Overview

Senior Infrastructure Operations Engineer (Permanent)

Location: London or Newcastle. Location London on-site with 2 days per week in the office expected. Salary: London c£70,000 or Newcastle c£61,000 plus civil service employer pension contribution of 28%. A higher base salary may be available for exceptional applicants.

Close date: 06/10/2025

About the NAO: The National Audit Office (NAO) is the UK’s main public sector audit body. Independent of government, we audit accounts of public sector bodies, examine propriety of government spending, assess risks to financial control and accountability, and review economy, efficiency and effectiveness of programmes and activities. We report directly to Parliament through the Committee of Public Accounts of the House of Commons. We employ around 1,000 staff in financial audit, value for money (VFM) audit or within the corporate enabling group.

Responsibilities

• Design, implementation and administration of hybrid cloud services, including IaaS resources, data connectivity, data backup and restore, print, telecoms, and building management services.
• Monitor system performance and availability, proactively identifying and resolving issues to maintain high service levels.
• Collaborate with security and compliance teams to implement and maintain governance policies across the hybrid cloud estate. Implement and maintain endpoint security features.
• Provide technical leadership in incident and problem management, including root cause analysis and resolution planning.
• Support project delivery by contributing to solution design, implementation, and documentation.
• Manage a network of external technical vendors, set requirements, agree schedules and provide assurance that works issued to vendors is completed to expectation.
• Service Delivery:
  • Manage and maintain Microsoft 365 (and wider Microsoft cloud) services including Exchange Online, Teams, Telephony, OneDrive, Intune, and Azure AD.
  • Contribute to Tier 3 support provision for M365-related incidents and service requests.
  • Manage and maintain resource groups within public cloud infrastructure.
  • Manage and maintain local on-prem infrastructure (server and network).
  • Monitor system health, usage, and security compliance.
  • Administer and support Microsoft Teams Rooms (MTR) devices, including deployment, configuration, and troubleshooting of hardware and software components.
  • Coordinate maintenance and change activities with third party vendors and provide assurance that work is completed to expected levels.
  • Administer and manage the organisation’s externally facing email system.
  • Lead incident management, diagnose and prioritise incidents, investigate root cause and implement resolutions.
  • Lead problem management, investigate patterns and trends and implement preventative measures.
  • Collaborate with service delivery leads to ensure uptime of digital assets.
• Modern Workplace Enablement:
  • Drive adoption of M365 tools and features to enhance collaboration and productivity.
  • Support digital transformation initiatives aligned with business goals.
  • Develop and maintain documentation, user guides, and training materials.
• Security & Compliance:
  • Implement and enforce security policies.
  • Ensure compliance with internal data governance standards.
  • Manage identity and access controls, MFA, and device compliance.
  • Collaborate with support partners on remediation of security vulnerabilities across datacentre, EUC, IaaS space and data network.
  • Design, implementation and administration of security features including End Points, PKI, SCEP, NDES, FIDO, MFA, SSO and Biometric authentication.
• Optimization and Testing:
  • Identify opportunities and implement solutions to streamline operations and reduce manual effort.
  • Testing: Define test conditions, identify risks and report on test activities and outcomes.
• Project and Continuous Improvement:
  • Provide project support for continuous improvement of line-of-business services and supporting infrastructure. Implementation of new services.
  • Collaborate with cross-functional teams including InfoSec, HR, and Digital Operations.
  • Assume lead responsibilities with the design and implementation of digital services.

Working Environment & Requirements

• You'll work on an agreed support rota to ensure coverage from 08:00 – 18:00, with core hours of 09:00 – 17:00, Monday to Friday, on-site in Victoria, London. Occasional attendance will be required at our Newcastle office with expenses paid for travel and accommodation.
• Occasional paid weekend work as required; Time-Off-In-Lieu offered for out-of-hours work during Mon-Fri.

Skills required

• The successful candidate will demonstrate expert-level proficiency in the design, implementation, and management of Microsoft Azure and Microsoft 365 environments. Deep understanding of cloud infrastructure, identity and access management, automation, and security best practices.
• Cloud & Infrastructure Expertise:
  • Azure & On-Prem: Deploying/managing resources via ARM templates, CLI, and portal.
  • Networking: Configures VNets, NSGs, VPNs, ExpressRoute, and Azure Firewall.
  • Compute & Storage: Manages VMs, Azure Files, Blob Storage, and Backup.
  • Monitoring & Governance: Implements Azure Monitor, Log Analytics, and Policy.
  • Identity & Access: Entra ID (Azure AD), Conditional Access, RBAC, and PIM.
  • Physical Infrastructure: Hyperconverged systems (VMware, Nutanix) and Cisco networks.
  • Active Directory: Manages AD, DHCP, DNS, and PKI.
• Microsoft 365 Administration:
  • Exchange Online & Teams: Advanced mail flow, retention, governance, and hybrid setups.
  • Endpoint Management: Intune, Autopilot, and SCCM across Windows, iOS, Android.
  • Security & Compliance: DLP, sensitivity labels, SPF/DKIM/DMARC, Secure Score.
  • SharePoint & OneDrive: Administers collaboration platforms and migrations.
• Automation & Integration:
  • PowerShell: Advanced scripting across Azure and M365.
  • Integration: Graph API, Logic Apps, and runbooks for orchestration.
• Operational Excellence:
  • Incident & Problem Management: Resolves complex cloud issues.
  • Documentation: Creates SOPs, runbooks, and technical guides.
  • Project Leadership: Leads cloud migration, workplace modernisation, and security projects.
  • Collaboration: Manages external vendors to deliver digital solutions.

Certifications (Desirable)

• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft 365 Certified: Enterprise Administrator Expert (MS-102)
• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• ITIL Foundation or equivalent service management qualification