or Jenkins)
• Working within formal change control (CAB), including emergency changes with tested rollback
• Scripting in Bash and Python, plus experience working with RESTful APIs

Apply now or email [email protected] for more information