IT Infrastructure and Security Engineer

IT Infrastructure and Security Engineer #TEAMBULK ARE HIRING AN IT INFRASTRUCTURE AND SECURITY ENGINEER At Bulk ™, we believe the gym changes everything. It makes you feel stronger, fitter and healthier. For 20 years, we’ve been developing elite sports nutrition products for every type of training. Trusted by Olympic athletes and everyday gym-goers, we help you power through training, push your limits, and achieve more. Join us, and be part of what's next. IN A NUTSHELL As the IT Infrastructure and Security Engineer, you’ll oversee Bulk’s IT infrastructure and security posture, creating a resilient technical foundation while supporting AI adoption across the business. This role blends hands-on infrastructure management and cyber defence with strategic improvements, threat management, and compliance. You’ll also partner with senior leadership to optimise key toolsets that drive Bulk’s ongoing growth. WHAT WILL YOU BE DOING? Infrastructure Oversee the planning, design, implementation, monitoring, and maintenance of Bulk’s IT infrastructure, including on-premise and cloud-based systems (Google Workspace, Azure, network, firewall, VPN, etc). Ensure system reliability, resilience, performance, and secure configuration, and updates, adhering to industry best practices. Lead infrastructure projects, from capacity planning to deployment, to support evolving business requirements. Support 2nd and 3rd line issues, guiding troubleshooting and resolution in line with SLAs Create and maintain technical documentation, policies, and procedures, ensuring smooth handover to Service Desk teams. Lead the incident response lifecycle, including managing security incidents and data breach containment, eradication, and post-mortem analysis. Serve as a dedicated Tier 3 escalation point for the Helpdesk team, providing expert advanced technical support and resolution for complex incidents. AI Tooling & Enablement Own the setup, configuration, and maintenance of AI tooling across the business (e.g., Claude Code, Cowork, Codex-style coding/agent tools), including integrations, MCP server configuration, and connector management. Manage user access, permissions, and governance for AI tools, ensuring least-privilege access and secure connector/integration setup. Partner with teams to onboard new AI tools and integrations, balancing productivity gains with security and compliance requirements. Cybersecurity Develop and implement security measures to protect Bulk’s IT environment, continuously enhancing the security framework. Monitor, investigate, and remediate security alerts, incidents, and Indicators of Compromise (IOCs). Conduct threat analysis to address new and emerging risks; deploy response strategies to mitigate vulnerabilities. Manage and optimise security tools, including Next-Gen SIEM, SOAR, EDR/MDR/XDR, and cloud security solutions (CASB, ZTNA, SASE). Lead cybersecurity audits, compliance initiatives, and certification efforts (Cyber Essentials, ISO 27001). Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions. Perform regular vendor security assessments and coordinate with stakeholders on secure technology solutions. WHAT ARE WE LOOKING FOR? Bachelor’s degree in Cybersecurity, IT, or a related field; relevant certifications (e.g., CISSP, CISM, CompTIA, ITIL). 3+ years’ experience in infrastructure and security management within a medium-sized enterprise. Proficient in networking, cloud, and endpoint security technologies, including CrowdStrike, Cisco, Azure, VSphere, Windows Server, Mac/Windows, Jamf/Intune MDMs Automox, and VPNs. Hands-on experience with infrastructure management, cloud solutions (Azure, Google Workspace), and security frameworks. Strong knowledge of security monitoring, incident response, and threat analysis, including managing IOCs and remediation. Experience with compliance standards (e.g., Cyber Essentials, ISO 27001) and conducting vendor security assessments. Experience setting up and administering AI coding/agent tools (e.g., Claude Code, GitHub Copilot, Codex) and their integrations, including MCP servers, connector permissions, and access management. Desirable Skills ITIL and project management certifications (e.g., Prince2). Advanced knowledge of infrastructure best practices and proactive problem-solving skills. Experience working with Netskope. Familiarity with emerging AI infrastructure patterns (agentic tools, MCP, connector-based integrations) and associated access control best practices. Excellent communication and team leadership abilities. Hands-on experience with Netskope CASB/SSE, including SSL/TLS inspection, DLP, Zero Trust architecture, CASB policy design, and SCIM-based provisioning to support enterprise cloud security. WHAT ARE THE GAINS? Monthly Bulk Bank Benefits Allowance 🏦 including a subsidised Gym Membership 🏋️ A day off to celebrate your Birthday 🎂 PerkBox Subscription 👍 60% discount on all Bulk ™ products 💰 Flexi Start 🕙 Additional Annual Leave (optional) 🌴 Teammate Pension Scheme 💰 Life Assurance 💟 Medicash 👩‍⚕️ A day off for Volunteering (optional) 🤗 Cycle to Work Scheme 🚲 Enhanced Maternity & Paternity leave 🐣 and workplace nursery scheme 🧒 Bulk ™ Pantry 🍴 Happy Hour Drinks Fridge (Thursdays & Fridays) 🎉 Summer Working Hours 🌞 LOCATION : Colchester, UK HYBRID : 3 days in the office, 2 days working from home OUR COMMITMENT 🌈 Bulk ™ is a place where employees have a voice fundamental to our success as a business. Building a diverse and inclusive team enables us to reach and connect with our global customers, from developing delicious recipes to how our brand is built and perceived. Regardless of age, disability, race, gender, religion, sexual orientation, education, neurodiversity or any protected characteristic, if you are a passionate risk-taker and eager to make a difference in sports nutrition, we want to hear from you. We know that a CV doesn’t begin to scratch the surface, and that the things that make you who you are could be a real game-changer for us. We are proud to be an equal opportunities employer. PRIVACY 🔐 Bulk ™ takes your privacy seriously and will only use your personal information to administer your application for this role. When you apply, we shall process your details for this vacancy only and we will not pass your details onto a third party. We may contact you by email, text or telephone about the progress of your application. This processing is conducted lawfully on the basis of legitimate interests. Department Technology Locations Colchester Remote status Hybrid Colchester Perks & Benefits PerkBox Subscription 👍 All our teammates have a PerkBox subscription which includes free cinema tickets, free coffee's on the go and amazing discounts! 60% discount 💰 Our teammates love our products - so we give 60% discount! Additional Annual Leave ⛱ Rest & Recovery is important! Purchase up to 3 additional annual leave days. Pension 💰 We offer a workplace pension to all our teammates. Cycle to Work Scheme 🚲 The commute to work is just a cardio workout, right? Happy Hour 🎉 Grab a drink and enjoy our Happy Hour every Thursday and Friday afternoon. Bulk Pantry 🍴 We know all of our teammates love our products and so we give them to you. All we ask is just for a small charity donation in return. Summer Hours ☀️ Because we all need that Vitamin D Workplace & Culture We're building a talented, passionate, driven and world-class team at bulk™ Want to join the team? Create a profile to hear first about new roles as they become available.