Systems & Infrastructure Engineer

Hi there! Thanks for stopping by our job ad.

We’re London’s largest and fastest 100% full fibre broadband provider, bringing better internet to Londoners since 2013. Unlike most providers, we build, own and operate our dedicated fibre optic network and install it directly into the home, meaning we can deliver a super-fast connection at prices the national providers find hard to beat. We’re a relatively new company to the market, but since establishment:

• We’re the only provider in London offering residential broadband speeds of up to 5Gbps.

• Our network covers 1.3 million properties in London, which is more than one third of homes in the UK’s capital city.

• We have over 800,000 properties under wayleave agreement and are currently working in partnership with more than 200 of London’s biggest landlords. 

• We have connected 720 community spaces in 24 boroughs, giving more Londoners free access to fast, reliable broadband.

We’re proud of our achievements so far, but we are not complacent and definitely not stopping here. To help us get to our future, we’re looking for forward thinkers, people with big ideas, people passionate about technology and most importantly hard working team players to join us and be a part of our growing business.

Job purpose:

• The Systems and Infrastructure Engineer will be responsible for the day-to-day management, security, maintenance and compliance of the organisation's internal infrastructure platforms.

• Be part of project teams as required to renew current systems and deploy new solutions.

• Ensure that all internal infrastructure remains secure, supported, patched and compliant with the organisation's security policies and UK Telecommunications Security Act (TSA) requirements. See Regulation 12 / Chapter 11 – Patching & Updates of the TSA supporting the o organisation's ongoing external security and TSA audits as required.

• Diagnose, troubleshoot and resolve software, hardware and infrastructure-related network issues, working with Network Engineering and Network Operations teams as appropriate.

• Ensure that operating systems, applications, infrastructure platforms and supporting services are maintained with current security patches, vendor bug fixes and security updates.

• This is a proactive, hands-on role focused on preventing security and compliance issues rather than simply responding to them.
  

What you’ll be doing:

Proactive Systems Engineering

• Install, configure and maintain software, hardware and operating system features and policies in support of the Network Engineering and Operations function.

• Ensure proper and secure storage, backup and retrieval of systems and data.

• Identify areas for improvement, end-of-life notifications and other systems issues.

• Assist the Network Operations Centre on complex/pervasive problems.

• Replacement of failed components on-site as required.

• Ensure that documentation is updated according to company requirements.

Proactive Infrastructure Engineering

• Security Implementations: Configure and manage complex security solutions using tools such as Freeradius, Palo Alto Networks devices, FreeIPA, iptables, and firewalled.

• Manage underlying infrastructure that supports systems such as Netbox. Ensure it is scaled at all times to support user requirements.

• Oversee the planning, deployment, and maintenance of network infrastructure using tools such 

as Terraform and Puppet.

• Configuration Management: Utilise Puppet to manage configurations consistently across different 

environments, ensuring efficiency and compliance.

• OS Deployment Automation: Automate operating system installations and configurations for various Linux distributions, including Ubuntu, CentOS, AlmaLinux, and RHEL.

• Comprehensive Testing: Lead diverse types of testing to ensure system integrity and security, including uni, integration, performance, security, and end-to-end testing.

TSA, Security & Compliance

• Own the operational infrastructure activities required to maintain compliance with UK Telecommunications Security Act (TSA) requirements and associated security obligations.

• Ensure operating systems, applications and infrastructure platforms receive security patches, vendor bug fixes and firmware/software updates within agreed timescales and defined security and hardening standards.

• Monitor vendor security advisories and vulnerability notifications and assess their relevance and impact.

• Identify and remediate vulnerabilities across the infrastructure estate based on risk and defined remediation SLAs.

• Ensure infrastructure remains within supported vendor versions and identify end-of-life or unsupported systems.

• Work closely with the Security, Network Technology and IT teams to identify and address security risks.

• Support security incident investigations and remediation where infrastructure is involved.

• Ensure appropriate logging, monitoring and alerting is implemented across managed infrastructure.

• Maintain secure configuration baselines and ensure systems remain aligned with them.

• Comply with all external audit and assurance requirements as required in TSA regulations.
  

The experience we’re looking for you to bring:

The Engineer should have a minimum of 5 years of experience working in a server, storage and a networking environment.

Must have:

• Strong hands-on experience maintaining, troubleshooting, securing and patching:

• DNS – strong understanding of DNS architecture, zones, records, recursion, authoritative DNS, DNS security and DNS troubleshooting. Experience with BIND or equivalent DNS platforms.

• DHCP – administration, configuration, troubleshooting and patching of DHCP services, including high-availability configurations.

• NTP – administration and maintenance of NTP services, including secure time synchronisation and troubleshooting of time drift and synchronisation issues.

• NetBox / IPAM / DCIM – administration, maintenance, upgrades and integration with network automation and source-of-truth processes.

• Ability to assess vendor security advisories and determine the appropriate patch, software upgrade or mitigation required for these platforms.

• Experience planning, testing and implementing infrastructure upgrades while minimising service disruption.

Security & Patch Management

• Strong understanding of infrastructure vulnerability and patch management.

• Proven experience maintaining systems against defined security patching SLAs including via automation.

• Ability to identify, assess and remediate security vulnerabilities and software defects.

• Experience applying vendor security patches, bug fixes, maintenance releases and major software upgrades.

• Ability to manage emergency security updates for critical vulnerabilities.

• Experience ma