IT Infrastructure and Security Engineer

About the role

Zentso builds and operates CloudToolz, a revenue-critical SaaS platform layered on top of iMIS RiSE association management software, serving clients across the UK, Europe, United States, and Asia Pacific. The platform encompasses workflow automation, form building, CRM, CMS, and payment processing capabilities delivered to organisations in multiple sectors. We are seeking a motivated IT Infrastructure and Security Engineer to support the global infrastructure and security posture underpinning CloudToolz and Zentso's internal systems. This is a hands-on, junior-to-mid-level role working closely with the IT Infrastructure and Security Lead and the CTO, assisting with day-to-day operations, security tasks, and the ongoing migration toward a containerised, Kubernetes-based deployment model. The successful candidate will be comfortable working across a distributed, multi-region environment, contributing directly to uptime, security, and compliance outcomes for a production platform. A key part of this role is supporting Zentso's transition to Kubernetes and helping build out an observability practice around Grafana OSS, alongside contributing scripts and small applications that automate and support infrastructure operations. Tasks Infrastructure and Platform Operations Help manage global infrastructure spanning Windows Server 2022, SQL Server, MongoDB, Redis, and Cloudflare across four regions, supporting the availability, performance, and scalability of the revenue-critical CloudToolz platform. Support deployments of new CloudToolz releases (ASP.NET Core, integrating with Dynamics, iMIS, Salesforce, and native CRM/CMS) and contribute to the Kubernetes migration, including cluster operations such as deployments, scaling, network policies, and RBAC. Help build and maintain a Grafana OSS observability stack — dashboards, alerting, and integration with metrics, logs, and traces.Assist with DNS, CDN, WAF, and DDoS protection via Cloudflare; monitor system performance and participate in incident response and recovery. Maintain documentation, runbooks, and disaster recovery procedures. Write shell scripts and small infrastructure-related applications (automation tools, monitoring utilities, internal dashboards) in coordination with the Infrastructure Lead. Security Operations Support identity and access management, endpoint protection, and vulnerability management. Help administer policies across Microsoft 365, Bitwarden, Bitdefender GravityZone, and KnowBe4. Contribute to GDPR/ISO 27001-aligned data protection policies, security awareness training, phishing simulations, and threat monitoring/response. IT Systems Administration Support Microsoft 365 administration (Exchange Online, SharePoint, Teams, Entra ID) and Salesforce administration within scope. Share responsibility for endpoint security and password management configuration. Strategy and Continuous Improvement Provide input on infrastructure scaling, architecture decisions, and the containerisation roadmap. Support infrastructure-as-code adoption and automate routine operations using PowerShell, shell scripting, and other languages. Contribute to sprint planning for environment-level requirements and participate in on-call rotation. Requirements Essential 2+ years of experience in IT infrastructure, cloud operations, systems administration, or DevOps. Hands-on experience with Windows Server 2022, SQL Server, MongoDB, and Redis in operational contexts.Practical Cloudflare experience (DNS, WAF, CDN, security features). Working proficiency in Microsoft 365 administration, including Entra ID, Exchange Online, and SharePoint. Hands-on Kubernetes experience: workload deployment, basic cluster operations, networking (ingress, network policies), and RBAC. Solid understanding of networking fundamentals (firewalls, VPNs, DNS, access control). Working knowledge of GDPR and experience supporting compliance controls. Ability to write shell scripts and program in

Skills