Infrastructure Engineer
Location: Mostly remote, with occasional travel to Leeds
Rate: £560 per day, Inside IR35
Duration: Until November 2027
Central government or NHS experience essentialOverview
We’re looking for a hands‑on Infrastructure Engineer to join NHS England and work down a significant vulnerability backlog across national, mission‑critical services. New findings land every week from scanners, pen tests, audits and security advisories. Your job is to fix them safely in production, prove they’re closed and keep live services running.
Key Responsibilities
- Work through the vulnerability backlog, fixing findings from scanners, pen tests, IT health checks and audits
- Patch and upgrade operating systems, packages, middleware, container base images and application dependencies
- Fix insecure cloud configuration, including over‑permissive IAM, open security groups and unencrypted resources
- Keep legacy data stores patched and contained, and support their removal as migrations complete
- Put compensating controls in place where fixes can’t be applied straight away, and document the risk
- Respond quickly to critical CVEs, zero‑days, NHS England cyber alerts and vendor advisories
- Support security and service incidents hands‑on, including containment, emergency changes and recovery
- Test fixes in lower environments and plan rollback for every production change
- Deliver changes through formal change control, including emergency changes
- Use and extend Terraform, Ansible and CI/CD pipelines to apply fixes consistently
- Re‑scan to verify fixes, update tickets and the risk register, and report progress and blockers
- Lead and coordinate a small team of engineers, allocate work and review fixes
Key Requirements
- Central government or NHS experience (essential)
- Strong track record of remediating vulnerabilities in live production environments, at volume and to deadlines
- Deep Linux expertise (RHEL or similar), including patching, kernel and service upgrades and hardening
- Hands‑on AWS experience fixing misconfigurations in IAM, security groups, S3, encryption and logging
- Able to interpret scanner and pen test output (Qualys, Tenable, AWS Inspector, container image scanners)
- Experience patching and rebuilding containers and base images, and updating dependencies with dev teams
- Delivering changes with Terraform, Ansible and CI/CD (GitLab CI or Jenkins)
- Working within formal change control (CAB), including emergency changes with tested rollback
- Scripting in Bash and Python, plus experience working with RESTful APIs
Infrastructure Engineer in City of London employer: Brio Digital
Brio Digital is an exceptional employer that fosters a collaborative and innovative work culture, perfect for those looking to make a significant impact in the digital transformation space. With a focus on employee growth, we offer continuous learning opportunities and the flexibility of remote work, complemented by occasional travel to London for team engagements. Join us to be part of a dynamic team that values your contributions and supports your professional development.
