Infrastructure Security Engineer in Reading

We have an exciting opportunity for an Infrastructure Security Engineer to join our Cyber Engineering team, providing technical consultancy, subject matter expertise and service innovation across Microsoft-aligned cyber security offerings, with a particular focus on Active Directory, Windows Server, hybrid identity and platform security. Working closely with customers, teammates and service leads, you will assess infrastructure and identity security posture, identify risks and control gaps, and develop prioritised, actionable remediation plans that align with business objectives and risk requirements. You will bring strong expertise across Microsoft infrastructure, helping organisations strengthen core identity services, improve platform resilience and reduce risk across hybrid environments.

Responsibilities:

• Act as a trusted advisor to customers, providing expert guidance on infrastructure security strategy, controls and best practices.
• Provide expert guidance on Active Directory, Windows Server, Group Policy, authentication and access control, supporting secure and well-governed identity and platform environments.
• Assess infrastructure security risks and control effectiveness, delivering actionable recommendations and remediation plans.
• Deliver security gap analysis and maturity assessments across identity, infrastructure and hybrid environments, identifying risks and defining prioritised, actionable remediation plans.
• Drive consistency across customer environments by promoting standards, architectures and repeatable security practices.
• Design and assure secure, scalable solutions aligned to customer needs, risk appetite and regulatory obligations contributing to service innovation and translating business objectives into practical security outcomes.
• Contribute to the evolution of the Cyber Engineering practice through service development, knowledge sharing and the creation of repeatable infrastructure security offerings.

About you:

• Experienced consultant or engineer, comfortable operating in complex environments and balancing technical requirements with operational impact, user experience and organisational constraints.
• Able to translate security requirements into practical, scalable controls that balance confidentiality, integrity, availability and operational efficiency.
• Strong technical credibility across identity and platform security, providing context-driven recommendations that reflect real-world implementation challenges across Microsoft environments.
• Experience of collaborating with technical and business stakeholders to ensure security solutions support organisational objectives and operational needs.
• Clear and effective communicator who translates security risks and control gaps into actionable outcomes, with an interest in service improvement, standardisation and commercially aware delivery.

Knowledge and experience in the following areas is highly advantageous:

• Proven experience with Active Directory, Entra ID, Windows Server, Group Policy and hybrid identity security.
• Understanding and knowledge of security baselines, hardening standards and control frameworks used to support risk-based recommendations.
• Experience of phased remediation approaches across identity, infrastructure and platform security controls.
• Working knowledge of Azure DevOps or similar delivery tooling.

Desirable certifications:

• SC-300 (Microsoft Identity and Access Administrator)
• SC-500 (Microsoft Certified: Cloud and AI Security Engineer Associate)
• AZ-104 (Microsoft Certified: Azure Administrator Associate)
• AZ-800 / AZ-801 (Microsoft Certified: Windows Server Hybrid Administrator Associate)
• MS-102 (Microsoft 365 Administrator Expert)

What we look for in our people:

• Strong alignment with FSP values and ethos
• Commitment to teamwork, quality and mutual success
• Proactivity with an ability to operate with pace and energy
• Strong communication and interpersonal skills
• Dedication to excellence and quality

Who are FSP?

FSP is a leading consultancy specialising in Digital, Security and AI solutions. Our success is enabled by our unwavering commitment to excellence, our people centric culture alongside best-in-class operations, ensuring impactful and sustainable outcomes for our clients. As a long standing and highly accredited Microsoft Partner, with extensive solution designations, we partner with clients across a range of commercial sectors, enabling digital transformation, innovation and robust cyber security. We navigate the complexities of data sensitivity, confidentiality, governance and compliance. We blend strategic insight, depth of technical expertise, delivery and operational excellence to meet the specific requirements outlined. We take a collaborative, one team approach with our clients to drive sustainable change, providing outstanding client experience and delivering exceptional results that are aligned with business priorities. Our commitment to security and quality is reinforced by our ISO27001 and ISO9001 certifications (UKAS), as well as our CREST approved penetration testing and SOC capabilities. Additionally, we are an IASME Cyber Essentials Certification Body and Cyber Essentials Plus certified.