Infrastructure Engineer

Infrastructure Engineer

Location: Mostly remote, with occasional travel to Leeds

Rate: £560 per day, Inside IR35

Duration: Until November 2027

Central government or NHS experience essentialOverview

We're looking for a hands-on Infrastructure Engineer to join NHS England and work down a significant vulnerability backlog across national, mission-critical services. New findings land every week from scanners, pen tests, audits and security advisories. Your job is to fix them safely in production, prove they're closed and keep live services running.

Key Responsibilities

Work through the vulnerability backlog, fixing findings from scanners, pen tests, IT health checks and audits

Patch and upgrade operating systems, packages, middleware, container base images and application dependencies

Fix insecure cloud configuration, including over-permissive IAM, open security groups and unencrypted resources

Keep legacy data stores patched and contained, and support their removal as migrations complete

Put compensating controls in place where fixes can't be applied straight away, and document the risk

Respond quickly to critical CVEs, zero-days, NHS England cyber alerts and vendor advisories

Support security and service incidents hands-on, including containment, emergency changes and recovery

Test fixes in lower environments and plan rollback for every production change

Deliver changes through formal change control, including emergency changes

Use and extend Terraform, Ansible and CI/CD pipelines to apply fixes consistently

Re-scan to verify fixes, update tickets and the risk register, and report progress and blockers

Lead and coordinate a small team of engineers, allocate work and review fixesKey Requirements

Central government or NHS experience (essential)

Strong track record of remediating vulnerabilities in live production environments, at volume and to deadlines

Deep Linux expertise (RHEL or similar), including patching, kernel and service upgrades and hardening

Hands-on AWS experience fixing misconfigurations in IAM, security groups, S3, encryption and logging

Able to interpret scanner and pen test output (Qualys, Tenable, AWS Inspector, container image scanners)

Experience patching and rebuilding containers and base images, and updating dependencies with dev teams

Delivering changes with Terraform, Ansible and CI/CD (GitLab CI or Jenkins)

Working within formal change control (CAB), including emergency changes with tested rollback

Scripting in Bash and Python, plus experience working with RESTful APIsApply now or email for more information