Senior Cross Domain Engineer

Location: Glasgow (hybrid working - 2-3 days onsite)

Duration: 12 months +

Vetting: SC security clearance will be required

Essential Skills

• Significant experience as a Senior Platform Engineer, Infrastructure Engineer, Systems Engineer, or Cross Domain Engineer within complex enterprise, defence, government, or highly regulated environments.
• Proven experience designing, implementing, supporting, and troubleshooting Microsoft Windows Server infrastructure.
• Strong technical knowledge of:
  • Windows Server 2016, 2019 and 2022
  • Active Directory
  • Group Policy
  • DNS
  • DHCP
  • Public Key Infrastructure (PKI)
  • Certificate Services
  • Identity and Authentication Services
  • PowerShell
  • VMware vSphere and Virtualisation Technologies

Cross Domain Technologies

• Proven experience supporting, engineering, operating, or assuring High Assurance Gateways (HAGs), Cross Domain Solutions (CDS), or trusted information exchange platforms.
• Strong understanding of Cross Domain architectural patterns including:
  • One-way information transfer (Data Diodes)
  • Two-way controlled information exchange
  • Multi-Level Security architectures
  • Trusted Gateway Services
  • Secure Replication Services
  • Guard-based Information Exchange
• Experience implementing and managing information release policies, content validation controls, file sanitisation processes, malware inspection, and data transfer governance.
• Strong understanding of trust boundaries, security domains, data segregation, and secure information sharing principles.
• Experience supporting security accreditation, assurance activities, and evidence generation for classified systems and regulated environments.
• Strong understanding of cryptographic services, encryption technologies, PKI, certificate lifecycle management, and secure communications.
• Experience assessing and mitigating risks associated with classified information exchange and trusted data transfer mechanisms.
• Experience integrating Cross Domain technologies with enterprise infrastructure services including Active Directory, Identity Services, Security Monitoring platforms, SIEM tooling, and Windows infrastructure.
• Knowledge of secure information exchange requirements across Government, Defence, National Security, or Critical National Infrastructure environments.

Infrastructure & Engineering

• Advanced PowerShell scripting and automation experience.
• Strong understanding of Windows platform lifecycle management, system hardening, patch management, and vulnerability remediation.
• Experience troubleshooting complex infrastructure and platform issues at 3rd and 4th Line support levels.
• Demonstrable experience operating within Agile, DevOps, or product-aligned delivery teams.
• Experience using infrastructure monitoring, performance management, and operational tooling.
• Working knowledge of Jira, Confluence, and IT Service Management platforms.
• Good understanding of hybrid environments incorporating on-premise and cloud-hosted services.
• Familiarity with NCSC security guidance, Secure by Design principles, Zero Trust architectures, and UK Government security frameworks.

Desirable

• Experience supporting products from vendors such as Everfox (Deep Secure/Garrison), Owl Cyber Defense, Opswat, Viasat CDS, Forcepoint, or similar Cross Domain technologies.
• Experience working within MOD, Defence Digital, Home Office, Cabinet Office, UKIC, Law Enforcement, or other secure government programmes.
• Relevant qualifications in Computer Science, Information Technology, Systems Engineering, Cyber Security, or equivalent practical experience.
• Experience supporting cloud infrastructure platforms including Microsoft Azure, AWS, and GCP.

Supplementary Information

• The role may require occasional out-of-hours work to support maintenance activities, security updates, platform upgrades, and major incident response.
• Occasional travel between organisational locations may be required.
• Candidates must hold current SC Clearance and be willing and eligible to obtain Developed Vetting (DV).