4C are recruiting on behalf of our client for an experienced Technical Lead to lead and manage our Infrastructure projects team, focusing on specific security remediation workstreams across our enterprise systems and shared infrastructure services. You will act as the primary technical lead and solutions architect for these workstreams ensuring scalable, secure and resilient solutions that align with organisational objectives.   

This role will be within the infrastructure projects team and act as the technical lead for all security / vulnerability remediation activities of the current Windows endpoint and server estate, with an initial focus of Cyber Essentials compliance.  

The role will also be responsible for the allocation and management of tasks / work packages for a team of Senior System Analysis who will also be focused on security / vulnerability remediation activities of the current Windows estate.  

The overall objective is to assist with security / vulnerability patching, applications packaging other areas of support for the University’s estate of approximately 4,500 Windows 11 devices, plus the University’s current Windows server estates.  The initial engagement is for a fix term period of 6 months to assist with the preparation for an upcoming Cyber Essentials accreditation. The roles may also be required however to assist with other areas of the general support of the current Windows estate. 

Key Responsibilities  

To meet the goals required set out for the infrastructure project team 

Provide technical leadership to the systems analyst’s/engineers in the team 

Develop and apply technical standards for safe, resilient and accessible services.  

Review change and project proposals to ensure compliance with strategic plans.  Identify opportunities for cost optimisation and adoption of cloud/managed services.  

Build strong relationships with stakeholders  

Desirable  

Professional certifications (e.g., Microsoft MCSE/MCP).  

ITIL Foundation or higher; PRINCE2 or Agile project management qualifications.  

Experience in Higher Education or DevOps.  

Experience working on and delivering Cyber Essentials   

Technical Requirements  

Essential 

5+ years’ experience in day-to-day management of large Windows endpoint estates of 3,000+ devices 

5+ years’ experience in day-to-day management of large Windows server estates of 500+ servers 

SME and technical leadership experience, working and collaborating as part of a team 

Excellent communication, engagement, proactive, positive, can-do attitude 

Strong experience with MS Active Directory, SCCM, Intune 

AD Group Policy configuration and troubleshooting 

Solid understanding of security requirements for Windows endpoints/applications to meet Cyber Essentials compliance 

Specific experience of conducting security/vulnerability patching and remediation at scale 

Application packaging/deployment via SCCM + Intune Working in an ITIL environment with change and incident management 

Presenting technical solutions confidently to relevant approval boards 

Creating and reviewing high- and low-level technical documentation, technical standards and processes 

Desirable 

Experience with packaging/troubleshooting using Cloudpaging technology / AppsAnywhere  

MS SQL experience 

Qualys vulnerability management  

Working Requirements:  

 Reporting to the head of infrastructure 

Working with the University’s Security Operations Team to identify current / new security vulnerabilities and other out of date / non complaint software.  

Reviewing and Prioritisation of identified security vulnerabilities  

Removing / updating software applications, patches and software packages to resolve identified security vulnerabilities  

Packaging of new / update software applications (to be deployed by SCCM, Intune, or AppsAnywhere)  

Conducting Remediation configuration as required including AD Group policy configuration and other means  

Conducting thorough testing and release management  

Creating & presenting technical documentation, standards and processes for approval.  

Working with other teams such Security Operations and networking teams as required.