About the role
Infrastructure Engineer
Location: Mostly remote, with occasional travel to Leeds
Rate: £560 per day, Inside IR35
Duration: Until November 2027
Central government or NHS experience essentialOverview
We're looking for a hands-on Infrastructure Engineer to join NHS England and work down a significant vulnerability backlog across national, mission-critical services. New findings land every week from scanners, pen tests, audits and security advisories. Your job is to fix them safely in production, prove they're closed and keep live services running.
Key Responsibilities
Work through the vulnerability backlog, fixing findings from scanners, pen tests, IT health checks and audits
Patch and upgrade operating systems, packages, middleware, container base images and application dependencies
Fix insecure cloud configuration, including over-permissive IAM, open security groups and unencrypted resources
Keep legacy data stores patched and contained, and support their removal as migrations complete
Put compensating controls in place where fixes can't be applied straight away, and document the risk
Respond quickly to critical CVEs, zero-days, NHS England cyber alerts and vendor advisories
Support security and service incidents hands-on, including containment, emergency changes and recovery
Test fixes in lower environments and plan rollback for every production change
Deliver changes through formal change control, including emergency changes
Use and extend Terraform, Ansible and CI/CD pipelines to apply fixes consistently
Re-scan to verify fixes, update tickets and the risk register, and report progress and blockers
Lead and coordinate a small team of engineers, allocate work and review fixesKey Requirements
Central government or NHS experience (essential)
Strong track record of remediating vulnerabilities in live production environments, at volume and to deadlines
Deep Linux expertise (RHEL or similar), including patching, kernel and service upgrades and hardening
Hands-on AWS experience fixing misconfigurations in IAM, security groups, S3, encryption and logging
Able to interpret scanner and pen test output (Qualys, Tenable, AWS Inspector, container image scanners)
Experience patching and rebuilding containers and base images, and updating dependencies with dev teams
Delivering changes with Terraform, Ansible and CI/CD (GitLab CI or Jenkins)
Working within formal change control (CAB), including emergency changes with tested rollback
Scripting in Bash and Python, plus experience working with RESTful APIsApply now or email for more information
About this listing
This role passed our automated spam and quality filters and was active in our feed when last checked. Joboru is an aggregator — here is how we screen listings. If anything looks off, tell us.