Infrastructure Development Engineer

At RBGE, we’re passionate about plants, people, and the planet. As part of our commitment to sustainability, innovation, and excellence, we’re looking for an Infrastructure Development Engineer to join our team and play a key role in delivering our cyber resilience strategy and digital transformation programme.

This is more than just a technical role, it is an opportunity to collaborate across departments, influence strategic decisions, and contribute to a mission-driven organisation that values diversity, inclusion, and continuous learning. Based at our Edinburgh Garden, you’ll work alongside senior leaders, external partners, and a supportive internal team to design and maintain secure infrastructure that underpins everything from day-to-day operations to cutting-edge scientific research.

You’ll bring expertise in infrastructure design, cyber security, and systems administration, with hands-on experience in technologies like Microsoft 365, Entra ID, Intune, Windows Server, Linux, and VMware vCenter. You’ll contribute to the development and evolution of RBGE’s hybrid infrastructure, shaping a secure, scalable, and resilient environment. Your approach will include introducing automation to streamline infrastructure and cyber security operations, improving efficiency and consistency across the estate. Your calm, solutions-focused mindset and excellent communication skills will support you in navigating complex technical challenges and building strong, collaborative relationships across the organisation.

Full details on how to apply (including the job description and person specification for download) can be found on the Royal Botanic Garden Edinburgh website as linked.

Job Description

Purpose

As Infrastructure Development Engineer, you will play a vital role in designing, developing, and maintaining the secure operation of RBGE’s hybrid infrastructure. Based at our Edinburgh Garden, you’ll contribute to our digital transformation and cyber resilience strategy, helping to build a robust and future-ready technology environment.

Working closely with colleagues across the organisation—including senior leaders and external partners—you’ll represent RBGE in technical and security discussions, vendor engagements, and collaborative initiatives. This role offers a balance of autonomy and teamwork, supporting strategic priorities, aligning with policy, and delivering operational excellence.

Core Responsibilities 

·      Collaborate with the Senior Cyber Security and Digital Infrastructure Manager to deliver cyber resilience initiatives, upgrade infrastructure, and enhance digital services across RBGE.

·      Serve as a trusted technical contact, providing expert insight to support strategic planning, incident response, and the resolution of complex technical challenges.

·      Create and maintain clear, accessible technical documentation, and contribute to operational reporting and compliance activities that inform strategic decision-making.

  Digital Infrastructure 

·      Design and implement secure, scalable infrastructure solutions using automated provisioning tools and configuration management practices, including Infrastructure as Code where appropriate.

·      Maintain and enhance Windows Server and Linux platforms, ensuring secure configurations, timely patching, and reliable operational performance.

·      Support and manage the on-premises vCenter platform and associated hardware, optimising virtualised environments for performance, availability, and security.

·      Oversee Windows and macOS desktop environments, including deployment, policy enforcement, and compliance monitoring through tools such as Microsoft Intune and Sophos endpoint protection and mobile device management.

·      Administer mobile and remote access infrastructure, including secure device provisioning and contractor access via SonicWall, with multi-factor authentication enforced.

·      Conduct regular updates across the digital estate to ensure high availability and resilience of servers and network appliances.

·      Maintain legacy systems during transitional phases, ensuring secure access and continuity of service until decommissioning is complete.

·      Provide technical support for bioinformatics and scientific computing workloads, including the design of secure access to experimental software and research environments.

 Cyber Security 

·      Integrate robust security controls into infrastructure design and daily operations, including vulnerability management, patching, access control, and secure configuration practices.

·      Deploy and manage protective monitoring tools, proactively respond to alerts, and support forensic investigations when required to ensure system integrity.

·      Ensure infrastructure aligns with public sector cyber resilience standards—such as Cyber Essentials Plus and the Scottish Public Sector Cyber Resilience Framework—while maintaining up-to-date disaster recovery and incident response plans.

·      Manage SSL certificates and DNS records and ensure secure email delivery through effective implementation of SPF, DKIM, and DMARC policies.

·      Administer Microsoft 365 and Entra environments, including app registrations, conditional access, and authentication policies, to support secure and compliant access across the organisation.

·      Align infrastructure and security operations with RBGE’s organisational policies, public sector standards, and strategic objectives set by senior leadership.

Person Specification

Essential Skills

·      Experience designing secure and resilient infrastructure, with a focus on automation to improve efficiency and consistency

·      Strong understanding of cyber security operations, including monitoring, threat detection, and incident response

·      Confident in diagnosing complex technical issues and managing escalations effectively, with a calm and solutions-focused approach

·      Excellent communication skills, with the ability to tailor messaging for both technical and non-technical audiences

·      Skilled in producing clear and comprehensive technical documentation, systems design specifications, and Standard Operating Procedures

·      A collaborative team player who contributes to a positive, inclusive working culture

·      Comfortable working across departments and engaging with stakeholders at all levels

·      Committed to delivering high-quality service and building relationships that support organisational goals

·      Hands-on experience with Microsoft 365, Entra ID, Intune, Windows Server, Linux systems, and VMware vCenter virtualisation technologies

·      Degree-level qualification in a relevant field, or equivalent professional experience

Desirable Skills

·      Exposure to scripting languages such as PowerShell, Python, and Bash to develop automation capabilities in infrastructure and security operations.

·      Familiarity with cyber security standards such as Cyber Essentials Plus and ISO 27001, with a strong understanding of foundational security principles.

·      Familiarity with disaster recovery testing and scenario planning, contributing to resilience initiatives through structured exercises and documentation.

·      Experience supporting scientific computing environments, including bioinformatics.

·      Hands-on experience configuring HPE Aruba network equipment and SonicWall appliances.

·      Comfortable working with specialised software environments used in research and data analysis.

·      Certified as Microsoft Certified: Azure Administrator Associate, or holding equivalent cloud administration experience.

·      VMware Certified Professional (VCP), with practical experience in virtualisation technologies.

·      Holder of CompTIA Security+ or an equivalent foundational cyber security certification.

·      ITIL Foundation Certificate in IT Service Management, with an understanding of service delivery best practices.

·      Experience supporting vendor relationships, evaluating solutions and maintaining productive supplier relationships.

·      Awareness of cost management practices, software licensing and cloud expenditure tracking.