At a Glance
- Tasks: Lead the Infrastructure & Cyber Security pillar and build a secure cloud-native architecture.
- Company: Fast-scaling global insurance group with a dynamic, anti-bureaucracy culture.
- Benefits: Competitive salary up to £120K plus bonus, hybrid work model.
- Other info: Opportunity for massive career growth and to shape the future of tech.
- Why this job: Make a real impact in a high-growth environment with autonomy and ownership.
- Qualifications: Strong hands-on engineering skills and experience in cloud-native environments.
The predicted salary is between 60000 - 80000 £ per year.
Lead Engineer – Infrastructure & Cyber Security | Global Insurance Group | London (Hybrid) | up to £120K + bonus
About the Company
Our client is a fast-scaling, global commercial insurance group growing rapidly both organically and through international acquisitions across the UK, Europe, Australia, and Asia.
They are completely rebuilding their technology operating model around a modern, identity-centric, cloud-native architecture on the Microsoft stack.
Operating in an incredibly fast-paced, high-growth scale-up environment, they champion absolute autonomy and radical ownership.
They move dynamically from start-up flexibility to scale-up discipline, meaning they listen well, move fast, and empower their people to execute without layers of bureaucracy or hand-holding.
They are anti-bureaucracy but pro-governance, meaning regulatory compliance is delivered as code and automated platform controls rather than committees and paperwork.
If a candidate is exceptionally bright, thrives in a rapid-iteration culture, and wants the freedom to define a roadmap and see their work directly move the business forward, they will find a massive opportunity here.
About the Role
The client is completely re-engineering their tech division and hiring three bright, peer Lead Engineers to own and rebuild three brand-new pillars in the business.
Reporting directly to the Group CTO with no layers of management in between, the successful candidate will own the Infrastructure & Cyber Security pillar.
This is a hands-on building role, not a legacy people-management position.
You will lead a small internal team - which is set to grow - and gain massive operational leverage by directing high-performing external delivery partners.
The mandate is to take the "Frictionless Fortress" blueprint - a highly scalable, Zero Trust infrastructure design - and build, run, and keep it honest as the group continues to expand.
You will also own the global M&A integration playbook, systematically pulling acquired environments into the secure cloud landing-zone pattern within a strict Day 1 / Day 30 / Day 90 cadence.
Key Responsibilities
- Own the password-less destination, securing the perimeter utilizing Entra ID P2, FIDO2 passkeys, Conditional Access policies, PIM, and Identity Protection.
- Architect and manage the Azure tenant, subscriptions, and landing zones Paa S-first; migrate remaining legacy physical office infrastructure into managed cloud services (Azure SQL, App Service, Functions).
- Oversee the endpoint compute model using Intune, configured MAM-first, with MDM enrollment and AVD/App Streaming where required.
- Direct the security stack (Defender XDR and Sentinel) and own detection engineering, playbooks, and the quality of outcomes delivered by the 24/7 external SOC partner.
- Implement infrastructure entirely in Terraform, establishing drift detection, Azure Policy guardrails, and compliance controls directly within deployment gates.
- Hold the total cost of ownership for global infrastructure and security, using tagging, rightsizing, and auto-suspension to drive down per-head costs as the business scales.
- Deep, current, hands-on-keyboard command of the Microsoft security, identity, and Azure platform stacks (Entra ID, Intune, Defender, Purview, Sentinel, Terraform).
- Real Azure platform engineering experience, with the technical scars to prove they can transition physical assets to cloud Paa S without just recreating legacy VMs.
- Treats cloud consumption as an engineering problem to instrument and optimize, rather than a bill to accept.
- Measures success by what they build and how they upskill the wider team and partners, rather than hoarding knowledge or building a personal fiefdom.
Qualifications & Experience
- Genuinely strong, hands-on engineering capabilities. They are hiring for trajectory and technical instinct rather than arbitrary years of tenure.
- Proven track record of shipping and running production systems in a cloud-native environment.
- Experience working within an FCA-regulated or structured environment, demonstrating that security and compliance can be delivered cleanly through code and platform architecture.
- Desirable: Prior experience wrangling acquired IT estates, executing data center exits, or managing multi-jurisdiction data residency guardrails.
- Note: Certifications (SC-300, SC-200, AZ-104, AZ-305) are valued as evidence of depth, but are not used as a hiring gate.
- #J-18808-Ljbffr
Lead Engineer - Infrastructure & Cyber Security in London employer: Broaden
Broaden is an exceptional employer that champions innovation and transformation within the insurance sector. With a strong focus on employee growth, we offer a collaborative work culture that empowers our team to drive meaningful change while enjoying the flexibility of remote work across the UK. Join us to be part of a dynamic environment where your contributions directly impact our success and the future of the industry.
StudySmarter Expert Advice🤫
We think this is how you could land Lead Engineer - Infrastructure & Cyber Security in London
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Broaden, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Broaden
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Broaden. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Lead Engineer - Infrastructure & Cyber Security in London
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Broaden insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Broaden that you’re committed to staying ahead in the game.
How to prepare for a job interview at Broaden
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Broaden to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Broaden.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
