Senior Infrastructure & Network Engineer

Our network and endpoint estate is growing fast, and we need someone who can take real ownership of it and not just keep the lights on. As our Senior Infrastructure & Network Engineer, you'll lead the redesign of our enterprise network and run the day to day of our endpoint and identity infrastructure, working hand in hand with our Senior Cyber Security Engineer. Reporting to the Head of IT & Security, this is a genuine step into full infrastructure ownership at a fast-growing, global business. What you'll be doing Lead the optimisation of our network infrastructure and routing, switching and wireless across our sites, owning segmentation, VLAN optimisation, WAN uplinks, LAN architecture and NAT configuration. Own the deployment, enrolment and operational lifecycle of Microsoft Intune across our Windows and macOS estate, working closely with Cyber & Security Operations on policy and compliance. Operationally support our EDR/XDR platform, VPN and Zero Trust Network Access (ZTNA) connectivity in line with our security policies. Administer our Microsoft 365 and Google Workspace stack and our cloud infrastructure and platforms. Manage the hardware lifecycle end to end procurement, deployment and secure decommissioning and pick up BAU tickets alongside the wider team within an ITIL/ITSM framework. Automate routine infrastructure tasks using scripting (PowerShell, Python or similar) and APIs. Skills, knowledge & expertise Strong background in a senior infrastructure, network engineering or 3rd line systems role, with genuine breadth across networking, endpoint and identity. Extensive, hands on experience with enterprise-grade routing, switching, firewall/UTM and wireless platforms, plus deep, working knowledge of VPN and ZTNA solutions (specific vendor experience with these tools is transferable). Hands on administrative experience across Microsoft 365 (including Intune) and device management for both Windows and macOS, with general exposure to EDR/XDR platforms. Deep, hands-on experience with Azure, GCP, AWS or an equivalent major cloud platform. Solid understanding of full disk encryption, BYOD/MDM controls and device compliance, comfortable enforcing standards set by a dedicated security function. Comfortable working within ITIL/ITSM change control, genuinely hands-on with BAU support and hardware lifecycle management. Clear communicator, confident explaining technical decisions to both specialists and non-technical stakeholders, and collaborating closely with Cyber & Security Operations. Able to operate independently with high technical autonomy and pick up new platforms quickly. Scripting experience (PowerShell, Python or similar) and understanding of APIs ishighly preferred. Desirable, not essential Google Workspace administration alongside Microsoft 365; familiarity with federation protocols; knowledge of Cyber Essentials Plus / Cyber Assurance L2; experience with cloud storage or third-party cloud backup…