Core Infrastructure Engineer/Engineering Manager
Job Description
[Up to c. £275k Comp Package | Hybrid Working - 10 Days Remote Per Month]
Role Overview
We’re representing a leading quantitative research and technology organisation creating a new Core Infrastructure Engineering team to retain, own and modernise critical platforms supporting its core research environment. The team will take responsibility for a predominantly Windows-based estate spanning identity, privileged access, server provisioning, package management, Jenkins and Terraform Enterprise. Two appointments are being made: an Engineering Manager to build the team, define its roadmap and raise service standards, and a Core Infrastructure Engineer to take hands-on ownership of the platforms, automation and operational improvements. Both will help modernise the existing estate while supporting a gradual transition towards Linux, LDAP and Kubernetes where appropriate.
Key Responsibilities
- Manager - Build, lead and coach a new team responsible for business-critical Windows infrastructure platforms
- Manager - Set the technical roadmap across Active Directory, privileged-access infrastructure, Windows automation, Jenkins and Terraform Enterprise
- Balance operational commitments, incident escalation and longer-term automation or architectural improvements
- Improve delivery standards, on-call practices, documentation, service health and stakeholder transparency
- Run and modernise the Active Directory infrastructure underpinning a critical research environment, while helping shape a longer-term transition towards LDAP
- Operate and improve approximately 40 regional bastion and RDP gateway hosts supporting privileged and break-glass access
- Develop and maintain Ansible-based provisioning and configuration pipelines supporting approximately 100 Windows servers
- Administer the enterprise Chocolatey platform used for software distribution, package management and patching across the Windows estate
- Own multiple Jenkins control-plane environments, including upgrades, plugins, performance, resilience and supporting integrations
- Maintain Jenkins pipelines supporting hardware onboarding, decommissioning and iLO configuration management
- Administer the Terraform Enterprise appliance, including upgrades, monitoring, resilience, backups and platform availability
- Lead the upgrade from Windows Server 2016 to 2022, ensuring the surrounding Ansible, Jenkins and Chocolatey automation remains reliable
- Work alongside Linux and platform engineering teams to identify and migrate suitable Windows-hosted services into Kubernetes
- Automate provisioning, configuration, patching and service lifecycle processes using code and repeatable workflows
What You’ll Bring...
- Manager - Approximately 8+ years in infrastructure or platform engineering, including meaningful people leadership and experience building or developing engineering teams
- Engineer - Approximately 4+ years operating enterprise infrastructure with clear end-to-end ownership of production services
- Deep practical experience with Windows Server and Active Directory, ideally across Windows Server 2016 and 2022
- Experience operating bastion hosts, RDP gateways or comparable secured administrative-access infrastructure
- Strong Ansible experience, including provisioning and configuring Windows hosts
- Hands-on ownership of production Jenkins infrastructure, including controllers, pipelines, plugins and lifecycle management
- Experience administering Terraform Enterprise or a comparable self-hosted infrastructure automation platform
- PowerShell, Python or comparable scripting capability
- Evidence of improving reliability, incident response, change control and operational engineering practices
- Ability to collaborate effectively with Linux engineers and support the gradual migration of services towards Linux and Kubernetes
- (Preferred) Chocolatey, LDAP, identity migrations, Kubernetes, hardware lifecycle automation, iLO management or service-management frameworks
...
Apply for this role
All fields marked with * are required.