Senior Infrastructure Engineer

About Simply Business

We insure small businesses and enable big dreams – not just for our customers, but for our people and communities too. With over 1,000,000 active insurance policies, we protect builders, bakers, landlords and more than 1,200 other trades.

We’re a technology company as well as one that sells insurance. That means we build, we fail, we learn and we improve. Through our global social impact strategy, called \’The Big Dreams Project’, we\’re working to help 10,000 small businesses start or grow by 2030.

Job Overview

• Position: Senior BizOps Infrastructure Engineer
• Location: London, England, United Kingdom
• Job Category: Technology
• Employment Type: Permanent

Position Summary

As a Senior BizOps Infrastructure Engineer you will be a key player in managing our global, multi‑site IT infrastructure, ensuring its smooth operation, and driving continuous improvement. You will collaborate with two mid‑level infrastructure engineers, the global Service Desk and Support team of 17, and a 20‑member Information Security team. Your work will span a diverse technology stack, from end‑user devices to cloud environments, with a focus on automation, security, and scalability. This is an exciting opportunity for a dynamic individual who thrives on meticulously designing IT architectural controls and standards, loves solving complex problems in a fast‑paced environment, is passionate about cutting‑edge technologies, and enjoys mentoring junior colleagues.

Responsibilities

• Lead and deliver large‑scale technical projects across end‑user device fleets (Windows/macOS), networks, and cloud environments.
• Translate complex business initiatives into actionable project plans, ensuring successful implementation in a modern cloud environment.
• Manage IT and infrastructure projects that enhance processes, networks, device deployments, and cloud/SaaS services.
• Oversee day‑to‑day operations and maintenance of our network infrastructure, including VMware SD‑WAN, Meraki LAN, Mist WiFi, and Netskope SASE.
• Support and supervise two mid‑level IT infrastructure engineers, helping them grow professionally.
• Drive automation and Infrastructure as Code (IaC) initiatives, leveraging tools like Terraform for configuration management and CI/CD pipelines.
• Develop and maintain applications and scripts (PowerShell, Bash, Terraform, Python) to automate manual processes and improve efficiency.
• Define solutions, architectural standards, and controls ownership.
• Serve as an escalation point and architectural owner for all internal technology platforms; support deployment and management strategies for Windows and macOS end‑user devices.
• Ensure industry‑standard compliance and enhance security within our SaaS and PaaS cloud infrastructure.
• Identify areas for automation and continuous improvement, pragmatically advocating for prioritisation.

Qualifications

• Experienced in infrastructure architectural level environments, focusing on cloud‑first solutions.
• Familiar with GitHub and proven experience writing and using scripts in production environments with PowerShell, Bash, Terraform or Python.
• Experience working in a full cloud environment with a strong preference for SaaS.
• Solid understanding of APIs and experience using them to pull information or update configurations and drive automation.
• Demonstrated IaC experience with working knowledge of Terraform or Ansible and a good understanding of CI/CD pipelines.
• Experience designing, implementing, maintaining, and supporting Identity and Access Management (IAM) solutions (e.g., Azure AD, Okta, Google Workspace).
• Capable of leading the lifecycle of Privileged Access Management (PAM) solutions, including policy definition, Just‑In‑Time (JIT) access implementation, and proactive monitoring of privileged activity for security threats.

Infrastructure Stack

• Operating Systems: Windows, macOS, ChromeOS, Linux
• Cloud: AWS, Azure, GCP
• Networking: VMware SD‑WAN, Mist WiFi, Meraki LAN, Netskope SASE
• End‑User Device Management: Microsoft Intune, JAMF, Google Workspace, Omnissa Workspace One
• Identity & Access Management: Okta, Google Workspace SSO, SAML, OIDC, SCIM, EntraID
• Collaboration: Google Workspace, Zoom, Slack
• Automation/IaC: GitHub, PowerShell, Bash, Python, Terraform
• Patching: Automox, Nudge, Autopatch
• People Data: Workday
• ITSM: Fresh Service

Benefits

• Great work‑life balance with manageable workloads and flexibility to work hybrid.
• 25 days annual leave (plus bank holidays) with the option to buy five more days through flexible benefits.
• Flexible parental leave: six months full pay for primary caregiver, four weeks full pay for secondary caregiver.
• Life event leave: extra days every two years for major life moments; two‑week paid sabbatical after five years of service, and four weeks off after ten years.
• Private medical insurance through BUPA covering pre‑existing conditions; health cash plan for everyday medical expenses.
• Competitive salary based on experience and market plus potential annual bonus based on performance.

Employment Practices

Simply Business is committed to providing equality and opportunities for all employees and candidates. We treat colleagues with respect and dignity, and do not discriminate directly or indirectly on the grounds of race, colour, religion, belief, political opinion, disability, nationality, ethnic origin, sex, sexual orientation, or relationship status at any stage of the hiring process or during employment.