Skip to content

Open nowPosted 17 days ago

Infrastructure Engineer

tbinstitute9 open roles

Where
United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInfrastructure Engineertbinstitute · United Kingdom
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on tbinstitute's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

14.0% of postings close within 7 days. Measured by our own scanner across the market. tbinstitute postings stay open a median of 24 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 14.0%7 days
  4. 22.5%14 days
  5. 38.3%30 days
  6. 59.0%60 days
This job: posted 17 days ago

tbinstitute median: 24 days open

The posting

We don’t just talk, we do. Lead the change with us.

At the Tony Blair Institute for Global Change, we work with political leaders around the world to drive change. We help governments turn bold ideas into reality so they can deliver for their people. We do it by advising on strategy, policy and delivery, unlocking the power of technology across all three. And by sharing what we learn on the ground, so everyone can benefit. We do it to build more open, inclusive and prosperous countries for people everywhere.

We are a global not-for-profit organisation, operating in more than 40 countries across five continents. Our teams include political strategists, policy experts, delivery practitioners, technology specialists and more. We speak more than 45 languages and are working on over 100 projects, tackling some of the world’s biggest challenges. We’re all here at TBI to make a difference.

In a world of ever more complex challenges, we believe diversity of background and perspective is a strength. We pride ourselves on a culture that values and nurtures difference. We are dedicated to unlocking potential, not only for the countries we work in but also for each of our team members. No matter where you’re from or who you are, if you’re passionate about the transformative power of progressive politics, we invite you to build a better future with us.

Role Summary

We are looking for an experienced, hands-on Infrastructure Engineer to join TBI’s Digital & Technology team for a critical period of infrastructure and cyber security delivery.

This is not a purely advisory security role. We are looking for someone who is comfortable getting into the technology, identifying what needs to change and implementing those changes.

A major priority will be helping TBI successfully deliver its next Cyber Essentials / Cyber Essentials Plus certification. We therefore particularly want to hear from engineers who have taken an organisation through the certification process before and understand how to translate security requirements into practical technical remediation.

Alongside this, you will provide senior 3rd-line infrastructure expertise across our Microsoft 365 and cloud environment and work closely with our Technical Architect, infrastructure and support teams, and managed Security Operations Centre (SOC).

Please note: candidates must already have the right to work in the UK. We are unable to offer visa sponsorship for this role.

Key Responsibilities

  • Infrastructure & Platform Management: Maintain and support the 3rd line infrastructure estate, managing the Azure platform (PaaS, IaaS, VNETs and storage accounts) and the wider M365 estate, including Exchange Online, Teams (incl. telephony integration), OneDrive and SharePoint Online.
  • Security Operations: Act as the primary internal liaison with the managed third-party SOC, monitoring and responding to security alerts using Microsoft Defender XDR and Microsoft Sentinel, and supporting incident triage, containment and root cause analysis.
  • Vulnerability & Patch Management: Conduct regular vulnerability assessments, track remediation progress and support patch management across the estate.
  • Compliance & Certification: Support Cyber Essentials (and Cyber Essentials Plus) certification activities, implementing and recommending remediations to close identified gaps, and assist with internal and external audits and security assessments.
  • Collaboration: Work closely with the Technical Architect to design and implement secure, scalable infrastructure solutions, and with the IT Service Desk and wider Infrastructure team to ensure secure configurations and timely resolution of issues.
  • Data Protection & Email Security: Assist with the management and configuration of email protection, web control, data loss prevention (DLP) and device monitoring platforms.
  • Threat Intelligence & Policy: Contribute to threat intelligence analysis and recommend defensive improvements; support the development and maintenance of security policies, procedures and technical standards.
  • Automation & Documentation: Develop and maintain PowerShell scripts to automate routine administrative and security tasks, and produce and maintain accurate system documentation.
  • Backup & Resilience: Manage and test M365 and Azure backup and disaster recovery arrangements.

Person Specification

Experience

  • Strong experience in a 3rd line infrastructure or cyber security role within a global organisation.
  • Experience working alongside a managed (3rd party) Security Operations Centre (SOC).
  • Experience supporting both Windows and macOS devices in a Microsoft 365 and Azure environment.
  • Experience preparing for or maintaining Cyber Essentials (and Cyber Essentials Plus) certification.

Essential Skills

  • Azure platform management experience, including PaaS, IaaS, VNETs and storage accounts.
  • Extensive knowledge of the M365 platform (Exchange Online, Office 365 apps, Teams incl. telephony, OneDrive, SharePoint Online).
  • Good knowledge of M365 security technologies (Azure Information Protection, DLP, M365 Security Centre and Compliance Centre, retention policies).
  • Understanding of core cyber security concepts: vulnerability management, phishing, endpoint protection and incident response.
  • Experience with Cyber Essentials (and Cyber Essentials Plus), including implementing and recommending remediations to close identified gaps.
  • Ability to analyse logs, alerts and events to identify potential threats or weaknesses.
  • PowerShell scripting experience.
  • Experience producing and maintaining system documentation.
  • Comfortable working with multiple teams, including Technical Architecture, in a global organisation.
  • Excellent written and verbal communication, with a clear customer focus.
  • Flexible and resilient, able to handle planned and unplanned demands.
  • Strong attention to detail and ability to manage multiple tasks simultaneously.
  • Pragmatic problem-solver with a desire to tackle issues at root cause.

Operating Systems

  • Windows 10/11
  • macOS

Microsoft 365 & Azure

  • Microsoft 365 (Exchange Online, Office 365 apps, Teams, OneDrive, SharePoint Online)
  • Entra ID (Azure Active Directory)
  • Azure (PaaS, IaaS, VNETs, storage accounts)

Security Technologies

  • Microsoft Defender XDR
  • Microsoft Sentinel
  • Microsoft Purview / M365 Compliance Centre
  • Data Loss Prevention (DLP)
  • Azure Information Protection

Endpoint & Device Management

  • Mobile Device Management (MDM) solutions

Collaboration & Service Management

  • ITSM platforms (e.g. Freshservice) or other Service Desk ticketing systems
  • Jira

Desirable Skills

  • Hands-on experience with Microsoft security tools (Defender for Endpoint, Sentinel, Purview, etc.).
  • Exposure to vulnerability scanning tools
  • Familiarity with email threat detection and user behavioural analytics platforms.
  • Understanding of secure browser isolation or user activity monitoring technologies.
  • Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST).
  • Previous involvement in security audits, risk assessments or policy development.
  • KQL or other scripting/automation skills beyond PowerShell.
  • Advanced M365 and Azure backup/disaster recovery experience.
  • Experience working in a global or multi-site corporate environment.

This is an opportunity to take meaningful ownership quickly, working across infrastructure and security on systems that support TBI’s global operations. For someone who enjoys solving real technical problems, improving an environment and seeing the impact of their work, there is plenty to get stuck into.

Closing Date:

2026-11-20

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against tbinstitute's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on tbinstitute's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    tbinstitute's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.