Assess security configurations across Windows Server, Linux, networking, Azure and Microsoft 365 against recognised best practice standards
Develop and implement remediation plans to address identified security weaknesses across the infrastructure estate
Resolve permission and ACL issues, including file and folder access concerns, without impacting service availability
Improve Azure and Microsoft 365 security posture, including remediation of findings raised by Microsoft security tooling and maintaining Microsoft Secure Score
Strengthen identity, ransomware resilience and end-user security controls across the wider technology estate
Review and uplift data protection measures, including DLP configurations and broader data loss prevention controls
Create and maintain process documentation as controls, processes and operating practices mature

Strong PowerShell skills and a drive to automate repeatable activity wherever possible
Extensive experience across Windows, Linux, networking and enterprise infrastructure environments
Strong Microsoft 365 expertise, particularly across Microsoft Defender, Threat Hunting and Microsoft Purview
Solid knowledge of cloud and infrastructure security, particularly within Microsoft Azure
The ability to interpret technical standards, assess current controls and implement improvements in a pragmatic way
Clear communication skills and confidence producing technical documentation, process guidance and progress updates

System Architect – Infrastructure Security

Key skills