Our client is looking for an experienced infrastructure engineer to join the Compute & Storage workstream on a major Critical National Infrastructure (CNI) virtualisation programme, on an initial 6-month contract. You'll support the programme from Low-Level Design authoring through to build and commissioning of a dual-site VMware Cloud Foundation/vSAN platform.
Key Responsibilities
Author Low-Level Design content for the Compute & Storage platform, turning the agreed HLD architecture into build-ready detail
Support the build, commissioning and validation of a 50+ node HCI platform across two sites
Work closely with the Network, Identity, Security and OT Applications workstreams to deliver a coherent, joined-up build
Essential Experience
Hands-on production experience with VMware vSphere and vSAN, ideally vSAN ESA, including cluster design, RAID/FTT policy and encryption configuration
Experience with HPE ProLiant hardware, covering deployment, firmware management and iLO configuration
Solid understanding of enterprise backup and DR concepts, with hands-on experience of an enterprise backup platform (Rubrik is a strong plus)
Working knowledge of Windows Server infrastructure (Active Directory, PKI/AD CS, RDS), sufficient to coordinate effectively with the Identity workstream
Ability to author and review technical design documentation (LLDs, diagrams, build guides, configuration standards) to a high, audit-ready standard
Comfortable working in a regulated, security-conscious environment, with the confidence to engage customer stakeholders and third-party vendors
Desirable
Familiarity with the Purdue Model and OT/IT network segregation principles
Awareness of OT/ICS security frameworks such as IEC 62443, NCSC CAF or NIST 800-82
Experience of data centre facilities planning (power, cooling, rack layout), or willingness to work closely with facilities teams on this
Working knowledge of PowerCLI or equivalent VMware automation/Scripting
Awareness of SIEM and security monitoring tooling (eg LogRhythm, SolarWinds, Nozomi) from an infrastructure-hosting perspective, without needing to own the tools