Infrastructure Engineer - Security Remediation

The role

As an Infrastructure Engineer at NEXT, you will be a vital part of the Technology team, responsible for maintaining and enhancing the IT systems that keep our global business moving. Working from our Head Office with hybrid flexibility, you will ensure the stability and security of both our on-premise and cloud-based platforms.

Our brand is dynamic and constantly evolving. In this role, you won't just "keep the lights on"; you will actively contribute to new technology projects that push our boundaries and improve the experience for millions of customers worldwide.

What you'll take on

We build on success and learn to evolve every day. In this role, you will:

• Make it happen by managing and resolving incidents and system changes, acting as a key escalation point for the team.
• Push the boundaries by implementing resilient, scalable solutions and developing automation scripts to streamline our operations.
• Invite collaboration by working alongside other technology teams to deliver large-scale projects and initiatives.
• Keep it real by creating clear technical documentation and ensuring all systems meet our high standards for security and excellence.
• Support the team by participating in an out-of-hours on-call rota, ensuring our critical business systems are always ready for action.

What you'll bring

Life at NEXT is fast and full on, so we are looking for someone who is ready to give it their all. You should have:

• Strong analytical skills and a proven track record of supporting technology platforms in an enterprise environment and the ability to manage your own time effectively.
• A growth mindset with a willingness to learn new skills and adapt to the latest industry developments. You will have a genuine passion for IT with a desire to learn and implement the latest tools and technologies.
• A collaborative spirit, showing respect for every colleague and a lack of ego as we work toward shared goals. You will have a proven ability to work both independently and as part of a team, with the judgment to escalate issues appropriately.
• Quiet confidence when working under pressure, with the ability to communicate clearly and directly with everyone across the business. You will have the ability to plan, prioritise and set completion dates, providing regular reporting on work progress.
• Excellent attention to detail and the ability to prioritise a busy workload while maintaining a focus on the customer experience.
• Experience working within large corporate environments following Change Management and Project Management frameworks.

Technical requirements

• Real-world experience managing devices across desktops and servers, with tools such as Microsoft Configuration Manager, Ansible including report building with Power BI
• Proficient in Windows Server Support, Group Policy, Active Directory, and Certificate Authority.
• Expertise automating tasks using Azure runbooks, Ansible or other automation platforms using PowerShell and other scripting languages to automate complex tasks.
• Understanding of configuring encryption protocols and algorithms.
• Experience with Vulnerability management products (e.g., Qualys, Kenna) and hands-on remediation of addressing these vulnerabilities
• Troubleshooting and remediation of failed patch installations and PCI vulnerability experience would be a bonus
• Installation and troubleshooting of EDR products

Desirable

• Implementation and troubleshooting certificate issuance/management/automation