Infrastructure Engineer

We don’t just talk, we do. Lead the change with us.

At the Tony Blair Institute for Global Change, we work with political leaders around the world to drive change. We help governments turn bold ideas into reality so they can deliver for their people. We do it by advising on strategy, policy and delivery, unlocking the power of technology across all three. And by sharing what we learn on the ground, so everyone can benefit. We do it to build more open, inclusive and prosperous countries for people everywhere.

We are a global not-for-profit organisation, operating in more than 40 countries across five continents. Our teams include political strategists, policy experts, delivery practitioners, technology specialists and more. We speak more than 45 languages and are working on over 100 projects, tackling some of the world’s biggest challenges. We’re all here at TBI to make a difference.

In a world of ever more complex challenges, we believe diversity of background and perspective is a strength. We pride ourselves on a culture that values and nurtures difference. We are dedicated to unlocking potential, not only for the countries we work in but also for each of our team members. No matter where you’re from or who you are, if you’re passionate about the transformative power of progressive politics, we invite you to build a better future with us.

We are looking for an experienced, hands-on Infrastructure Engineer to join TBI’s Digital & Technology team for a critical period of infrastructure and cyber security delivery.

This is not a purely advisory security role. We are looking for someone who is comfortable getting into the technology, identifying what needs to change and implementing those changes.

A major priority will be helping TBI successfully deliver its next Cyber Essentials / Cyber Essentials Plus certification. We therefore particularly want to hear from engineers who have taken an organisation through the certification process before and understand how to translate security requirements into practical technical remediation.

Alongside this, you will provide senior 3rd-line infrastructure expertise across our Microsoft 365 and cloud environment and work closely with our Technical Architect, infrastructure and support teams, and managed Security Operations Centre (SOC).

Please note: candidates must already have the right to work in the UK. We are unable to offer visa sponsorship for this role.

• Infrastructure & Platform Management: Maintain and support the 3rd line infrastructure estate, managing the Azure platform (PaaS, IaaS, VNETs and storage accounts) and the wider M365 estate, including Exchange Online, Teams (incl. telephony integration), OneDrive and SharePoint Online.
• Security Operations: Act as the primary internal liaison with the managed third-party SOC, monitoring and responding to security alerts using Microsoft Defender XDR and Microsoft Sentinel, and supporting incident triage, containment and root cause analysis.
• Vulnerability & Patch Management: Conduct regular vulnerability assessments, track remediation progress and support patch management across the estate.
• Compliance & Certification: Support Cyber Essentials (and Cyber Essentials Plus) certification activities, implementing and recommending remediations to close identified gaps, and assist with internal and external audits and security assessments.
• Collaboration: Work closely with the Technical Architect to design and implement secure, scalable infrastructure solutions, and with the IT Service Desk and wider Infrastructure team to ensure secure configurations and timely resolution of issues.
• Data Protection & Email Security: Assist with the management and configuration of email protection, web control, data loss prevention (DLP) and device monitoring platforms.
• Threat Intelligence & Policy: Contribute to threat intelligence analysis and recommend defensive improvements; support the development and maintenance of security policies, procedures and technical standards.
• Automation & Documentation: Develop and maintain PowerShell scripts to automate routine administrative and security tasks, and produce and maintain accurate system documentation.
• Backup & Resilience: Manage and test M365 and Azure backup and disaster recovery arrangements.

Person Specification

• Strong experience in a 3rd line infrastructure or cyber security role within a global organisation.
• Experience working alongside a managed (3rd party) Security Operations Centre (SOC).
• Experience supporting both Windows and macOS devices in a Microsoft 365 and Azure environment.
• Experience preparing for or maintaining Cyber Essentials (and Cyber Essentials Plus) certification.
• Azure platform management experience, including PaaS, IaaS, VNETs and storage accounts.
• Extensive knowledge of the M365 platform (Exchange Online, Office 365 apps, Teams incl. telephony, OneDrive, SharePoint Online).
• Good knowledge of M365 security technologies (Azure Information Protection, DLP, M365 Security Centre and Compliance Centre, retention policies).
• Understanding of core cyber security concepts: vulnerability management, phishing, endpoint protection and incident response.
• Experience with Cyber Essentials (and Cyber Essentials Plus), including implementing and recommending remediations to close identified gaps.
• Ability to analyse logs, alerts and events to identify potential threats or weaknesses.
• PowerShell scripting experience.
• Experience producing and maintaining system documentation.
• Comfortable working with multiple teams, including Technical Architecture, in a global organisation.
• Excellent written and verbal communication, with a clear customer focus.
• Flexible and resilient, able to handle planned and unplanned demands.
• Strong attention to detail and ability to manage multiple tasks simultaneously.
• Pragmatic problem-solver with a desire to tackle issues at root cause.

Operating Systems

• Windows 10/11
• macOS

Microsoft 365 & Azure

• Microsoft 365 (Exchange Online, Office 365 apps, Teams, OneDrive, SharePoint Online)
• Entra ID (Azure Active Directory)
• Azure (PaaS, IaaS, VNETs, storage accounts)

Security Technologies

• Microsoft Defender XDR
• Microsoft Sentinel
• Microsoft Purview / M365 Compliance Centre
• Data Loss Prevention (DLP)
• Azure Information Protection

Endpoint & Device Management

• Mobile Device Management (MDM) solutions

Collaboration & Service Management

• ITSM platforms (e.g. Freshservice) or other Service Desk ticketing systems
• Jira
• Hands-on experience with Microsoft security tools (Defender for Endpoint, Sentinel, Purview, etc.).
• Exposure to vulnerability scanning tools
• Familiarity with email threat detection and user behavioural analytics platforms.
• Understanding of secure browser isolation or user activity monitoring technologies.
• Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST).
• Previous involvement in security audits, risk assessments or policy development.
• KQL or other scripting/automation skills beyond PowerShell.
• Advanced M365 and Azure backup/disaster recovery experience.
• Experience working in a global or multi-site corporate environment.

This is an opportunity to take meaningful ownership quickly, working across infrastructure and security on systems that support TBI’s global operations. For someone who enjoys solving real technical problems, improving an environment and seeing the impact of their work, there is plenty to get stuck into.

Closing Date:

2026-11-20