What drives and inspires us is the belief that we have a responsibility not just to protect the world around us but to have a positive impact on it too.
The group encompasses an organic farm and retailer; a considered clothing label; botanical skincare, bath and body collections; wellness destinations around the world; and hospitality experiences that foster a sense of community and celebrate the healing power of escapism.
We champion a slow and sustainable way of living, encouraging our customers to make choices that are greener for the planet as well as kinder to their bodies and minds.
We are more than a group of businesses striving to make a difference. We are a way of life.
ABOUT THE ROLE
We are looking for a strategic and proactive Infrastructure & Security Engineer responsible for the design, implementation, and maintenance of secure, scalable, and reliable IT infrastructure across all Bamford Collection locations.
This is a varied and interesting role that covers existing infrastructure, both physical and virtual, to new sites and IT Security. You will work with outsourced partners to optimise security operations and align infrastructure growth with evolving business needs.
40 hours a week, 5 days in the office based at the Daylesford Farm, Gloucestershire.
Salary £50,000 per annum.
RESPONSIBILITIES
- Manage and improve the current IT infrastructure architecture, both physical and virtual, at all sites.
- Manage infrastructure projects including new site setups, upgrades, and cloud migrations.
- Liase with outsourced partners and our MSP regarding infrastructure and security.
- Ensure high availability and performance of core systems (network, servers, storage, firewalls).
- Lead the implementation of compliance frameworks (e.g., PCI-DSS, GDPR).
- Manage backups and disaster recovery strategies.
- Document current infrastructure.
- Ensure the security of the organisation.
- Develop and manage disaster recovery and business continuity strategies.
- Improve and enforce cybersecurity strategies including endpoint protection, access control, threat detection, and incident response.
- Manage and improve web and mail filtering via Mimecast, Umbrella, Fortigate, Meraki, etc.
- Monitor and report on system health, vulnerabilities, and patch management.
- Collaborate with the IT Manager to ensure operational alignment and support.
SKILLS YOU WILL BRING
- Strong experience with physical infrastructure from MPLS, Fibre to switches and WAPs.
- Strong experience with virtual infrastructure from VLANs to VPNs.
- Experience with AV and CCTV systems.
- Background in retail and/or hospitality environments with POS systems.
- Knowledge of current and emerging technology trends.
- Microsoft infrastructure experience including Windows Server, Active Directory, Azure AD, Group Policy, and Microsoft 365 and Azure Cloud management.
- LAN/WAN/WIFI/TCP-IP/Firewalls/Switching/Routing (Cisco).
- Experience deploying and managing virtualized environments using VMware vSphere, ESXi, and vCenter.
- Knowledge of server and storage hardware technology.
- Experience with Identity & Access Management (IAM), Microsoft Entra ID, RBAC, MFA.
- Cloud security experience, including securing Azure environments with Microsoft Defender for Cloud, Sentinel, and compliance frameworks like PCI-DSS.
- Ability to identify vulnerabilities, implement threat protection, and respond to security incidents.
- Experience in patch management and endpoint security.
- Familiarity with backup and disaster recovery tools and practices.
- Experience with monitoring tools such as SolarWinds, PRTG, or similar.
PERKS AND BENEFITS
- Discounts on products, treatments, and dining experiences from day one.
- One paid volunteering day per year.
- Subsidised private medical insurance through Bupa.
- Contributory pension scheme (up to 9% contribution, with up to 4.5% employer contribution).
- Life assurance cover of up to one year\'s salary.
- 24/7 mental health support via Employee Assistance Programme.
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.
#J-18808-Ljbffr
