Infrastructure and Security Engineer

At Great Rail Journeys, we’re the UK’s leading provider of holidays by rail, offering escorted tours, river cruises and tailormade adventures across more than 40 countries worldwide. With five decades of experience, we’re experts in showcasing the beauty and diversity of the destinations we travel to, taking people to places only rail can reach. Every year we proudly take over 50,000 customers on unforgettable journeys, creating moments of great connection through thoughtful planning, exceptional service and a genuine passion for what we do. We care deeply about our customers and never lose sight of the small touches and attention to detail that make a holiday truly special. Our customer first ethos sits at the heart of every decision we make, helping us deliver the high-quality tours our customers love and return to year after year. Our modern office in Hudson Quarter, York is a creative and innovative space opposite York Station.

Salary Range: £40,000–£50,000 (dependent on experience)

Our brilliant benefits package includes:

• Up to 25% off Colleague Discount on our tours
• 33 days Holiday (incl BH) Plus the Option to Buy 3 Extra Days
• Commuter Club discount
• In House Booking for Rail Tickets
• Westfield Health Cash Back Plan
• 5% matched Pension Plan & Salary Exchange

This is a full-time role, on-site 4 days per week. You will play a key role in keeping our technology environment secure, resilient, and performing at its best across our operation. Your work ensures our people stay productive, our systems remain protected, and the business can operate smoothly every day. We’re looking for someone who brings a collaborative and adaptable mindset, able to balance BAU responsibilities with high-impact project delivery. You’ll take ownership of challenges, whether large or small, and deliver high-quality outcomes at pace, strengthening our Azure, Microsoft 365, identity, networking, and security capabilities. With a positive, learning-driven approach, you’ll continuously improve processes, embrace new technologies, and contribute to the ongoing growth of the business. Acting as a trusted escalation point, you’ll communicate clearly, stay calm under pressure, and proactively enhance our infrastructure and security posture.

In this role you are accountable for:

• Cloud Infrastructure Stability & Performance: Ensuring Azure and on-prem infrastructure is secure, stable and optimised.
• Security Posture & Threat Protection: Owning the organisation’s cloud and identity security, ensuring strong protection and rapid response to threats.
• Help Desk Support and Technical Escalation: Providing day to day support to end users as well as troubleshooting complex issues across the environment.
• Endpoint, Device & Identity Management: Maintaining secure, compliant devices and access controls through Intune, GPO and identity tooling.
• Operational Continuity & Automation: Strengthening resilience through monitoring, runbooks, patching and automation. Ensuring alignment with GDPR/ISO frameworks and effective engagement with vendors.

Your key responsibilities are to:

• Technical Support: Manage the helpdesk with routine tickets to keep operations running smoothly. Handle escalated technical issues when deeper troubleshooting is required. Implement and maintain Azure Monitor, Log Analytics and Security Centre for proactive monitoring and fast response to incidents. Perform patching, schedule automation tasks and maintain core operational runbooks. Develop and maintain PowerShell scripts for automation and compliance checks.
• Telephony & Connectivity Support: Support Cisco or 8x8 telephony systems, ensuring stable, secure and reliable connectivity across the organisation. Work closely with suppliers to resolve issues, maintain service quality and support continuous improvement. Ensure adherence to GDPR, ISO 27001 and wider security frameworks as part of daily operational routines.
• Endpoint, Identity & Configuration Management: Manage Intune, GPO and endpoint security configurations to ensure devices remain compliant and secure. Maintain identity, access and authentication controls across the business.
• Azure Infrastructure & Security Management: Design, implement and maintain Azure-based infrastructure and security solutions, ensuring best-practice standards are met. Act as the subject matter expert for Azure security, including identity and access management, conditional access and threat protection. Lead and support cloud migration, optimisation and security-hardening activity to keep our environment secure and resilient.

To thrive in this role, you will naturally be someone who:

• Takes real ownership of issues, no matter the size, and works at pace to keep systems stable and secure.
• Stays calm under pressure, especially when dealing with incidents, outages or out-of-hours escalations.
• Communicates clearly and confidently with colleagues, stakeholders and suppliers, helping others feel supported and informed.
• Works collaboratively across teams, building strong relationships with both technical and non-technical colleagues.
• Has a continuous-improvement mindset, always looking for ways to optimise, automate or strengthen our infrastructure and security posture.
• Has a keen eye for detail, ensuring configurations, documentation and monitoring data are accurate and reliable.
• Can juggle multiple priorities without losing focus, delivering both BAU and project work with consistency and quality.
• Adapts quickly to changing demands, technologies and priorities, embracing new tools and ways of working.
• Brings a positive, learning-focused attitude, eager to grow skills, deepen technical capability and support wider business growth.
• Is flexible and dependable, ready to step in when needed, including during out-of-hours activity or unexpected issues.