IT Infrastructure Operations and Security Lead

Overview
IT Infrastructure Operations and Security Lead at Free-Work UK. This role involves excellent management of a small IT team, stakeholder and vendor management, and being hands-on technically in IT infrastructure. The IT Operational Platform and Security Lead oversees the organisation’s IT operations, ensuring the stability, continuity, security, and efficiency of technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi-layer networking, security, data management, and third-party platforms that support global business operations and the associated applications estate.The Client is based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £95K plus Benefits.Security, Compliance and Risk Management
Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data.Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms.Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM).Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms.Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA).Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services.Oversee endpoint security, cloud network and API security for robust protection across all assets.Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests.Technical Experience
Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge.Microsoft AD (Entra), Server and SQL experience.O365 administration and design.Global Software Patching and estate management via Intune.Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design and administration experience.Software Defined Networking (Cisco, Meraki, Versa).Key Skills
Microsoft 365 and Azure: Managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel.Security and Compliance: Knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices.Identity and Access Management (IAM): Azure AD, MFA, Conditional Access, SSO, and PAM.Threat Management and Incident Response: Detecting, responding to, and mitigating cyber threats using SIEM, endpoint security, and vulnerability management tools.Networking and Infrastructure Security: Firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls.IT Service Management and Automation: ITIL-based service management, automating operational tasks, and optimising service delivery.IT Operations and Service Continuity: Ensuring high availability, resilience, business continuity, and disaster recovery.Supplier and Vendor Management: Managing third-party IT vendors, MSPs, and SaaS providers, ensuring SLAs and cost-effectiveness.Project Leadership and Change Management: Leading technology projects, system upgrades, and platform migrations with minimal business disruption.Process Improvement and Automation: Identifying inefficiencies, automating workflows, and enhancing security controls.Summary of Skills Required
The client seeks:Global enterprise infrastructure management experience over the last 5 years.Migration of Legacy VM estates to SaaS and Azure Cloud services (buy before build mentality).Global operational team management experience (HR, strategic delivery, audit lead for Infra, budget).Vendor management of managed service partners and delivery partners.Technical infrastructure engineering background (Windows Server, AD, SQL, Firewalls/SD-WAN, Networks).Location: City of London base; hybrid work arrangement.Salary: £85K - £95K plus ..... full job details .....