IT Technical Lead

Technical Lead: Infrastructure projects team

Location: London - must be inside 1.5 hour commute to central London

Contract: Full-time, 35 hours per week

Type: Contract role – Inside IR35

Duration: initial 6months with possible extension up to18 months

Notice Period: 2 weeks

Site Requirement – 1 day per week minimum *Tuesday*

4C are recruiting on behalf of our client for an experienced Technical Lead, to lead and manage our Infrastructure projects team, focusing on specific security remediation workstreams across our enterprise systems and shared infrastructure services. You will act as the primary technical lead and solutions architect for these workstreams ensuring scalable, secure and resilient solutions that align with organisational objectives.

This role will be within the infrastructure projects team and act as the technical lead for all security / vulnerability remediation activities of the current Windows endpoint and server estate, with an initial focus of Cyber Essentials compliance.

The role will also be responsible for the allocation and management of tasks / work packages for a team of Senior System Analysis who will also be focused on security / vulnerability remediation activities of the current Windows estate.

The overall objective is to assist with security / venerability patching, applications packaging other areas of support for the University’s estate of approximately 4,500 Windows 11 devices, plus the University’s current Windows server estates. The initial engagement is for a fix term period of 6 months to assist with the preparation for an upcoming Cyber Essentials accreditation. The roles may also be required however to assist with other areas of the general support of the current Windows estate.

Key Responsibilities

To meet the goals required set out for the infrastructure project team

Provide technical leadership to the systems analyst’s/engineers in the team

Develop and apply technical standards for safe, resilient and accessible services.

Review change and project proposals to ensure compliance with strategic plans.

Identify opportunities for cost optimisation and adoption of cloud/managed services.

Build strong relationships with stakeholders

Desirable

* Professional certifications (e.g., Microsoft MCSE/MCP).

* ITIL Foundation or higher; PRINCE2 or Agile project management qualifications.

* Experience in Higher Education or DevOps.

* Experience working on and delivering Cyber Essentials

Technical Requirements

Essential

* 5+ years’ experience in day-to-day management of large Windows endpoint estates of 3,000+ devices

* 5+ years’ experience in day-to-day management of large Windows server estates of 500+ servers

* SME and technical leadership experience, working and collaborating as part of a team

* Excellent communication, engagement, proactive, positive, can-do attitude

* Strong experience with MS Active Directory, SCCM, Intune

* AD Group Policy configuration and troubleshooting

* Solid understanding of security requirements for Windows endpoints/applications to meet Cyber Essentials compliance

* Specific experience of conducting security/vulnerability patching and remediation at scale

* Application packaging/deployment via SCCM + Intune

* Working in an ITIL environment with change and incident management

* Presenting technical solutions confidently to relevant approval boards

* Creating and reviewing high- and low-level technical documentation, technical standards and processes

Desirable

* Experience with packaging/troubleshooting using Cloudpaging technology / AppsAnywhere

* MS SQL experience

* Qualys vulnerability management

Working Requirements:

* Reporting to the head of infrastructure

* Working with the University’s Security Operations Team to identify current / new security vulnerabilities and other out of date / non complaint software.

* Reviewing and Prioritisation of identified security vulnerabilities

* Removing / updating software applications, patches and software packages to resolve identified security vulnerabilities

* Packaging of new / update software applications (to be deployed by SCCM, Intune, or AppsAnywhere)

* Conducting Remediation configuration as required including AD Group policy configuration and other means

* Conducting thorough testing and release management

* Creating & presenting technical documentation, standards and processes for approval.

* Working with other teams such Security Operations and networking teams as required.

Please apply now below if you have the right experience and are available to interview and start this project in the upcoming weeks