Senior Infrastructure Compliance Engineer

Key Accountabilities and Responsibilities Compliance Leadership & Governance Act as the compliance and assurance owner for the Wintel Server estate. Define, own, and continuously improve server compliance frameworks, hardening standards, and configuration baselines. Translate regulatory, security, and client requirements into practical technical controls. Support risk identification, assessment and remediation. Assist in overseeing third-party BaaS providers to ensure full compliance with contractual agreements and service level expectations. Technical Authority & Platform Assurance Serve as the senior technical authority for Microsoft Windows operating systems specialising in OS patching and OS upgrades. Ensure Windows platforms are securely built, patched, hardened, monitored, maintained and covered by appropriate backup. Review and approve high-risk changes, ensuring compliance, resilience, and audit readiness are maintained. Own, manage and maintain patch management tooling (currently ManageEngine Endpoint Central), ensuring accurate configuration, maintenance and updates are applied, user training it delivered where appropriate. Ensure 3rd party suppliers of BaaS are delivering services that meet business requirements, attend service review meetings driving our requirements to delivery. Security, Risk & Resilience Own the patch management for Windows environments ensuring the latest updates are tested and applied to all devices in a timely manner supporting the needs of the business while maintaining our security posture. Work closely with Technology Assurance and Security Operations teams to implement, validate, and continuously improve security tooling and controls. Ensure patch compliance, and remediation processes are effective and measurable, supporting the vulnerability management function. Support Business Continuity and Disaster Recovery using the backup tooling and 3rd party backup suppliers. Monitoring, Reporting & Continuous Improvement Establish and maintain compliance metrics, dashboards, and reporting for senior IT and risk leadership. Identify systemic risks and lead continuous improvement initiatives to strengthen infrastructure assurance. Drive standardisation and automation of compliance controls where appropriate. Work collaboratively with management to monitor and evaluate third-party BaaS suppliers’ performance against contractual commitments to Paragon. Support supplier governance activities for BaaS partners, ensuring adherence to Paragon’s contractual, performance, and risk management standards. Strategy, Stakeholder & Leadership Engagement Act as a trusted advisor to Infrastructure, Security, Risk, and Senior IT Leadership. Support Wintel infrastructure strategy to ensure compliance-by-design. Work closely with platform engineers, cloud teams, and third-party vendors to embed governance into delivery. Provide technical mentorship and compliance guidance to engineers across the hosting organisation. Participate in on-call and out-of-hours support as required. Travel to Paragon or client sites when necessary. Essential Skills and Experience 5-8yrs of hands on experience of extensive experience supporting Microsoft Windows Server (2016/2019/2022) in large enterprise environments. Ready to work in UK shift hours from office. Proven experience in infrastructure compliance, governance, assurance, or risk-focused engineering roles. Strong knowledge of Active Directory, Group Policy, DNS, DHCP, and Windows security models. Strong understanding of hardening standards, vulnerability management, and security frameworks. Strong experience working in ITIL-governed operational and change environments. Advanced documentation, reporting, and stakeholder communication skills. Experience operating across multi-site and multi-region estates. Desirable Skills and Qualifications Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC, PCI-DSS, or similar frameworks. Strong PowerShell scripting skills for compliance validation and reporting automation. Experience with VMware and Hyper-V virtualisation platforms. Exposure to cloud and hybrid Wintel environments. Microsoft and/or security-related certifications. Experience influencing or contributing to infrastructure architecture and design decisions.

Apply Now