Senior Infrastructure Security Engineer

Overview

In this role you will strengthen the security and resilience of the firm’s internal technology estate, with a focus on Windows, identity, and endpoint controls. You’ll automate protections and collaborate with platform teams to ensure scalable, maintainable security at pace. The position emphasizes measurable controls, reliability, and engineering-led security improvements in a high-demand environment. You will work closely with cross-functional partners to translate emerging threats into durable protections that fit production systems.

Responsibilities

• Engineer safeguards for Windows endpoints, remote-access platforms, and the wider corporate estate
• Automate security processes using PowerShell, Python and vendor APIs to reduce repetitive work
• Enhance prevention and detection through application control, host firewalls, audit policy, telemetry, encryption, Microsoft Defender and exploit protection
• Drive vulnerability remediation by balancing technical severity with operational impact
• Strengthen access and identity controls across Active Directory, Entra ID, Kerberos, privileged accounts and certificate infrastructure
• Evaluate new attack techniques and translate findings into engineering changes
• Collaborate with platform and software teams to ensure protections align with system design and operation

Key requirements

• Explain Windows authentication, logon behaviour, access tokens, privileges, UAC and Group Policy in practical terms
• Delivered endpoint controls involving EDR, anti-malware, allowlisting, firewalls, disk encryption, vulnerability tooling or patch management
• Understand trust models behind TLS, OIDC, PKI, X.509 and least-privilege design
• Differentiate theoretical weaknesses from credible routes to compromise and set remediation priorities
• Write reliable production-grade PowerShell code
• Python and other scripting languages; security product integrations are advantageous

• Clear communication
• Balanced risk decisions
• Ability to drive technical work forward with operational constraints
• PowerShell scripting
• Python scripting
• Microsoft Defender and endpoint security controls

…