{"id":949387,"url":"https://alion.io/job/harris-computer-senior-infrastructure-security-engineer","title":"Senior Infrastructure & Security Engineer","company":{"id":2223,"name":"Harris Computer","domain":"harriscomputer.com","url":"https://alion.io/company/harris-computer","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":33,"ghost_share":0,"stale_share":0.97,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-01T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Swindon, United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":124000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVE","optional":false},{"name":"Docker","optional":false},{"name":"ESET","optional":false},{"name":"GCP","optional":false},{"name":"Grafana","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"Loki","optional":false},{"name":"MySQL","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Octopus Deploy","optional":true}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-01T00:40:12Z","board_verified":true,"closed_at":null,"days_open":45,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":45},"description":"Commerce Decisions, part of Harris Computer Company are currently seeking an experienced Senior Infrastructure & Security Engineer on a full-time, permanent basis operating on a remote working model.\nCommerce Decisions is part of Harris. Harris’ strategy focuses on acquiring software businesses, strengthening and managing them well, and growing them for the future. Our companies provide mission-critical software solutions to a global customer base across various vertical markets. We are part of Constellation Software Inc. (TSX: CSU), one of the world’s most active acquirers of software businesses.\nRole Responsibilities\nInfrastructure & cloud operations\nDesign, implement and run cloud infrastructure across Azure and Oracle Cloud (OCI) spanning the UK and Canada, for high availability, scalability and security.\n\nAdminister a mixed Linux and Windows server estate, plus Docker and Kubernetes workloads.\n\nOwn deployment of monthly SaaS releases, updates and patches into Staging, internal and hosted customer environments (Dev produces the release package).\n\nLight MySQL maintenance: version upgrades, backup monitoring, replica health checks and tuning improvements.\n\nManage internal IT assets and users via ManageEngine; monitor staff device patch status.\n\nMaintain internal servers and QA/test environments.\n\nInvestigate and resolve infrastructure issues and bugs, supporting the wider engineering team.\n\nAutomation & modernisation (≈50% of the role)\nLead the migration of manually-built Oracle Cloud environments onto Terraform and Ansible, with proper change management.\n\nPartner with Development to identify and build automation that improves releases and deployment. A key future initiative is building an installer to deploy updates remotely to self-hosted customers - replacing the time-consuming, costly on-site visits.\n\nDrive automation and modernisation as a continuous theme, treating infrastructure-as-code as the living source of truth for infrastructure state.\n\nSecurity engineering\nPatch management across the estate.\n\nMaintain and improve hardened environments to CIS benchmarks - you’ll lead the technical hardening standards and drive their implementation.\n\nThreat-horizon monitoring: track IT news, vendor advisories, CVE feeds, NCSC and similar for issues relevant to our stack, and drive remediation.\n\nOperate security tooling (CrowdStrike, ESET, Rapid7, or equivalents): deploy agents, ensure coverage and updates, monitor dashboards, and triage and analyse alerts.\n\nCoordinate penetration tests end-to-end and own scoping - as the person with the deepest knowledge of our exposed attack surface - through execution, triage, remediation and evidencing closure.\n\nAuthor and review customer security questionnaires and bid responses about our hosting environments and security controls.\n\nProvide technical evidence and implement controls in support of ISO 27001 and Cyber Essentials Plus; occasionally contribute to MOD-aligned security responses (e.g. JSP 440, Secure by Design).\n\nNetworking\nHands-on (and IaC) with Cloud based load balancers, SSL certs & ciphers, WAFs (configuration and management), security headers, network security groups and VPNs.\n\nResilience & business continuity\nCapacity monitoring and resilience planning; design for high availability and scalability (Kubernetes and similar), in collaboration with Development.\n\nLead disaster-recovery and business-continuity capability: design it, test it regularly, and automate backup/restore and failover wherever possible.\n\nBuild and maintain alerting and observability so the right people can see what they need - consolidating and improving across Grafana/Loki (application logs), ManageEngine log analytics (server logs) and PRTG (server sensors).\n\nDocumentation & operating rhythm\nMaintain infrastructure-as-code as the primary record of infrastructure state, supported by clear runbooks, operational processes and decisions in Confluence and Jira.\n\nWeekly tracking of work in progress and incoming work.\n\nThe successful candidate will have these skills and experience:\nCollaboration closely with R&D and Customer Support and Success teams to ensure the best outcomes for our customers\n\nStrong hands-on infrastructure/IT operations background across a mixed estate.\n\nProduction experience with at least one major public cloud (Azure, AWS, OCI or GCP) and a strong grasp of the underlying concepts.\n\nPractical experience with Terraform, Ansible or similar in production.\n\nConfident administering both Linux and Windows servers.\n\nSolid understanding of containers and orchestration, Kubernetes in particular.\n\nDemonstrable networking skills: load balancers, WAFs, VPNs, security headers, network security groups.\n\nPractical security operations: patching, hardening (e.g. to CIS), vulnerability management, and operating endpoint/threat tooling and acting on what it surfaces.\n\nExperience coordinating penetration tests and driving triage and remediation through to closure.\n\nExperience designing for resilience, high availability and business continuity (backup/restore, DR, regular testing).\n\nStrong analytical and logical troubleshooting, root-cause discipline, you'll work methodically and effectively under pressure, knowing when to escalate.\n\nGenuine curiosity for emerging tools and technologies, including AI, and the confidence to adopt them and push improvements forward.\n\nClear written communication - you'll draft answers to customer security questions and contribute technical evidence to audits.\n\nEligible for and able to obtain UK SC clearance (broadly: UK residency for a defined recent period). Clearance is mandatory to access our hosted systems; we sponsor the process.\n\nDesirable Skills & Experience\nActive SC clearance at point of hire.\n\nHands-on Oracle Cloud Infrastructure (OCI).\n\nDirect experience with the specific security tooling: CrowdStrike, ESET, Rapid7.\n\nOctopus Deploy.\n\nManageEngine.\n\nMySQL administration.\n\nObservability stacks: Grafana/Loki, PRTG.\n\nExperience migrating manually-built environments to infrastructure-as-code.\n\nDirect experience with ISO 27001, Cyber Essentials Plus and MOD frameworks (JSP 440, Secure by Design).\n\nPrior experience in a defence, government, or other regulated/secure environment.\n\nLocation\nUK Based.\nTravel - required to company offices, events, customer sites, partner sites, conferences, industry events, corporate events etc. as necessary\nBenefits\nHarris offers an extremely competitive UK employee benefits programme.\n25 days holiday\n\n5 Personal Days leave entitlement\n\nAn annual Lifestyle Reward amounting £325 per annum/pro rata.\n\nPrivate medical and dental care\n\nEmployee Share Ownership Plan\n\nSupporting your application\nOur recruitment process will comprise of interviews and, at times, a written exercise, an assessment day and/or a presentation. As an equal opportunities’ employer, we want to make sure we do all we can to make this a positive experience for you. When applying, please make us aware on your application of any adjustments or additional support we can provide you with before or on the day of an interview.","description_format":"text","description_chars":7100,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Billing & Subscription Management","Digital Government","EHR & Clinical Software"],"lifecycle":[{"event":"open","at":"2026-09-15T23:13:46Z"}],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.459,"p_room":0.36,"age_days":45,"expected_fill_days":25,"reasons":["conf:5","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-01T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/harris-computer-senior-infrastructure-security-engineer","json_url":"https://alion.io/job/harris-computer-senior-infrastructure-security-engineer.json","meta":{"generated_at":"2026-10-01T18:40:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":973,"day_limit":5000,"remaining_today":4027,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}