IT Infrastructure & Platforms Senior Engineer

Location: London

Department: IT

About Lightsource bp

Lightsource bp is a global leader in the development and management of solar energy projects. We are a 50:50 joint venture with bp with a mission to help drive the world’s transition to low carbon energy.

With solar set to increase tenfold in the next 20 years, we are well-positioned to capitalize on this growth. By joining the Lightsource bp team, you will ‘be the change’ on the world’s energy transition to a more sustainable future.

We pride ourselves on our entrepreneurial spirit as we continue to push the boundaries of an ever-changing energy landscape. By choosing a career with us, you can expect a challenging and fulfilling role surrounded by people who are passionate and have brilliant ideas about sustainable technology, innovation and making the world a better place.

What You’ll do (the role)

Summary

The IT Infrastructure & Platforms Senior Engineer will be responsible for providing 2nd and 3rd line support, monitoring and developing the infrastructure platforms which enables business operations. The role will take responsibility for a wide range of infrastructure components from server to network, primarily across cloud-based technologies. There is a strong focus on vulnerability management and continual improvement of the enterprise security posture of Lightsource bp. This is a proactive, technical hands-on role with the scope to contribute across a variety of business areas.

Duties and responsibilities

• Proactive administration, maintenance and management of core infrastructure services including servers, storage, backups, applications and databases
• Support and assist with the design of new IT infrastructure and associated services, including LLD and HLD where appropriate
• Contribute to the development of infrastructure standards, processes and procedures and guidelines to mitigate software, hardware and networking issues
• Maintain and implement appropriate industry-standard best practices
• Perform upgrades and patch management of all infrastructure components taking into consideration outages and security 
• Proactively monitor the infrastructure platform ensuring 5 9's availability.
• Report, trend and analyse infrastructure load and system availability producing effective capacity planning to maximise uptimes and throughput
• Lead on Vulnerability Management, assessing new threats and utilising toolsets to resolve or mitigate critical, high, zero days vulnerabilities to agreed timeframes
• Lead on enterprise-wide application security posture management and provide third-line assurance around vulnerability remediation
• Take a threat led approach to enhancing configurations and policy to reduce risk
• Continually monitor the organisations security systems and related infrastructure for signs of compromise, integrating threat detection solutions to our most critical business applications.
• Focus on maximising security value from existing investments.
• Monitor logs and review system configurations, including user accounts, to ensure that the core infrastructure is secure, available and recoverable
• Work with the broader Cyber Security team to investigate, contain and remediate cyber security incidents
• Provide 2nd & 3rd line support that has been escalated through the service desk, line management or other senior members
• Ensure incidents are resolved, requests fulfilled, and problems investigated with appropriate resolution and contribution to the central knowledge base
• Interact with vendors to identify and evaluate new technology products
• Out of hours work required to maintain and update business critical infrastructure. Out of hours includes, evening and weekends, as business demands.

Who we’re looking for

Experience & Knowledge

• At least 5 years experience working in medium sized organization across M365, Entra, Intune stacks in a technical support role
• At least 5 years experience in application packaging/deployment, focused around Intune technologies
• Industry experience in Backup Technologies
• Industry experience in implementing alerting/monitoring systems 
• Possessing critical thinking skills to help troubleshoot issues
• Be comfortable presenting/leading user-facing calls with regards to technical demos, training.
• Microsoft Active Directory, DNS/DHCP/File, Group Policy, Powershell Scripting
• M365 E5, including Admin Console, Teams Admin, Exchange Online, SharePoint Online, Viva
• Entra + Intune Endpoint management portals, with experience of creation of conditional access policies
• Policy creation in Intune to manage both corporate and personal BYOD devices
• Experienced in utilisation of Intune Endpoint Analytics to assist with device health
• Expertise in Windows Autopilot, white glove deployment
• Windows 11 Builds to CIS Benchmark standards
• Experienced in use of Defender suite, inclusive of Defender XDR, Defender for Cloud, Cloud Apps, Identity, Servers, Endpoint
• Purview/Security and Compliance experience focused around DLP policies
• Azure cloud environment administration with a particular focus on IaaS. AWS desirable.
• Azure Sentinel experience, including rule tuning, log ingestion management.
• VMware ESXi, vCenter.
• Veeam Backup Technologies
• Mimecast, KnowBe4
• Crowdstrike
• Cisco Firepower, Cisco Meraki and Cisco Umbrella experience
• Experienced in use of security and enterprise infrastructure products and tools, such as anti-malware products, vulnerability scanning tools, cloud platforms etc.
• Understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks
• Experienced working within an ITIL framework, ideally focused around utilisation of ServiceNow as ITSM Tool. Understanding of request, incident, problem, change process and CMDB concepts required.

Education

• IT related degree or equivalent
• Professional qualifications focused on Microsoft technologies – M365, Entra, Azure Cloud

Why you’ll make a great member of the team

Work & General Skills  

• Team player, able to empathize with and help others
• Able to thrive in a collaborative, fast paced team environment
• Able to provide a high level of service to users
• Able to multitask effectively
• Able to work effectively with minimal supervision
• Curiosity, a desire to solve technical problems
• Flexible & “can do” attitude
• Strong stakeholder management skills

Why you’ll want to work for us

Our company is a place where you can be yourself and grow; a place where your ideas and opinions matter.

Be you

We pride ourselves on being an inclusive community, where every individual is valued and treated with respect.

Be responsible

Our culture is driven by our core values. From operating safely to ensuring our solar projects are  responsible and promote biodiversity.

Be recognized

Alongside a competitive salary, we offer a variety of benefits including annual bonus, retention bank, health insurance, pension and other local benefits.

Be inspired

Beyond your day-to-day working life at Lightsource bp, there’s a variety of initiatives that will contribute to your own personal development. Initiatives to get involved with including our charitable causes, supporting our solar honey project or our sustainability initiatives.

Our Core Values

Lightsource bp truly cares about creating a sustainable future through safe, responsible, and meaningful low carbon energy projects. Our core values of Safety, Integrity, Respect, Sustainability and Drive are the guiding principles for everything we do.

https://www.lightsourcebp.com/careers