Job summary
About the Role
We’re looking for a highly skilled Senior Infrastructure Engineer to design, implement, and support the core systems and services that drive value and power UK Export Finance. This is a hands-on, highly technical role with strategic influence, ideal for someone who thrives on solving complex problems and ensuring infrastructure performance, scalability, and security.
You will need exceptional Infrastructure and Platform services experience and working closely with our internal teams, stakeholders and also with managed services providers. You will ensure that KPI’s, SLAs and customer satisfaction targets are consistently achieved.
We are looking for someone who is positive, collaborative and helpful colleague with good attention to detail when working in a fast paced, dynamic government department.
Job description
Main Activities
- Be a senior infrastructure engineer for the organisation
- Provide Senior Infrastructure support to 500+ colleagues in a variety of locations across multiple different systems
- Respond and resolve infrastructure issues, incidents & requests
- Architect, deploy, and maintain infrastructure solutions across on-premise and cloud environments (e.g., AWS, Azure).
- Lead infrastructure modernization projects, including automation, monitoring, and configuration management that deliver high value to the UKEF business
- Provide significant expertise and support of Microsoft Active Directory, Azure Administration, InTune and Office 365 and other windows / infrastructure / Cisco technologies
- Ensure high availability, disaster recovery planning, and business continuity processes are implemented and tested regularly
- Monitor system performance and reliability, making proactive improvements to prevent outages and optimize usage.
- Collaborate with Engineering, DevOps, Security, and IT Operations teams to maintain robust infrastructure standards.
- Maintain comprehensive documentation of infrastructure configurations, processes, and procedures.
- Partner with Security, Network, DevOps and Business teams to align infrastructure roadmaps.
- Work closely with our internal security and SOC teams to ensure the integrity and security of UKEFS infrastructure
- Work closely with managed service providers to deliver our infrastructure services
- Ensuring that IT SLAs are met, and IT policies are adhered to by planning, managing, and maintaining workload;
- Ensure the Infrastructure team effectively manage customer issues through incident management framework
- Maintain good working relationships with key service stakeholders, suppliers and customers to help understand their business requirements and priorities;
- Be available for out of hours for high priority technical infrastructure support
Additional activities include:
You will be supporting and using technologies such as but not limited to;
- Microsoft Azure and Amazon Web Services
- GitHub Actions and Azure DevOps
- Azure Resource Manager (ARM) templates, BICEP and Terraform.
- Docker, Azure Container Apps and Azure Container Registry (ACR)
- Azure Cognitive Search
- Azure SQL, Azure SQL Managed Instances, Azure MySQL and Cosmos DB.
- Azure Monitor
- Cisco Meraki
This list is not exhaustive, and you may be required to carry out additional duties according to business needs.
Person specification
Essential
Qualifications
- Microsoft Certified: Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), or DevOps Engineer (AZ-400) (A, I)
- ITIL Foundation Certification (A, I)
- Advanced or specialist cloud certifications (e.g. Azure Security, DevOps, Networking) are highly desirable (A, I)
Knowledge
- Substantial experience with Microsoft Azure (preferred), AWS, or GCP (A, I)
- Infrastructure as Code using Bicep, Terraform, or ARM templates (A, I)
- Scripting and automation using PowerShell, Bash, or Python (A, I)
- CI/CD pipeline management using Azure DevOps, GitHub Actions, or Jenkins (A, I)
- Monitoring and observability using Azure Monitor, Log Analytics, and Application Insights (A, I)
- Windows Server and Active Directory administration (A, I)
- Microsoft Intune and device deployment (A, I)
- Networking fundamentals including TCP/IP, VLANs, VPNs, and firewalls (A, I)
- Virtualisation and containerisation (e.g. Hyper-V, Docker, Kubernetes) (A, I)
- Identity, access, and certificate management (A, I)
- Change, incident, and configuration management within an ITIL environment (A, I)
- Experience supporting meeting room technologies including Microsoft Surface Hub (A, I)
- Cisco Meraki Network Management
- PaloAlto Firewall Management
Skills/Ability
Experience
- Enterprise-grade infrastructure design & operations (A, I)
- Substantial experience building and running mission-critical environments (physical, virtual and cloud) (A, I)
- Proven track record delivering high-availability, multi-site architectures (A, I)
- Monitoring and observability using Azure Monitor, Log Analytics, and Application Insights (A, I)
- Windows Server and Active Directory administration (A, I)
- Microsoft Intune and device deployment (A, I)
- Networking fundamentals including TCP/IP, VLANs, VPNs, and firewalls (A, I)
- Virtualisation and containerisation (e.g. Hyper-V, Docker, Kubernetes) (A, I)
- Identity, access, and certificate management (A, I)
- Change, incident, and configuration management within an ITIL environment (A, I, T)
- Public cloud migrations & management (A, I,T)
- Demonstrable experience with AWS, Azure or GCP hybrid networking, identity & access controls and cost governance (A, I,T)
- Linux & Windows Server administration Active Directory/Group Policy, PowerShell DSC, patch management (A, I)
- Networking & security SD-WAN, Firewalls (Cisco ASA/Palo Alto), vulnerability scanning (A, I)
- Automation & scripting (A, I)
- Monitoring, observability & capacity planning (A, I)
- Backup & disaster-recovery strategy. Implement and test backups. DR-site failover drills (A, I)
- Soft-skills & process discipline with demonstrable analytical/problem-solving mindset, excellent written/verbal communication and the ability to juggle multiple priorities in a matrixed environment (A, I,T)
- Demonstrable experience in managing complicated infrastructure and platform environments (A, I,T)
- Knowledge and understanding of best practices for service management. (A, I,T)
- Experience managing infrastructure incident response and escalation (A, I, T)
- Experience managing relationships with senior stakeholders and external partners, being trusted to report accurately against progress and escalate risks and issues to an appropriate level for resolution or mitigation (A, I,T)
Desirable
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Engineering or a closely related field. This provides a solid grounding in systems, networking and software fundamentals.
Knowledge
- Security & Compliance Frameworks
- Backup, Business Continuity & Disaster Recovery
- Government & Procurement Frameworks
- An understanding of central government, preferably with experience of delivering IT support in this environment. (A, I)
- Experience in designing and implementing Docker images through containerisation
- PaaS, Kubernetes, oauth2/saml2 integrations in NodeJS
- Experience in prototyping through reuse of existing Open-Source components
- An understanding of Information Technology Infrastructure Library (ITIL) and project management methodology. (A, I)
Experience
- Experience working in a government or regulated environment (A, I)
- Prototyping using open-source components (A, I)
- CI/CD pipeline management using Azure DevOps, GitHub Actions, or Jenkins (A, I)
- Cost optimisation and governance in cloud environments (A, I)
- Collaboration with cross-functional teams including security, architecture, and software engineering (A, I)
- Infrastructure as Code using Bicep, Terraform, or ARM templates (A, I)
Qualifications
• Microsoft Certified: Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), or DevOps Engineer (AZ-400) (A, I)
• ITIL Foundation Certification (A, I)
• Advanced or specialist cloud certifications (e.g. Azure Security, DevOps, Networking) are highly desirable (A, I)
Behaviours
We'll assess you against these behaviours during the selection process:
- Changing and Improving
- Managing a Quality Service
- Delivering at Pace
Technical skills
We'll assess you against these technical skills during the selection process:
- Technical Questions
- Case Study
Benefits
Alongside your salary of £58,969, UK Export Finance contributes £17,083 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.
- Learning and development tailored to your role
- An environment with flexible working options
- A culture encouraging inclusion and diversity
- A Civil Service pension with an employer contribution of 28.97%
Things you need to know
Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.
We are assessing candidates using Success Profiles (see Appendix 1) and across the whole process we will assess your Experience, Technical and Behavioursas highlighted below.
The application must be completed by 23.55 on the day of the closing date for it to be accepted.
Use of Artificial Intelligence (AI)
Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use
All applications will be sifted against our essential criteria outlined in the personal specification.
- Qualifications
- Microsoft Certified: Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), or DevOps Engineer (AZ-400) (A, I)
- ITIL Foundation Certification (A, I)
- Advanced or specialist cloud certifications (e.g. Azure Security, DevOps, Networking) are highly desirable (A, I)
- Statement of suitability - you should fully articulate in 750 wordshow you meet the essential criteria outlined in the person specification within the Information Pack.
For the initial sift your application will be evaluated against
- Experience - Application and Statement of Suitability
In the event of a high volume of application forms we will carry out an initial sift on the following three essential criteria:
- Substantial experience with Microsoft Azure (preferred), AWS, or GCP
- Networking fundamentals including TCP/IP, VLANs, VPNs, and firewalls
- Cisco Meraki Network Management
If you are successful following the full sift stage, you will be invited to an initial technical interview; this will include the following assessment:
- Technical - you will be assessed across your technical expertise and acumen, in relation to the essential criteria
- Technical questions - related to the role and the required technical expertise and acumen capability
If you are successful following the initial technical interview stage, you will be invited to panel interview; this will include the following assessment:
- Behaviours/Experience - a formal panel interview where you will be interviewed across all three behaviours highlighted in Appendix 1.
- Technical - you will be assessed across your technical expertise and acumen, in relation to the essential criteria
- Case Study - to be presented to the panel at the start of the interview. This will be provided on the day and will be completed before the panel interview.
Candidates may be invited to a second interview where you will be further assessed across your technical expertise and acumen, in relation to the essential criteria. Details will be provided as required.
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must undergo a criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).
See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
- UK nationals
- nationals of the Republic of Ireland
- nationals of Commonwealth countries who have the right to work in the UK
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
- nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
- individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
- Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)
Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).
Apply and further information
This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
Job contact :
- Name :
- UKEF Resourcing Team
- Email :
- Recruitment2@ukexportfinance.gov.uk
Recruitment team
- Email :
- Recruitment2@ukexportfinance.gov.uk
Further information
Should you have a complaint or wish to raise any concerns regarding the recruitment process, please e-mail your complaint to the Head of Pay and Resourcing (UKEF) at Recruitment2@ukexportfinance.gov.uk and include “Complaint” in the subject heading. Should you remain dissatisfied following UKEF’s investigation then you can refer your complaint to the Commission - http://civilservicecommission.independent.gov.uk/making-complaint.
Attachments
Candidate Pack - Senior Infrastructure Engineer G7
Opens in new window
(pdf, 4395kB)