Security Infrastructure Engineer

Job summary

BAE Systems is seeking a Security Infrastructure Engineer to support the design, configuration, and maintenance of security tools for a major international defense program. The role involves working with Microsoft Cloud services and on-premises data centers, requiring expertise in cloud compute, networking, storage, Kubernetes, VMWare, VLANs, and SAN/NAS. The position requires SC clearance, ideally DV clearance, and involves working from company offices in the UK with occasional travel to client sites in the UK, Europe, and Asia.

Qualifications

• Talented and enthusiastic individual with excellent technical and client-facing skills
• Minimum of SC clearance, ideally DV clearance
• Adaptable to new technologies with demonstrable technical expertise
• Experience in network design and configuration
• Experience in Kubernetes and Docker deployments
• Experience in VMWare deployments in both cloud and On-Prem environments
• Experience in basic administration of Windows
• Experience in configuration of Linux including package managers and scripting
• Ability to understand TCP/IP component layers to identify normal and abnormal traffic
• Self-motivated to understand new tools, research, and test potential solutions
• Client-side consulting, including stakeholder engagement and ability to communicate insights and concepts
• Ability to build and maintain relationships with stakeholders
• Ability to talk competently and maintain high standards of behavior with clients
• Ability to maintain confidentiality and deal with matters of national security
• Desirable experience with Cribl and JIRA ITSM

Responsibilities

• Support the design, configuration, and maintenance of security tools
• Work with Cloud compute, networking, storage services, and On-Prem infrastructure including Kubernetes, VMWare virtual machines, VLANs, SAN/NAS
• Advise on design
• Deploy and configure new solutions
• Assess existing deployments and client capabilities to make improvements
• Support the design and configuration of security tools such as Splunk, Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR
• Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools
• Support the creation and establishment of cloud hosting and containers, and On-Prem hosted VMs and containers
• Apply security controls and compliance frameworks
• Support the design and configuration of network security devices, network routers and switches
• Establish VLANs, DNS, and identity management capability
• Support deployment of security tools to cloud hosting and containers, and On-Prem hosted VMs and containers
• Support the integration of security tools with identity management solutions
• Develop test procedures to ensure solutions meet functional and non-functional requirements
• Act as a Generalist Technical SME to support deployment and configuration of tools including Jira and Cribl

Skills

Travel

Industry

Security clearance

Relocation